The Hacker News پنجشنبه ۷ آبان ۱۴۰۵ · ۰۹:۵۲

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:

Vulnerabilities & Zero-Day Threat Intelligence

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۱:۵۵

PHP2Shell will persist in enterprise environments for years

Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control. NAS devices, firewalls, VPN gateways, printers, building mana…

Vulnerabilities & Zero-Day Cloud Security AI Security

منبع

SecurityWeek پنجشنبه ۷ آبان ۱۴۰۵ · ۱۱:۳۱

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek.

Vulnerabilities & Zero-Day

منبع

Securelist (Kaspersky) پنجشنبه ۷ آبان ۱۴۰۵ · ۱۱:۳۰

Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia

Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government OS.

Malware & Threats Threat Intelligence

منبع

Dark Reading پنجشنبه ۷ آبان ۱۴۰۵ · ۱۱:۳۰

Cyber Vulnerabilities Besiege Italy, Absent Clear Cause

Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.

Vulnerabilities & Zero-Day

منبع