China-linked Warp Panda exploited VMware ESX flaw to hide its tracks, CISA warns
CrowdStrike says the China-nexus group Warp Panda used VMware ESX flaw CVE-2026-41709 as a zero-day to suppress audit logs; CISA has added it to its exploited-vulnerabilities catalog.