⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Summary: A suspected China-nexus APT is assessed to be behind exploitation of CVE-2026-59310, a directory-traversal flaw in VMware vCenter rated CVSS 9.8 that allows arbitrary code execution, and at least one compromised instance led to a backdoor, a reverse SSH binary, and Babuk-derived ransomware. The same weekly roundup lists high-severity or actively targeted flaws across Microsoft Windows, SAP Commerce Cloud, Adobe, Cisco Secure Firewall, Zoom, Apple macOS, ClamAV, SonicWall, Fortinet, WordPress, and others, and cites a survey finding 78% of practitioners now include AI in their security strategy while only 36% have a formal AI risk program.
What you should know: In the investigated vCenter case, the ransomware is assessed as a smoke screen meant to encrypt evidence and hinder forensics rather than the actual objective, so an encryption event may be covering an intrusion you have not yet found. And with 78% of practitioners putting AI into their strategy but only 36% running a formal AI risk program, most organizations are expanding their attack surface faster than their governance.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-18412 CVE-2026-20337 CVE-2026-20338 CVE-2026-20339 CVE-2026-20345 CVE-2026-20346 CVE-2026-20347 CVE-2026-20348 CVE-2026-20349 CVE-2026-26035 CVE-2026-27302 CVE-2026-43637 CVE-2026-48362 CVE-2026-53413 CVE-2026-53414 CVE-2026-53415 CVE-2026-58231 CVE-2026-59310 CVE-2026-63720 CVE-2026-65321 CVE-2026-65400 CVE-2026-65640 CVE-2026-66145 CVE-2026-66147 CVE-2026-6726 CVE-2026-6727 CVE-2026-68820 CVE-2026-70465 CVE-2026-70468 CVE-2026-71398
Related: CVE-2026-65400: Apple macOS Improper Authentication Vulnerability Known Exploited Vulnerabilities · Aug 18, 2026
CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability Known Exploited Vulnerabilities · Aug 18, 2026
CVE-2026-68820: Microsoft Windows Ancillary Function Driver for Win Sock Use-After-Free Vulnerability Known Exploited Vulnerabilities · Aug 11, 2026