⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A China-linked APT exploited a critical VMware vCenter vulnerability (CVE-2026-59310) to deploy backdoors and Babuk-derived ransomware, likely as a distraction. Separately, a macOS authentication flaw (CVE-2026-65400) was actively exploited to install crypto miners via the Screen Sharing service.