Malware & Threats
The most serious flaws allow hackers with local admin rights to execute code as the virtual machine's VMX process running on the host.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Nation-State
CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.
Vulnerabilities
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
Vulnerabilities
Aria Automation is affected by a critical vulnerability that could be exploited to gain access to remote organizations and workflows.
Cloud Security
VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports.
Cloud Security
VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.
ICS/OT
Exploit code and root-cause analysis released by SinSinology document the problem as a case where VMware “forgot to regenerate” SSH keys.
Malware & Threats
VWware patches critical flaws that allow hackers to bypass SSH authentication and gain access to the Aria Operations for Networks command line interface.
CISO Conversations
SecurityWeek talks to Field CISOs, Fawaz Rasheed (VMware Carbon Black) and Nabil Hannan (NetSPI), about this emerging role.
Application Security
VMware confirmed that exploit code for CVE-2023-20864 has been published, underscoring the urgency for enterprise network admins to apply available patches.
Security Architecture
VMware partners with tech giants to accelerate the development of confidential computing applications.
Vulnerabilities
VMware published software updates to address multiple memory corruption vulnerabilities in vCenter Server that could lead to remote code execution.
Data Protection
A research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure.
Malware & Threats
Malware & Threats
Tracking & Law Enforcement
