🔥 VMware vCenter → ESXi → Ransomware A suspected China-nexus actor reportedly weaponized CVE-2026-59310 just 5 days after disclosure. The campaign hit an estimated 361 IPs across 47 countries and ultimately deployed Babuk-derived ransomware against ESXi hosts. The interesting part is the attack chain: vCenter compromise → root access → persistence → credential theft → ESXi lateral movement → VMFS encryption I broke down the full chain, including the attacker’s persistence and ESXi ransomware deployment: 👉 https://thecybersecguru.com/news/vmware-vcenter-cve-2026-59310-babuk-esxi-ransomware/ #infosec #cybersecurity #VMware #vCenter #ESXi #ransomware #CVE202659310