QUIRSO

Mentions · 7d1
Mentions · 30d1
All mentions4
First seenAug 17, 2026
Last mentioned2d ago

Timeline

4 articles · newest first

Warp Panda used low-severity ESXi flaw CVE-2026-41709 as a zero-day

CISA added the logging bug to KEV and gave US federal agencies two weeks to install the patched ESXi builds.

SecurityWeekupdated Oct 29, 16:25 UTC · 1d agofirst Oct 29, 08:01 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-41709 CVE-2026-59309 CVE-2026-593101

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Unit 42 exposed CL-CRI-1171, a pay-per-install operation spreading OfferLoader and Insomnia RAT via YouTube and SEO poisoning to corporate and government targets.

The Hacker NewsSep 17, 17:32 UTC · Sep 17, 2026Threat actorExploitedCVE-2026-593101

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-59310 CVE-2026-65400 CVE-2026-688203

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk

QUIRSO attributes exploitation of VMware vCenter CVE-2026-59310 to a suspected China-nexus actor that hit 361 IPs in 47 countries, deploying backdoors and Babuk.

The Hacker NewsAug 17, 16:59 UTC · Aug 17, 2026Threat actorExploitedCVE-2026-59310 CVE-2026-593093 · 1 read

Related CVEs

by mentions

CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2026-593098%9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
published Jul 30, 2026vmware vcenter server
CVE-2026-654002%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEV
CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV
CVE-2026-41709<1%2.7
Insufficient logging in VMware ESX for admin operations
published Jul 30, 2026Broadcom VMware ESXKEV

Appears with

VMwarevendor · 4
Broadcomvendor · 2
VMware vCenterproduct · 2
vCenterproduct · 2
Palo Alto Networksvendor · 1
Jamfvendor · 1
Screen Sharingproduct · 1
ForestTigermalware · 1
Lazarus Groupthreat actor · 1
GCleanermalware · 1
Warp Pandathreat actor · 1
CISAorganization · 1
CL-CRI-1171threat actor · 1
GeoServervendor · 1
linuxFilemalware · 1
Insomnia RATmalware · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.