News
cybersecurity Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster - Aikido Security cybersecurity Cisco Warns of Actively Exploited Firewall Vulnerability Allowing Remote DoS Attacks - CyberPress threat-intel Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses - GBHackers threat-intel 11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog - GBHackers threat-intel 12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million - SecurityWeek cybersecurity Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys - The Hacker News threat-intel Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls - GBHackers threat-intel 12 SOAR Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 SIEM Tools: The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day - SecurityWeek cybersecurity Cyber Vulnerabilities Besiege Italy, Absent Clear Cause - Dark Reading cybersecurity Lumen Uncovers Secret Chinese Hacking Network Behind Years of Zero-Day Attacks on U.S. Infrastructure - CyberPress
1 / 15
All news ›
Cybersecurity

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.