China-nexus APT

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 19, 2026
Last mentionedAug 19, 2026

Timeline

1 articles · newest first

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.

The Hacker NewsAug 19, 15:26 UTC · Aug 19, 2026Exploit / PoCExploitedCVE-2026-65400 CVE-2026-55040 CVE-2026-59310+14

Related CVEs

by mentions

CVE-2026-6540018%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEVPoC
CVE-2026-3382477%9.8
Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
published Apr 14, 2026Microsoft Windows 10KEV
CVE-2026-5931062%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-5504070%9.1
Authentication Bypass in Microsoft SharePoint Server
published Jul 14, 2026Microsoft SharePoint ServerKEVPoC ×2

Appears with

VMwarevendor · 1
CISAorganization · 1
Microsoft Internet Key Exchange Service Extensionsproduct · 1
VMware vCenterproduct · 1
reverse_sshmalware · 1
Unit 42organization · 1
Broadcomvendor · 1
Chinese-speaking threat actorthreat actor · 1
macOSproduct · 1
Applevendor · 1
DeepSeekai model · 1
Microsoftvendor · 1
Microsoft SharePointproduct · 1
Babuk-derived ransomwaremalware · 1
Monero minermalware · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Aug 19, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.