China-Linked Hackers Used a VMware ESX Bug to Work Without Logs
CrowdStrike says China-nexus Warp Panda used CVE-2026-41709, a VMware ESX insufficient-logging flaw, as a zero-day against US law firms. CISA added it to KEV with a Nov. 11 deadline.
Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.
1 story matches your filters.
CrowdStrike says China-nexus Warp Panda used CVE-2026-41709, a VMware ESX insufficient-logging flaw, as a zero-day against US law firms. CISA added it to KEV with a Nov. 11 deadline.