The Anatomy of the VMware vCenter Syslog Exploitation and the Babuk ESXi Ransomware Campaign

VMware vCenter CVE-2026-59310 is being actively exploited to compromise vCenter servers and deploy Babuk-derived ransomware on ESXi hosts This post first appeared at - The CyberSec Guru