Tag
Huntress reports in-the-wild VMware ESXi VM escape exploits used by a well-resourced, Chinese-speaking threat actor, likely initially built as a zero-day over a year before disclosure, with initial access via compromised SonicWall VPN. The toolkit supports 155 ESXi builds (5.1-8.0) and the intrusion, which aimed at ransomware, was halted before completion.
Trail of Bits tested GPT 5.6-Cyber's cyber capabilities by having it escape VMs, successfully exploiting multiple vulnerabilities including zero-days, demonstrating that advanced AI agents can bypass traditional containment methods.
Google paid a $250,000 bounty for a Linux KVM vulnerability (Januscape) that allows unprivileged guest VMs to escape and gain root access on the host, affecting cloud platforms using AMD or Intel processors.