Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

6 / 16 results
Active filter:vendor: broadcom✕ clear
Unpatched Broadcom Wi-Fi WPS flaw enables remote code execution as rootcriticalbug_reportVulnerability
bug_reportVulnerability

Unpatched Broadcom Wi-Fi WPS flaw enables remote code execution as root

Broadcom Wi-Fi Protected Setup (WPS) implementation in routers and access points. Vulnerable chip families: older eCos-based models (BCM3380, BCM3383, BCM33834) - unpatchable "forever day"; newer Linux-based models (BCM3390, BCM65xx, BCM68xx) - patch…

Broadcom19 Oct · 04:29 UTC
Critical VMware Workstation/Fusion integer overflow allows VM escapecriticalbug_reportVulnerability
bug_reportVulnerability

Critical VMware Workstation/Fusion integer overflow allows VM escape

VMware Workstation and VMware Fusion versions 25H2 and 26H1. Affects systems with VMXNET3 virtual network adapter (CVE-2026-59346) and HGFS enabled (CVE-2026-59347). Both vulnerabilities require local administrative privileges on the guest VM.

CVE-2026-593465 Sep · 14:05 UTC
China-Nexus APT Exploits VMware vCenter Flaws, Deploys Babuk Ransomwarecriticalperson_alertThreat Actor
person_alertThreat Actor

China-Nexus APT Exploits VMware vCenter Flaws, Deploys Babuk Ransomware

A suspected China-nexus advanced persistent threat actor, assessed with moderate confidence by QUIRSO to be Chinese-speaking and operating in the UTC+08:00 time zone.

CVE-2026-5931017 Aug · 05:36 UTC
VMware vCenter CVE-2026-59310 exploited in wild for RCE and persistencecriticalbug_reportVulnerability
bug_reportVulnerability

VMware vCenter CVE-2026-59310 exploited in wild for RCE and persistence

Broadcom VMware vCenter Server (all unpatched versions prior to late July 2026 patch release). Affects 361+ confirmed victim IPs across 47 countries, primarily Germany, US, Turkey, Iran, and France.

CVE-2026-5931012 Aug · 07:01 UTC
VMware vCenter, ESXi critical flaws enable auth bypass and VM escapescriticalbug_reportVulnerability
bug_reportVulnerability

VMware vCenter, ESXi critical flaws enable auth bypass and VM escapes

VMware vCenter Server (versions prior to 9.1.0.0300, 9.0.2.0100, 8.0 U3k), VMware ESXi (versions prior to 9.1.0.0200, 9.0.2.0100, 8.0 U3k), VMware Workstation and Fusion (25H2 and earlier), VMware Cloud Foundation 5.x, VMware vSphere Foundation, VMwa…

VMware30 Jul · 16:00 UTC
Critical VMware vCenter auth bypass allows remote system compromisecriticalbug_reportVulnerability
bug_reportVulnerability

Critical VMware vCenter auth bypass allows remote system compromise

VMware vCenter Server in VMware Cloud Foundation and vSphere Foundation versions 9.1.x.x (prior to 9.1.0.0300), 9.0.x.x (prior to 9.0.2.0100), vCenter 8.0 (prior to 8.0 U3k), and VMware Cloud Foundation 5.x.

CVE-2026-5930929 Jul · 13:31 UTC