ChinaLinked Hackers Exploited VMware ESX ZeroDay to Reduce Audit Trail Visibility

The US Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities KEV catalog after CrowdStrike revealed that it had been weaponized by a Chinanexus threat actor known as Warp Panda in attacks targeting the US legal sector The vulnerability in question is CVE202641709 CVSS score