Threat actorcritical

⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

The Hacker Newsby @TheHackersNewsJan 12, 2026 · 16:26 UTC (Jan 12, 2026)13 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-21858 CVE-2025-22224 CVE-2025-22225 CVE-2025-22226

Tags: cve-2026-21858 cve-2025-22224 cve-2025-22225 cve-2025-22226 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-22224	TOCTOU Out-of-Bounds Write in VMware ESXi and Workstation Enables Guest-to-Host Escape	8.2	2%	KEV	Mar 4, 2025 KEV Mar 4, 2025
CVE-2025-22225	Sandbox Escape via Arbitrary Kernel Write in VMware ESXi (Actively Exploited)	8.2	1%	KEVRansomware	Mar 4, 2025 KEV Mar 4, 2025
CVE-2025-22226	Out-of-Bounds Read in VMware ESXi, Workstation, and Fusion Leaks Host Memory via HGFS	6.0	2%	KEV	Mar 4, 2025 KEV Mar 4, 2025
CVE-2026-21858	Unauthenticated RCE in n8n Workflow Automation (Ni8mare)	10.0	78%	PoC ×2	Jan 8, 2026

From the original article

13 min read at thehackernews.com

 Ravie Lakshmanan  Jan 12, 2026 Hacking News / Cybersecurity This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn’t need novel tricks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.