Posts of last few hours

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge. Huntress first observed exploitation on October 7, 2026, at 23:20:15 UTC. By October 8, its researchers had seen five organizations targeted, with attackers checking systems and setting up tools to maintain access. […]

The post Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners appeared first on Cyber Security News.

The FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026, as part of its investigation into the hacking group ShinyHunters. The arrest links a professional involved in ransomware response to an alleged cyber extortion conspiracy. However, the evidence behind the charges remains largely sealed, and the allegations have not been proven […]

The post FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation appeared first on Cyber Security News.

Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose access to Windows Update, including security fixes delivered through the service. Microsoft is distributing the replacements through a process known as certificate rotation. “However, the key to getting updates from … More →

The post Windows PCs missing key updates could lose security fixes in 2027 appeared first on Help Net Security.

Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from 90 days. Subscribers who already use Let’s Encrypt’s optional 45-day or 6-day certificates are not affected. The organization expects the last 90-day certificate to expire on May 11, 2027, and will not revoke any valid certificates during the transition. Why the … More →

The post Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 appeared first on Help Net Security.