• Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
• NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
• Yoba malware hides in fake desktop versions of ChatGPT and Claude
• Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
• CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
• Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network
• Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
• Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws
• Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop
• Online Scam Volumes Double to Overtake Phishing
• ICO Reprimands Staffordshire Police After Domestic Abuse Breach
• Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
• NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
• MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
• Qualys CISO on what security teams can do as exploit campaigns grow
• IT bosses are confident they’ve found the certificates they don’t know about
• Japan’s GMO Internet Urges Customers to Disconnect PCs
• Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
• AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
• Energy Giant Engie Notifies Customers of Supply Chain Breach
• Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
• Hackers Infect 953 Online Stores With Scanner-Evading Code
• OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
• Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
• Copenhagen University Breach Compromises Data on Half a Million People

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks Chinese APT group Warp Panda has leveraged an insufficient logging vulnerability (CVE-2026-41709) in Broadcom’s VMware ESX bare-metal hypervisor as a …