Skip to content

Hackers Exploiting VMware ESXi Instances in the Wild Using zero

Cybersecuritynews •Guru Baran • January 8, 2026

Hackers are exploiting VMware ESXi instances in the wild with a zero-day exploit toolkit that chains multiple vulnerabilities for VM escapes. Cybersecurity firm Huntress disrupted one such attack, attributing initial access to a compromised SonicWall VPN.​ Threat actors gained a foothold via SonicWall VPN, then used a compromised Domain Admin account for lateral movement to […]

Extracted Entities

Attack Types (1)