China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
2026-10-29T07:23:59Z•1a95b8c5643a6eb662a2f42c51de42da00ab143c72659bf5d0b3327a4f0559f4
CVE-2026-101767CVE-2026-104351CVE-2026-111497CVE-2026-35273CVE-2026-41709CVE-2026-80097CVE-2026-86950AI-assisted attacksChina-nexusKEVLazarusRCESSRFUEFIVolt Typhoonactive exploitationcloud securitycredential theftcritical infrastructuredevice-code phishingfirmwareincident responsemalwarephishingprivilege escalationsupply-chain compromisezero-day
What happened
The feed highlights widespread active exploitation and disclosure of critical vulnerabilities across VMware ESX, Palo Alto Networks management interfaces, Oracle E-Business Suite and PeopleSoft, Adobe Commerce, UEFI/EDK II, Apple CoreGraphics, Microsoft Authenticator, Tailscale SSH, and other products. It also covers China- and North Korea-linked campaigns, phishing and AI-assisted attacks, malware disruption, supply-chain and firmware risks, and law-enforcement action against criminal infrastructure. Multiple items describe zero-days or vulnerabilities already exploited in the wild and should
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 1a95b8c5643a6eb662a2f42c51de42da00ab143c72659bf5d0b3327a4f0559f4
- Enrichment time
- 2026-10-29T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.