1. Executive summary CrowdStrike reports that a China-nexus group it tracks as Warp Panda used an insufficient-logging flaw in Broadcom VMware ESX, CVE-2026-
1. Executive summary CISA added CVE-2026-41709, an insufficient-logging flaw in VMware ESXi rated CVSS 2.7 LOW (CWE-778), to the CISA KEV
1. Executive summary CVE-2026-41709 is an insufficient logging vulnerability in Broadcom VMware ESX (CWE-778) that lets an actor who already holds admin access
1. Executive summary CrowdStrike's 2026 Legal Threat Landscape Report, covering September 2025 to August 2026, records that intrusions against the legal sector nearly doubled