China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

2026-10-29T07:23:59Z•1a95b8c5643a6eb662a2f42c51de42da00ab143c72659bf5d0b3327a4f0559f4
CVE-2026-101767CVE-2026-104351CVE-2026-111497CVE-2026-35273CVE-2026-41709CVE-2026-80097CVE-2026-86950AI-assisted attacksChina-nexusKEVLazarusRCESSRFUEFIVolt Typhoonactive exploitationcloud securitycredential theftcritical infrastructuredevice-code phishingfirmwareincident responsemalwarephishingprivilege escalationsupply-chain compromisezero-day

What happened

The feed highlights widespread active exploitation and disclosure of critical vulnerabilities across VMware ESX, Palo Alto Networks management interfaces, Oracle E-Business Suite and PeopleSoft, Adobe Commerce, UEFI/EDK II, Apple CoreGraphics, Microsoft Authenticator, Tailscale SSH, and other products. It also covers China- and North Korea-linked campaigns, phishing and AI-assisted attacks, malware disruption, supply-chain and firmware risks, and law-enforcement action against criminal infrastructure. Multiple items describe zero-days or vulnerabilities already exploited in the wild and should

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
1a95b8c5643a6eb662a2f42c51de42da00ab143c72659bf5d0b3327a4f0559f4
Enrichment time
2026-10-29T07:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.