AI Weekly Malaysia

Attackers are actively exploiting CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw in Broadcom VMware vCenter, with 361 victim IPs across 47 countries as of August 2026. Patches were released by Broadcom in late July 2026, and exploitation began within days of disclosure, using reverse_ssh via cron jobs for persistent remote access. QUIRSO attributes the campaign to a suspected APT actor.

Why: If your team runs VMware vCenter and has not applied Broadcom's late-July 2026 patch, patch now — the exploit chain is trivial enough that 361 hosts were compromised within days of disclosure. The reverse_ssh persistence technique bypasses inbound firewall rules, so compromised hosts may not show obvious inbound connection alerts.

The trycua/cua project published a blog post on using GPU passthrough in macOS VMs to accelerate llama.cpp-based LLM inference on Apple Silicon. The post details the technical approach for passing Apple GPU resources through to a virtualized macOS environment.

Why: If you run local LLM inference on Apple Silicon but need VM isolation for CI, agent sandboxes, or multi-tenant setups, this approach could let you keep near-native Metal GPU performance inside a VM rather than falling back to CPU-only inference. Builders evaluating local agent infrastructure should test whether the passthrough overhead is acceptable for their workload before committing to a bare-metal-only deployment.