Daily Archives: Nov 2, 2026
CISA Warns VMware ESX Logging Vulnerability Is Being Exploited in Attacks
Chinese-linked hackers exploited a VMware ESXi zero-day to conceal activity on compromised servers during espionage operations against U.S. organizations, including law firms. CrowdStrike identified the group as WARP PANDA and reported that it used the flaw, tracked as CVE-2026-41709, in multiple intrusions, with exploitation continuing into early...
Zero-Day in Cisco Secure Firewall Exploited in the Wild to Crash...
Cisco has released security updates for CVE-2026-76418, an actively exploited vulnerability in Secure Firewall ASA and FTD software that allows unauthenticated remote attackers to trigger device restarts, causing denial of service and interrupting remote access.
The vulnerability is rated high severity with a CVSS score of...
Fake Firefox Extensions Masquerade as Phantom, Jupiter, and Bitget to Steal...
Three malicious Firefox extensions impersonated popular crypto wallets Phantom, Jupiter, and Bitget to capture users’ recovery phrases and private keys.
Whoever obtains those secrets gains control of the wallet and its funds. All three listings were present in the Firefox Add-ons store while researchers examined them...