Tag: vmware
-
RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer
The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility.”Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience,” the company said in a statement posted on its website.”Robware.net and RVTools.com are the only authorized and supported websites…
-
Hackers Exploit RVTools to Deploy Bumblebee Malware on Windows Systems
A reliable VMware environment reporting tool, RVTools, was momentarily infiltrated earlier this week on May 13, 2025, to disseminate the sneaky Bumblebee loader virus, serving as a sobering reminder of the vulnerabilities present in software supply chains. This incident, detected by a security operations team through a high-confidence alert from Microsoft Defender for Endpoint, revealed…
-
Pwn2Own Berlin 2025: total prize money reached $1,078,750
Pwn2Own Berlin 2025 wrapped up with $383,750 awarded on the final day, pushing the total prize money to $1,078,750 over three days. On the final day of Pwn2Own Berlin 2025, participants earned $383,750 for demonstrating zero-day in VMware Workstation, ESXi, Windows, NVIDIA, and Firefox. During the competition, the participants earned a total of $1,078,750, demonstrating…
-
Pwn2Own Day 3: Zero-Day Exploits Windows 11, VMware ESXi, and Firefox
The Pwn2Own Berlin 2025 last day ended with impressive technological accomplishments, bringing the total prize money over one million dollars. Security researchers demonstrated sophisticated exploitation techniques against high-profile targets including Windows 11, VMware ESXi, and Mozilla Firefox, revealing critical zero-day vulnerabilities that vendors must now address. The three-day hacking competition showcased 28 unique zero-day vulnerabilities,…
-
Pwn2Own Berlin: Firefox, Sharepoint und VMware-Produkte gehackt
Teilnehmer der Pwn2Own in Berlin haben zahlreiche Softwareprodukte attackiert. Ein Hersteller hat besonders schnell reagiert und sofort Patches verteilt. First seen on golem.de Jump to article: www.golem.de/news/pwn2own-berlin-firefox-sharepoint-und-vmware-produkte-gehackt-2505-196310.html
-
VMware ESXi, Firefox, Red Hat Linux SharePoint Hacked Pwn2Own Day 2
Security researchers demonstrated their prowess on the second day of Pwn2Own Berlin 2025, discovering critical vulnerabilities across major enterprise platforms and earning $435,000 in bounties. The competition, now in its second day at the OffensiveCon conference in Berlin, has awarded a cumulative total of $695,000 with participants revealing 20 unique zero-day vulnerabilities thus far. With…
-
No workaround leads to more pain for VMware users
There are patches for the latest batch of security alerts from Broadcom, but VMware users on perpetual licences may not have access First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366624052/No-workaround-leads-to-more-pain-for-VMware-users
-
Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi
On day two of Pwn2Own Berlin 2025, participants earned $435,000 for demonstrating zero-day in SharePoint, ESXi, VirtualBox, RHEL, and Firefox. On day two of Pwn2Own Berlin 2025, bug hunters earned a total of $435,000, which brings the contest total to $695,000, after $260,000 was awarded during the first day of the competition. The participants demonstrated…
-
Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own
During the second day of Pwn2Own Berlin 2025, competitors earned $435,000 after exploiting zero-day bugs in multiple products, including Microsoft SharePoint, VMware ESXi, Oracle VirtualBox, Red Hat Enterprise Linux, and Mozilla Firefox. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-vmware-esxi-microsoft-sharepoint-zero-days-at-pwn2own/
-
Pwn2Own Berlin 2025: Windows 11, VMware, Firefox and Others Hacked
The beginning of Pwn2Own Berlin 2025, hosted at the OffensiveCon conference, has concluded its first two days with… First seen on hackread.com Jump to article: hackread.com/pwn2own-berlin-2025-windows-11-vmware-firefox-hacked/
-
China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures
Tags: access, api, apt, attack, authentication, backdoor, backup, breach, business, china, cloud, control, cve, cyber, data, data-breach, detection, dns, encryption, endpoint, espionage, exploit, finance, firewall, fortinet, google, government, group, infection, infrastructure, intelligence, Internet, ivanti, linux, malicious, malware, mandiant, military, network, open-source, programming, rat, remote-code-execution, reverse-engineering, risk, rust, sap, service, strategy, tactics, threat, tool, update, vmware, vpn, vulnerability, windows, zero-dayExecutive Summary EclecticIQ analysts assess with high confidence that, in April 2025, China-nexus nation-state APTs (advanced persistent threat) launched high-temp exploitation campaigns against critical infrastructure networks by targeting SAP NetWeaver Visual Composer. Actors leveraged CVE-2025-31324 [1], an unauthenticated file upload vulnerability that enables remote code execution (RCE). This assessment is based on a publicly…
-
New VMware Tools Vulnerability Allows Attackers to Tamper with Virtual Machines, Broadcom Issues Urgent Patch
A newly disclosed VMware Tools vulnerability could enable attackers with limited access to compromise virtual machines (VMs). Broadcom, which owns VMware, issued a security advisory warning that the flaw could be exploited to perform insecure file operations within affected VMs. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/vmware-tools-vulnerability-cve-2025-22247/
-
Nutanix opens up to all external storage
CEO Rajiv Ramaswami says Nutanix will open its platform to all external storage, allowing it to profit from customers wanting to move away from VMware, as well as the hyper-converged curious First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623738/Nutanix-opens-up-to-all-external-storage
-
Broadcom Pushes VMware Partners Toward VCF-First Future
Tags: vmwareFirst seen on scworld.com Jump to article: www.scworld.com/brief/broadcom-pushes-vmware-partners-toward-vcf-first-future
-
Scattered Spider Linked to Marks & Spencer Hack
Retailer Continues to Recover From Ransomware Incident. British retailer Marks & Spencer was reportedly targeted by financial crime group Scattered Spider, who deployed ransomware on the company’s VMware ESXi server. The retailer continues to recover from a cyber incident that disrupted operations in its online and offline stores. First seen on govinfosecurity.com Jump to article:…
-
CNAPP-Kaufratgeber
Tags: access, ai, application-security, attack, authentication, cloud, container, detection, edr, encryption, framework, group, ibm, infrastructure, intelligence, kubernetes, linux, ml, monitoring, network, open-source, risk-management, saas, soar, software, supply-chain, threat, tool, vmware -
Russia-linked APT29 targets European diplomats with new malware
WINELOADER variant: While the Check Point researchers didn’t manage to obtain the final payload delivered by GRAPELOADER directly, they located a new variant of the WINELOADER backdoor that was uploaded to the VirusTotal scanning service around the same time and which has code and compilation time similarities to both AppvIsvSubsystems64.dll and ppcore.dll. As such, there…
-
Agentic AI is both boon and bane for security pros
Recent agentic security signposts: Recently, we have seen numerous examples of how quickly building your own autonomous AI agents has taken root. Microsoft last month demonstrated six new AI agents that work with its Copilot software that talk directly to its various security tools to identify vulnerabilities, flag identity and asset compromises. Simbian is hosting…
-
VMware revives its free ESXi hypervisor in an utterly obscure way
Tags: vmwareHome labs and bare bones test rigs matter so Broadcom’s back in the game First seen on theregister.com Jump to article: www.theregister.com/2025/04/14/vmware_free_esxi_returns/
-
VMware ESXi 8.0 Update 3e Is Now Free, Here’s What’s New
VMware has announced thatESXi 8.0 Update 3e, the latest version of its industry-leading hypervisor, is now available for download at no cost. Released onApril 10, 2025, this update is packed with enhancements, critical fixes, and new features, solidifying VMware’s dominance in the virtualization space. Free Access to ESXi 8.0 Traditionally a component of VMware’s broader…
-
Why Codefinger represents a new stage in the evolution of ransomware
Tags: access, advisory, attack, backup, best-practice, breach, business, cisco, cloud, computer, credentials, cybersecurity, data, defense, exploit, malicious, network, password, ransom, ransomware, risk, strategy, technology, threat, vmwareA new type of ransomware attack: The fundamentals of the Codefinger attack are the same as those in most ransomware attacks: The bad guys encrypted victims’ data and demanded payment to restore it.However, several aspects of the breach make it stand out from most other ransomware incidents:Attack vector: In traditional ransomware attacks, the attack vector…
-
Vulnerabilities Patched by Ivanti, VMware, Zoom
Ivanti, VMware, and Zoom released fixes for dozens of vulnerabilities in their products on April 2025 Patch Tuesday. The post Vulnerabilities Patched by Ivanti, VMware, Zoom appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/vulnerabilities-patched-by-ivanti-vmware-zoom/
-
Platform9 Unveils Partner Program Offering VMware Cloud Migration Services
First seen on scworld.com Jump to article: www.scworld.com/news/platform9-unveils-partner-program-offering-vmware-cloud-migration-services
-
Broadcom enhances VMware vDefend security capabilities
Tags: vmwareFirst seen on scworld.com Jump to article: www.scworld.com/brief/broadcom-enhances-vmware-vdefend-security-capabilities
-
VMware Workstation auto-updates broken after Broadcom URL redirect
VMware Workstation users report that the software’s automatic update functionality is broken after Broadcom redirected the download URL to its generic support page, triggering certificate errors. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/software/vmware-workstation-auto-updates-broken-after-broadcom-url-redirect/
-
New Security Flaws Found in VMware Tools and CrushFTP, High Risk, PoC Released
Broadcom has issued security patches to address a high-severity security flaw in VMware Tools for Windows that could lead to an authentication bypass.Tracked as CVE-2025-22230, the vulnerability is rated 7.8 on the ten-point Common Vulnerability Scoring System (CVSS).”VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control,” Broadcom said in an…
-
VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores
Claims Broadcom will levy 20 percent penalty for customers who don’t pay before renewal deadlines First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/arrow_vmware_licensing_change/
-
ClearScale, Matilda Partner for VMware Migrations to AWS
Tags: vmwareFirst seen on scworld.com Jump to article: www.scworld.com/analysis/clearscale-matilda-partner-for-vmware-migrations-to-aws
-
Broadcom fixes authentication bypass flaw in VMware Tools for Windows
First seen on scworld.com Jump to article: www.scworld.com/news/broadcom-fixes-authentication-bypass-flaw-in-vmware-tools-for-windows