Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

Mandiant and VMware confirm that the critical CVE-2023-34048 out-of-bounds write in VMware vCenter Server (CVSS 9.8) has been actively exploited since late 2021 by UNC3886 — a China-nexus espionage group — enabling remote code execution and backdoor deployments across a small number of victims; separately, CISA issued an emergency directive after widespread exploitation of Ivanti Connect Secure zero-days (with ~1,700 devices reported compromised) likely involving China-linked actors.