VMware ESXi zero-days likely exploited a year before disclosure
Published on January 8, 2026
Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a year before the targeted vulnerabilities became publicly known. [...]