Cloud Security
VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Cloud Security
VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.
ICS/OT
Exploit code and root-cause analysis released by SinSinology document the problem as a case where VMware “forgot to regenerate” SSH keys.
Malware & Threats
VWware patches critical flaws that allow hackers to bypass SSH authentication and gain access to the Aria Operations for Networks command line interface.
CISO Conversations
SecurityWeek talks to Field CISOs, Fawaz Rasheed (VMware Carbon Black) and Nabil Hannan (NetSPI), about this emerging role.
Application Security
VMware confirmed that exploit code for CVE-2023-20864 has been published, underscoring the urgency for enterprise network admins to apply available patches.
Security Architecture
VMware partners with tech giants to accelerate the development of confidential computing applications.
Vulnerabilities
VMware published software updates to address multiple memory corruption vulnerabilities in vCenter Server that could lead to remote code execution.
Malware & Threats
VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.”
Cyberwarfare
Mandiant has observed a Chinese cyberespionage group exploiting a VMware ESXi zero-day vulnerability for privilege escalation.
Application Security
VMware ships urgent patches to cover security defects that expose businesses to remote code execution attacks.
Vulnerabilities
Wallarm Detect warns of ongoing exploitation of a critical vulnerability in VMware Cloud Foundation and NSX Data Center for vSphere (NSX-V).
ICS/OT
The Municipal Water Authority of Aliquippa was just one of multiple organizations breached in the U.S. by Iran-linked "Cyber Av3ngers" hackers
Endpoint Security
Identity & Access
Vulnerabilities
ICS/OT
Members of Congress asked the U.S. Justice Department to investigate how foreign hackers breached a water authority near Pittsburgh, prompting CISA to warn other...
Malware & Threats
Artificial Intelligence