Alleged Hackers Tied to China Exploit VMware Vulnerability Across 47 Nations

An alleged hacking collective associated with China is taking advantage of a significant vulnerability in Broadcom's VMware vCenter Server, affecting systems in 47 nations. Researchers from the German company QUIRSO have identified 361 compromised IP addresses, with the United States ranking second with 41. The vulnerability, designated CVE-2026-59310, has a severity rating of 9.8 out of 10, allowing unauthorized attackers to execute code with root access. Broadcom released a patch on July 29, while exploitation activities commenced on August 3. According to Shadowserver, all victims should be regarded as entirely breached. The attackers are utilizing Babuk-based ransomware, which researchers believe serves as a distraction to eliminate forensic traces. Broadcom asserts that no alternative solutions exist; patching remains the sole remedy.

Disclosure: This video contains stock footage and content created or enhanced using AI-assisted tools.