China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

CISA on Wednesday added a Broadcom VMware ESX flaw, CVE-2026-41709, to its Known Exploited Vulnerabilities catalog after CrowdStrike revealed a China-nexus actor known as Warp Panda had weaponised it in attacks targeting the U.S. legal sector. The flaw reduces audit-trail visibility, allowing certain operations to be performed without being logged.