VMware vCenter China-Nexus APT Actively Exploiting Directory Traversal to Deploy Babuk Ransomware on ESXi Hosts (CVE-2026-59310)

Scope: VMware vCenter Server All Versions Prior to VMSA-2026-0006.1 Patched Releases

Severity: Red

Read More

Apple macOS Screen Sharing Logic Flaw Actively Exploited to Deploy Monero Miner via Root Command Execution (CVE-2026-43760)

Scope: macOS Systems with Screen Sharing or Remote Management Enabled and VNC Password Authentication Turned On (macOS Tahoe Prior to 26.6 and macOS Sonoma Prior to 14.8.8)

Severity: High

Read More

Windows Server 2022 Reaches End of Mainstream Support in 60 Days — Begin Migration to Windows Server 2025 Now

Scope: Organizations Running Windows Server 2022 (On-Premises and Hosted Environments)

Severity: Medium

Read More

Cisco ASA and Firepower FTD VPN Denial of Service Under Active Exploitation (CVE-2026-20349)

Scope: Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) with Remote Access SSL VPN Enabled

Severity: High

Read More

Windows Container Isolation Driver Publicly Disclosed Zero-Day Grants Administrator Privileges (CVE-2026-72971)

Scope: Windows 10, Windows 11, Windows Server 2019, 2022, and 2025

Severity: High

Read More

Windows DNS Server Unauthenticated Remote Code Execution Patched in August Patch Tuesday (CVE-2026-62878)

Scope: Windows Server 2019, 2022, and 2025 with DNS Server Role Installed

Severity: Red

Read More