VMware ESXi Instances Targeted by Zero-Day Exploit Campaign

VMware ESXi Instances Targeted by Zero-Day Exploit Campaign

First seen 8 Jan 2026, 09:52 UTC •CybersecuritynewsGbhackersCyberpressThehackernews •87% similarity •24.3

Article Content

Browse articles
ThreatCluster

Hackers are exploiting VMware ESXi instances using a zero-day exploit toolkit that chains multiple vulnerabilities for VM escapes. The attack campaign was disrupted by Huntress, which attributed initial access to a compromised SonicWall VPN, allowing attackers to move laterally using a compromised Domain Admin account.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

SonicWall VPN VMware ESXi