Last updated
VMware: Cybersecurity Incident
A global threat campaign is actively exploiting CVE-2026–59310, a critical vulnerability in VMware vCenter. Exploitation began earlier this month and patching may not fully mitigate the threat, indicating a sophisticated, persistent attack pattern.
- What happened
- A global threat campaign is actively exploiting CVE-2026–59310, a critical vulnerability in VMware vCenter. Exploitation began earlier this month and patching may not fully mitigate the threat, indicating a sophisticated, persistent attack pattern.
- Who
- VMware · United Kingdom & Ireland
- When
- 2026-08-13
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For VMware in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 122.7 (Hot), up 17.8 on the prior month; EMEA hiring signal is running easing (-17.7pts).
VMware: 1 signal in the last 90 days; 0.1% of MitchelLake's EMEA signal flow; 3 tracked across 86 days.
MitchelLake in this thematic
Also at VMware →
More signals across EMEA
Cybersecurity Incident · EMEA
Discover-Tech →Israeli ad company Discover-Tech's advertising platform was reportedly used as a zero-click spyware delivery channel by the Candiru threat actor, enabling device fingerprinting, tracking and targeted infection.
Cybersecurity Incident · EMEA
Les Mousquetaires →Attackers remotely took control of refrigeration controllers at hundreds of French supermarkets on the night of October 11, warming fridges and freezers up to 50°C and forcing stores to discard food. The entry point was a Danfoss store-controller that maintenance firms manage remotely.
Cybersecurity Incident · EMEA
The Foschini Group (TFG London) →TFG London, owner of Hobbs, Phase Eight and Whistles, discovered a cybersecurity incident on October 11 that took several IT systems offline and delayed customer orders. Incident response and business continuity plans were activated and external cybersecurity specialists brought in. Scope of any customer data compromise is still unknown.
Cybersecurity Incident · EMEA
TFG London →TFG London, owner of Hobbs, Phase Eight and Whistles, disclosed a cyber-attack on its websites and IT systems across three UK retail chains that may have compromised customer personal data. It follows a recent attack on Asos.
Cybersecurity Incident · EMEA
Pays ApS →Funen-based IT services firm Pays ApS had its authorised access to Denmark's Central Register of Persons (CPR) abused via an account protected by the password '123456'. The intrusion affected data on 8.8 million people; the attacker ran about 14 million automated searches between Sept 10 and Sept 20, and was detected Oct 2. Pays' website is offline and its managing director confirmed the access was exploited.
Cybersecurity Incident · EMEA
Carrefour →Cyberattack on refrigeration control software took over freezers and fridges at about 80 Carrefour stores in France, pushing temperatures to 50°C, spoiling stock and sparking fires. French PM has tasked ANSSI with investigating.
Where this lands in our work
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗