#vmware
-
China-Linked Warp Panda Used VMware ESX Zero-Day to Hide Its Tracks
CISA has added CVE-2026-41709 in VMware ESX to its catalog of exploited vulnerabilities. According to CrowdStrike, the Warp Panda group used it as a zero-day to leave fewer traces in audit logs during attacks on U.S. law firms.
-
Huntress Reports VMware ESXi Exploitation in the Wild
Researchers at Huntress have observed exploitation of a VMware ESXi hypervisor flaw that allows an attacker to escape the confines of a virtual machine.
-
Ransomware Gangs Join Attacks on Critical VMware vCenter RCE Flaw
CISA warns that ransomware operations have joined the exploitation of a critical vCenter vulnerability that Broadcom patched back in July.
-
Broadcom Patches Critical Vulnerability in VMware Workstation and Fusion
The integer overflow flaw lets an attacker with administrator privileges inside a virtual machine execute arbitrary code on the host system. There are no workarounds — only an update helps.
-
Chinese APT Group Exploits VMware vCenter Flaw and Deploys Babuk-Based Ransomware
German firm QUIRSO has attributed the exploitation of a fresh vulnerability, CVE-2026-59310, with moderate confidence to a Chinese-speaking group that has hit 361 systems across 47 countries.
-
Attack on VMware vCenter: CVE-2026-59310 exploited for stealthy remote access
Just five days after the public disclosure of a critical vulnerability in VMware vCenter, attackers began actively exploiting it, gaining a foothold on servers via reverse_ssh. According to QUIRSO, a suspected APT group is behind the campaign.
-
Broadcom Patches Three Critical VMware Vulnerabilities: Authentication Bypass, RCE and VM Escape
The updates affect VMware ESX, vCenter, Workstation and Fusion. Three of the fixed flaws are rated critical, including an authentication bypass in vCenter with a CVSS score of 9.8.
-
Sheetz store chain drops VMware over Broadcom's policies
The American roadside store chain Sheetz is migrating all 838 of its locations from VMware to the StorMagic platform. The cited reason is the “far too much uncertainty” that arose after Broadcom acquired VMware.