NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

BACKGROUND
1 SIGNALFIRST DETECTED 12 August 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
13 Aug
Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence

REPORT · WHAT · BleepingComputerOPEN STORY
30 Jul
VMware fixes three critical flaws allowing auth bypass, VM escapes

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass

REPORT · WHAT · BleepingComputerOPEN STORY
15 Sept
CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter

REPORT · WHAT · BleepingComputerOPEN STORY
5 Sept
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution

REPORT · HOW · The Hacker NewsOPEN STORY
28 Jul
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked

REPORT · WHERE · The Hacker NewsOPEN STORY
18 May
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute

REPORT · HOW · The Hacker NewsOPEN STORY
11 Aug
Cisco warns of ASA and FTD VPN flaw exploited to crash devices

Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely

REPORT · WHAT · BleepingComputerOPEN STORY
29 Sept
Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials,

REPORT · HOW · BleepingComputerOPEN STORY
Sources
The Hacker News

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →