Cybersecurity specialists reported the finding of a critical vulnerability in VMware vCenter Server. Tracked as CVE-2021-21972, this is a Remote Code Execution (RCE) flaw that could be exploited by threatRead More →
Special investigators from the National Security Agency (NSA) have issued a high priority alert arguing that Russian state-sponsored threat actors are exploiting a VMware vulnerability to steal sensitive data andRead More →
Cybersecurity specialists have detected two critical vulnerabilities in virtualization solutions developed by VMware. According to the report, successful exploitation of failures would allow threat actors to execute arbitrary code onRead More →
VMware security team announced the release of a security patch to address a critical vulnerability in their Workstation, Fusion, and vSphere virtualization products. The flaw was revealed by Cfir Cohen,Read More →
A group of database activity monitoring specialists has revealed the finding of a critical vulnerability in Cloud Director, a cloud resource deployment, automation and management platform developed by VMware. ExploitingRead More →
Cloud security course specialists have revealed the finding of some security vulnerabilities in VMware vRealize Operations Manager, a management suite for any type of cloud deployments, whether public, private, orRead More →
Cloud computing security service specialists have revealed a report of a vulnerability in VMWre vCenter v6.7 software. Tracked as CVE-2020-3952, this flaw is caused by inadequate access controls on theRead More →
As we approach Pwn2Own 2018, I’m reminded of some of the exploits we saw at last year’s contest. Of course, the most interesting bugs we saw involved guest-to-host escalation inRead More →
Whenever I get a shell on a Windows system with VMware installed I feel a certain frustration at not being able to access the filesystem of the available virtual machines.Read More →
VMware has patched an information disclosure vulnerability affecting a number of its products that use Flex BlazeDS. The original vulnerability was discovered and disclosed in August by Matthias Kaiser ofRead More →
