Cyber Security News for October 9 2026 - Daily DefSec Brief
1. AhsayCBS backup consoles exploited, no patch — CVE-2026-105134, CVE-2026-105133 — Do: Take the AhsayCBS console off the internet — https://www.huntress.com/blog/ahsaycbs-flaws-exploit
2. China-linked crew stays in through a VPN client — CVE-2014-6278, CVE-2015-3306, CVE-2015-5477 (+ 5 more) — federal due 2026-10-11 — Do: Alert on VPN software you didn't deploy — https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a
3. NetScaler's new SAML flaw hits last week's build — CVE-2026-107406 — Fixed: 14.1-73.46 or 13.1-64.29 — Do: Update every NetScaler running SAML —…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.