Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems

The Chinese state-sponsored group known as UNC3886 has been found to exploit a zero-day flaw in VMware ESXi hosts to backdoor Windows and Linux systems.
The VMware Tools authentication bypass vulnerability, tracked as CVE-2023-20867 (CVSS score: 3.9), "enabled the execution of privileged commands across Windows, Linux, and PhotonOS (vCenter) guest VMs without authentication of guest credentials

authentication authentication bypass backdoor bypass chinese chinese hackers cve cvss esxi exploit flaw hackers linux privileged score sponsored state systems tools unc3886 vcenter vmware vmware esxi vulnerability windows zero-day zero-day flaw