analiza aiqbench
This article details a critical remote code execution vulnerability in VMware vCenter's Syslog Server that allows unauthenticated attackers to gain full root control over virtual infrastructure. The rapid exploitation timeline highlights the severe risks associated with internet-facing management systems and the potential for ransomware deployment via this specific supply chain attack vector.
VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update
A fast-moving campaign is turning a VMware vCenter flaw into a route to full control of virtual infrastructure. Attackers are abusing CVE-2026-59310, a critical path traversal bug in the Syslog Server, to run commands as root without a normal login. The activity moved from disclosure to widespread exploitation in days. QUIRSO mapped 361 affected IP […] The post VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update appeared first on Cyber Security News.
A fast-moving campaign is turning a VMware vCenter flaw into a route to full control of virtual infrastructure. Attackers are abusing CVE-2026-59310, a critical path traversal bug in the Syslog Server, to run commands as root without a normal login. The activity moved from disclosure to widespread exploitation in days. QUIRSO mapped 361 affected IP addresses in 47 countries, with technology, research, education and telecommunications environments among the sectors exposed. The scale illustrates why…
Extras afișat conform termenilor RSS ai publicației · 74 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · 23 aug. 2026
Critical VMware Flaws Allow Attackers to Bypass Authentication and Gain Access to the System
Cybersecurity News · 29 iul. 2026
Weekly Cybersecurity Newsletter Bulletin – CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and 20+ Stories
Cybersecurity News · 7 sept. 2026
Hackers Abuse LNK Files, PowerShell, and Python Loader to Deploy NarwhalRAT
Cybersecurity News · 15 iun. 2026