China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

CISA added a Broadcom VMware ESX flaw, CVE-2026-41709, to its Known Exploited Vulnerabilities catalog on Wednesday after CrowdStrike revealed China-nexus threat actor Warp Panda weaponized it in attacks on the U.S. legal sector. The zero-day reduces audit trail visibility, aiding evasion. CISA's listing signals active exploitation and urges federal agencies to patch promptly.