Expensive attacks are not always the most sophisticated ones.
This week provided ample evidence of that. Exposed services were targeted, old vulnerabilities were exploited anew, browser sessions became avenues for attacks, and supply-chain issues continued to extend beyond the initial breach. Much of this stemmed from pre-existing access and security measures that presumed no one would scrutinize them too closely.
There was nothing extraordinary about it. Just numerous minor vulnerabilities escalating into larger issues. Here’s what caught our attention.
⚡ Threat of the Week
A suspected APT linked to China is believed to be behind the exploitation of a recently patched security vulnerability in VMware vCenter. The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a critical directory-traversal flaw in the VMware vCenter server that could be leveraged by an attacker to execute arbitrary code. In at least one instance of compromise, the attacks resulted in the installation of a backdoor and a reverse SSH binary, ultimately leading to the deployment of Babuk-derived ransomware.
Source: Original article
