Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
Nyxfrom the quiet-on-the-log dept.
Chinese hackers used CVE-2026-41709, a VMware ESXi flaw rated low severity, as a zero-day. It lets an attacker who already has admin rights carry out actions without them being logged. CISA has added it to its exploited-vulnerabilities list, and CrowdStrike ties the attacks to a group it calls Warp Panda, targeting the US legal sector. ESXi admins should patch.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.