"Chinese Hackers Exploit VMware Zero-Day Flaw for 2 Years, Targeting Critical vCenter Vulnerabilities"

A China-linked cyber espionage group, UNC3886, has been exploiting a critical zero-day vulnerability (CVE-2023-34048) in VMware vCenter Server since late 2021, allowing them to gain privileged access, deploy malware, and execute arbitrary commands. This group has a history of leveraging zero-day vulnerabilities and has also targeted Fortinet appliances. VMware vCenter Server users are advised to update to the latest version to mitigate potential threats, as the group continues to exploit vulnerabilities in virtualization and firewall technologies.