Attackers chain two unpatched AhsayCBS flaws to drop webshells and crypto miners

The AhsayCBS backup platform used by MSPs is still exploitable through an authentication bypass and a command injection flaw, including in its latest 10.3.4 release. Restrict the admin console to trusted IPs and treat any anomaly as a compromise until proven otherwise.