CISA: Windows Task Host Flaw Now Exploited by Ransomware Gangs

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.

VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update

A fast-moving campaign is turning a VMware vCenter flaw into a route to full control of virtual infrastructure. Attackers are abusing CVE-2026-59310, a critical path traversal bug in the Syslog Server, to run commands as root without a normal login. The activity moved from disclosure to widespread exploitation in days. QUIRSO mapped 361 affected IP addresses in 47 countries, with technology, research, education and telecommunications environment…

Suspected China APT Behind VMware Exploitation: Cybersecurity Recap

The cybersecurity landscape witnessed a surge in attacks this week, with various vulnerabilities being actively exploited by threat actors. One notable incident involved a suspected China-nexus APT exploiting a newly patched security flaw in VMware vCenter. The attacks targeted CVE-2026-59310, a severe directory-traversal vulnerability that could allow malicious actors to execute arbitrary code. The exploitation led to the deployment of a backdo…

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code