Skip to content
Threat Feed
Subscribe

Product

VMware ESXi

3 briefs RSS
critical advisory

Critical Vulnerabilities in VMware vCenter and ESX Products

Multiple critical vulnerabilities, including CVE-2026-59309 and CVE-2026-59310 with CVSS 9.8, affect VMware vCenter and ESX/ESXi products, enabling unauthorized access without credentials, arbitrary code execution, virtualization escape, information disclosure, and defense evasion, which could lead to full system compromise and data breaches.

PoC VMware vCenter +13 virtualization critical-vulnerability rce unauthorized-access privilege-escalation defense-evasion esxi vcenter
5t 5c updated
critical threat

Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector

The Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.

www.acosol.es +46 Qilin +1 ransomware double-extortion golang agriculture food-production
2r 13t 178i updated
medium advisory

ESXi VM Discovery via ESXCLI Commands

Adversaries may use ESXCLI commands to discover virtual machines on an ESXi host, potentially indicating reconnaissance for high-value targets, environment mapping, or preparation for data theft or destructive operations.

VMware ESXi esxi vmware discovery
2r