⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
- ID
- 14834
- Status
- summarized
- Published
- 17 Aug 2026, 9:23 PM
- Fetched
- 17 Aug 2026, 10:55 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/weekly-recap-vmware-exploits-windows-0.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 4.5
- Created
- 17 Aug 2026, 10:57 PM
- Tags
- Audience
- developersai_agent_userssaas_founders
What happened
A weekly cybersecurity recap covering active exploitation of VMware vCenter CVE-2026-59310 (CVSS 9.8, directory traversal) by a suspected China-nexus APT deploying Babuk-derived ransomware as a forensic smoke screen, a macOS Screen Sharing auth flaw CVE-2026-65400 (CVSS 9.8) exploited for crypto mining, and a SANS survey showing 78% of security practitioners now use AI in their strategy (up from 50% last year) while only 36% have a formal AI risk program. The title also references MCP attacks and browser hijacks, but the excerpt cuts off before those details.
Why it matters
The SANS survey gap (78% adoption vs 36% governance) is a concrete data point for founders shipping AI features without a risk framework — if you're building with AI agents or MCP tooling, this is evidence that governance lag is industry-wide, not just your problem. The MCP attacks reference in the title is relevant to anyone using Model Context Protocol but the article text doesn't provide enough detail to act on.
Discussion angle
The SANS survey numbers (78% adoption, 36% governance) are worth discussing as a benchmark — how many in the group have any formal AI risk policy, and does the MCP attack mention signal that agent tooling is becoming a real attack surface worth gating before production use?