> TritonInfoSec News
Home / Oct 30, 2026 / Story
0
#6 The Hacker News general October 29, 2026 at 06:22 UTC

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-41709, a low-severity VMware ESX logging bypass flaw, to its Known Exploited Vulnerabilities catalog after CrowdStrike revealed the China-nexus group 'Warp Panda' weaponized it as a zero-day against the U.S. legal sector. The vulnerability allows attackers with administrative privileges to perform operations without leaving an audit trail, effectively blinding forensic investigators. Its abuse by a state-sponsored actor despite a low CVSS score underscores the gap between severity ratings and real-world exploitation risk.

Read full article → https://thehackernews.com/2026/10/china-linked-hac…

Relevance score: 84.0/100

# More from October 30

  1. 1
    Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen The Hacker News
  2. 2
    New Cisco firewall zero-day exploited to crash SSL VPN devices BleepingComputer
  3. 3
    Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network SecurityWeek
  4. 4
    Volt Typhoon hides zero-day attacks using 'Silent Train' framework BleepingComputer
  5. 5
    Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces The Hacker News
  6. 7
    Chrome extensions with 13.4 million installs caught hijacking searches BleepingComputer
  7. 8
    Massive leak exposes 41,000 DHS workers and undercover ICE agents Ars Technica Security
  8. 9
    Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls The Hacker News
  9. 10
    Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys The Hacker News