Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Logging

Security incidents tagged Logging. Newest first.

1 Logging incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
1
Days without an incident
91
Longest quiet run: 90 days (Jul 30–Oct 27)
Show 1 older incident

July 2026 1

  • Patched

    VMware ESX logging bypass (CVE-2026-41709) added to CISA KEV: admins can act without being logged

    CISA added CVE-2026-41709, a VMware ESX insufficient logging vulnerability, to its Known Exploited Vulnerabilities catalog on Oct 28 based on evidence of active exploitation. Broadcom rates it Low (CVSSv3 2.7): a malicious administrator could perform certain operations on ESX without them being logged, which helps an attacker who already has admin access hide activity. Broadcom fixed it in VMSA-2026-0006, first published July 29 2026, and credits Ian Barton of CrowdStrike for reporting it.

    VMware ESX / ESXi (also in VMware Cloud Foundation, vSphere Foundation and Telco Cloud Platform)Since Jul 29, 2026