China-Nexus APT Exploits VMware vCenter Flaws to Deploy Babuk-Derived Ransomware
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent…
Tag: QUIRSO
VMware vCenter CVE-2026-59310 Exploited in the Wild for Persistent Remote Access
Threat actors are actively exploiting a critical directory-traversal vulnerability in Broadcom's VMware vCenter, tracked as CVE-2026-59310 (CVSS 9.8), to gain persistent remote…
QUIRSO Attributes VMware vCenter Exploitation to China-Nexus Actor
German incident response company QUIRSO analyzed the exploitation of CVE-2026-59310 and attributed it with moderate confidence to a Chinese-speaking threat actor. Their…