AhsayCBS Vulnerabilities Exploited in Wild Attacks

**AhsayCBS critical RCE chain exploited in the wild:** Two vulnerabilities in AhsayCBS (an authentication bypass and an OS command injection RCE) are being actively chained by attackers to upload webshells, gain SYSTEM-level code execution, deploy XMRig cryptominers and persistence tools, and compromise backup servers; vendors and defenders are urged to immediately restrict access and patch to 10.3.4 when available.