Malware & Threats
The company warns that malicious hackers can craft exploits to elevate privileges or launch cross-site scripting attacks.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Malware & Threats
The saga of VMWare’s critical CVE-2024-38812 vCenter Server bug has reached the “exploitation detected” stage.
Vulnerabilities
For the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June.
Vulnerabilities
VMware patches CVE-2024-38814 and warns that attackers with non-administrator privileges can execute remote code on the HCX manager.
Vulnerabilities
VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.
Vulnerabilities
VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor.
Vulnerabilities
Shadowserver has observed over 20,000 internet-accessible VMware ESXi instances impacted by an exploited vulnerability.
Ransomware
VMware did not mention in-the-wild exploitation for CVE-2024-37085 but Microsoft says ransomware gangs are abusing the just-patched flaw.
Data Protection
VMware warns that authenticated malicious users could enter specially crafted SQL queries and perform unauthorized read/write operations in the database.
Vulnerabilities
Serious vulnerabilities that can allow remote code execution and privilege escalation have been patched in VMware vCenter Server.
Incident Response
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
Vulnerabilities
VMware has patched three vulnerabilities exploited earlier this year at the Pwn2Own hacking competition.
Nation-State
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.
Malware & Threats
Supply Chain Security
Hacker Conversations
Government
Noteworthy stories that might have slipped under the radar: ENISA and NCSC release cybersecurity reports, abuse of Cloudflare services, FBI warns of gen-AI enabling...
Cybersecurity Funding
Vulnerabilities
Data Breaches
Application Security
