China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

First reported by The Hacker News at 2:22 AM ET · Updated 2:22 AM · 1 source

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector.

Reported so far by one publisher.

Summary from The Hacker News.

Reporting1

The Hacker News China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility · info@thehackernews.com (The Hacker News) 2:22 AM

Cisco patches exploited CVE-2026-76418 in ASA and FTD firewalls October 29

Prolific Chinese espionage group exploits BeyondTrust zero-day October 15

Volt Typhoon used Silent Train network to conceal zero-day attacks October 28

Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List October 22

Topics Broadcom Zero-day vulnerabilities

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

Reporting1

Related