THREAT INTELLIGENCE LEAD
VMware vCenter Under Active Mass Exploitation
Attackers are exploiting a maximum-severity flaw (CVE-2026-59310, a file-path bug letting an attacker run their own code) in VMware vCenter, the console controlling virtualised servers across most mid-sized data centres. Broadcom patched it two weeks ago, but 361 systems in 47 countries are already compromised, with backdoors planted that survive a patch. There is no workaround. Action: confirm vCenter is on the fixed build, then have IT hunt for unexpected outbound connections, not just check the version number.
BUSINESS ANALYSIS
Security Spend Is Buying the Wrong Half of the Fight
A study of 338 million real attack simulations found businesses now stop 69% of attacks at the perimeter, the best result in two years. Past that perimeter, only 37% of an attacker's next moves are blocked, and just 14% of simulated attacks trigger an alert.
Get every edition free: subscribe to Frederick Weekly.