Chinese APT Exploits ESXi Logging Flaw as Zero-Day to Evade Detection

CVE-2026-41709, a low-severity ESXi logging flaw, was exploited as a zero-day by Chinese hackers to perform privileged operations without generating logs. The vulnerability allows attackers with admin access to evade audit trails, indicating a sophisticated espionage campaign targeting virtualized infrastructure. The full scope and affected entities remain undisclosed, but the operational security implications for enterprises are significant.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works