⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Broadcom has released emergency security updates for a critical VMware ESXi vulnerability that can allow an attacker to escape from a virtual machine and execute code on the underlying hypervisor host. Tracked as CVE-2026-47876 and rated 9.3 on the CVSS scale, the issue resides in the VMXNET3 network adapter.
This article details a critical vulnerability in VMware ESXi, tracked as CVE-2026-47876. The flaw is an out-of-bounds write in the VMXNET3 network adapter that could allow an attacker with local administrative privileges on a guest VM to escape to the hypervisor host.
A detailed incident analysis by Huntress Labs examines what happens after an attacker breaches a system, based on a real compromise involving SQL injection. Once inside via an unvalidated web input field, the attacker performed extensive post-breach activities: enabling Remote Desktop, creating a local admin account, disabling Windows Defender, installing BadIIS modules for traffic hijacking, and deploying an XMRig cryptocurrency miner with persistence as a Windows service.
This article provides mitigation guidance for software supply chain compromise, referencing major attacks like SolarWinds and 3CX. Google Threat Intelligence Group notes growing threats targeting open source repositories.
This Google Cloud Security post by GTIG and Mandiant examines the increasing trend of open source software supply chain compromises, highlighting major campaigns from 2025-2026. It provides mitigation and hardening recommendations based on insights from supporting customers affected by these attacks.
This Google Cloud Security post by GTIG and Mandiant examines the increasing trend of open source software supply chain compromises, highlighting major campaigns from 2025-2026. It provides mitigation and hardening recommendations based on insights from supporting customers affected by these attacks.