Babuk Ransomware Deployed in vCenter Attacks
In at least one case, the vCenter exploitation campaign led to the deployment of Babuk-derived ransomware, compromising 361 victim IPs across 47…
Tag: vCenter
China-nexus APT Exploits vCenter Vulnerability
A suspected China-nexus advanced persistent threat actor exploited CVE-2026-59310 to deploy backdoors and reverse_ssh binaries, leading to Babuk ransomware in some cases.
VMware vCenter Targeted in Ransomware Campaign
VMware vCenter Server and vCenter Server Appliance were targeted in a ransomware campaign exploiting CVE-2026-59310 and CVE-2026-59309. The attacks involved deployment of…
VMware vCenter Path Traversal Exploited
VMware vCenter vulnerability (CVE-2026-59310) allows RCE and was exploited by China-nexus APT.
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom has released security updates addressing multiple vulnerabilities in VMware ESX, vCenter, Workstation, and Fusion, including three critical-severity flaws. The most severe…
Broadcom VMware vCenter Vulnerability Exploited
Broadcom's VMware vCenter path traversal flaw (CVE-2026-59310) was exploited by a China-nexus APT, leading to ransomware deployment.