Today, attackers are targeting vulnerabilities in VMware ESX and Linux Kernel. Small businesses using these systems should be vigilant and take immediate action to secure their environments.
Broadcom VMware ESX (CVE-2026-41709)
Broadcom VMware ESX contains a vulnerability that could allow attackers with administrative access to perform certain operations without being logged. To protect against this, businesses should ensure that all ESX systems are updated to the latest security patches.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Linux Kernel (CVE-2026-46300)
The Linux Kernel has a vulnerability that could allow attackers to modify page-cache-backed data and potentially run commands as root. To safeguard against this, businesses should apply the latest security updates to their Linux Kernel installations.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Pause before you click
Urgent emails about invoices, deliveries or locked accounts are the usual way in. Open the site yourself rather than following the link.
Doing it once, properly
Cheaper is usually more expensive in the long run: a rushed or bargain setup is often done again from the start, and you pay twice, plus whatever the breach in between cost.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-41709 on the National Vulnerability Database
- CVE-2026-46300 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.