This Week's Top Three Trends in Cybersecurity

Censys researchers describe three active security issues: the ESXiArgs ransomware campaign that has targeted more than 3,500 VMware ESXi servers (with visible ransom notes and a CISA recovery tool), a SugarCRM zero-day exploit that led to php webshells on hundreds of IPs and was added to CISA’s Known Exploited Vulnerabilities catalog, and an RCE vulnerability in end-of-life Cisco small business routers leaving ~19,500 devices exposed with no official patch. The post provides counts, affected regions/ASNs, links to Censys search queries and blog posts, and notes ongoing monitoring and remediation guidance.