AhsayCBS flaws exploited to install webshells and cryptocurrency miners

Attackers used two security flaws in AhsayCBS, a backup management platform, to break in to at least five organizations.

They installed tools that could let them keep access and software that secretly mines cryptocurrency.

Researchers say the flaws affect even the latest version, so a listed fix may not be enough.

Until a patch is available, administrators are advised to limit access to trusted IP addresses and check for signs of intrusion.