Vulnerabilities
Aria Automation is affected by a critical vulnerability that could be exploited to gain access to remote organizations and workflows.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VMware"
Cloud Security
VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports.
Cloud Security
VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.
ICS/OT
Exploit code and root-cause analysis released by SinSinology document the problem as a case where VMware “forgot to regenerate” SSH keys.
Malware & Threats
VWware patches critical flaws that allow hackers to bypass SSH authentication and gain access to the Aria Operations for Networks command line interface.
CISO Conversations
SecurityWeek talks to Field CISOs, Fawaz Rasheed (VMware Carbon Black) and Nabil Hannan (NetSPI), about this emerging role.
Application Security
VMware confirmed that exploit code for CVE-2023-20864 has been published, underscoring the urgency for enterprise network admins to apply available patches.
Security Architecture
VMware partners with tech giants to accelerate the development of confidential computing applications.
Vulnerabilities
VMware published software updates to address multiple memory corruption vulnerabilities in vCenter Server that could lead to remote code execution.
Malware & Threats
VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.”
Cyberwarfare
Mandiant has observed a Chinese cyberespionage group exploiting a VMware ESXi zero-day vulnerability for privilege escalation.
Application Security
VMware ships urgent patches to cover security defects that expose businesses to remote code execution attacks.
Vulnerabilities
Wallarm Detect warns of ongoing exploitation of a critical vulnerability in VMware Cloud Foundation and NSX Data Center for vSphere (NSX-V).
Vulnerabilities
VMware issues a critical fix for a vulnerability that allows hacker to gain full access to the underlying server operating system.
Ransomware
Hundreds of new servers were compromised in the past days as part of ESXiArgs ransomware attacks, but it’s still unclear which vulnerability is being...
Cybercrime
More than 3,800 servers around the world have been compromised in recent ESXiArgs ransomware attacks, which also include an improved process.
Ransomware
ESXiArgs ransomware attacks continue, with thousands of unpatched ESXi servers compromised within a few days via CVE-2021-21974.
Malware & Threats
Unpatched and unprotected VMware ESXi servers worldwide have been targeted in a ransomware attack exploiting a vulnerability patched in 2021.
Cloud Security
VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.
Cybercrime
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Malware & Threats
Vulnerabilities
Funding/M&A
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Data Breaches
Cloud Security
