China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
// AI summary
CISA added CVE-2026-41709, a flaw in Broadcom VMware ESX exploited by China-nexus threat actor Warp Panda, to its KEV catalog targeting the U.S. legal sector.
// from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score: