Tag

Vmware

All articles tagged with #vmware

Broadcom Slumps as VMware Flaw Exploitation Spreads Globally
markets14 days ago

Broadcom Slumps as VMware Flaw Exploitation Spreads Globally

Broadcom shares slipped about 6% after reports that attackers are exploiting a recently patched VMware vCenter Syslog Server vulnerability; the flaw, deemed critical and patched July 29, could let remote attackers run unauthorized code. A Digital forensics firm linked 361 affected IP addresses across 47 countries, with Germany, the United States, Turkey, Iran and France accounting for over half. Affected systems reportedly began contacting attacker infrastructure on Aug. 3, and researchers say the exploitation includes a reverse SSH tool for persistent remote access.

Global VMware vCenter Flaw Used to Deploy Reverse SSH for Persistence
security14 days ago

Global VMware vCenter Flaw Used to Deploy Reverse SSH for Persistence

A critical vulnerability in VMware vCenter Syslog Server (CVE-2026-59310) is being actively exploited to install the open-source reverse_ssh tool, establishing a persistent outbound C2 channel for remote access. Across 47 countries, 361 victim IPs have been identified, with Germany, the U.S., Turkey, Iran, and France most affected. VMware released an emergency patch; there are no official workarounds. Researchers from QUIRSO suspect an advanced persistent threat behind the campaign and note the attackers' activity began days after the vulnerability disclosure.

CISA Tightens Patch Deadline for Actively Exploited VMware vCenter RCE
technology7 months ago

CISA Tightens Patch Deadline for Actively Exploited VMware vCenter RCE

CISA warns that the actively exploited VMware vCenter Server remote-code-execution flaw CVE-2024-37079 is being used in the wild and orders U.S. federal agencies to patch within three weeks, citing a DCERPC heap overflow that enables easy remote control with no user interaction. Broadcom notes there are no mitigations, advising immediate patches to the latest vCenter Server and Cloud Foundation releases.

VMware Restricts Patch Downloads for Some Perpetual License Users
technology1 year ago

VMware Restricts Patch Downloads for Some Perpetual License Users

Some VMware customers with perpetual licenses cannot access security patches due to support contract issues with Broadcom, increasing their vulnerability to attacks. Broadcom has promised free security patches for supported versions, but access is delayed due to entitlement validation, leaving users at risk. VMware is working on a separate patch cycle for non-entitled customers, but the situation remains suboptimal amid ongoing security concerns.

Broadcom Revamps VMware Partner Program to Boost Collaboration and Delivery
business1 year ago

Broadcom Revamps VMware Partner Program to Boost Collaboration and Delivery

Broadcom is restructuring its VMware partner program by eliminating its lowest tier, Registered partners, and raising standards for Pinnacle and Premier partners to focus on high-performance, committed partners, especially in VMware Cloud Foundation. European partners are exempt from these changes amid regulatory scrutiny over Broadcom's business practices, which some European groups claim breach competition laws. The move aims to deepen relationships with top partners and improve customer service, while European regulators continue to investigate Broadcom's business model.

VMware Offers Free Access to Workstation and Fusion for All Users
technology1 year ago

VMware Offers Free Access to Workstation and Fusion for All Users

VMware has made its Workstation Pro and Fusion Pro desktop hypervisor software free for both personal and commercial use, eliminating the need for businesses and developers to purchase licenses. Despite being free, VMware plans to continue investing in the software's development, relying on revenue from its enterprise virtualization solutions. The software remains proprietary, unlike open-source alternatives like Qemu and VirtualBox. Users can download the Linux version by signing up for a Broadcom account.

VMware Offers Free Access to Workstation and Fusion for All Users
technology1 year ago

VMware Offers Free Access to Workstation and Fusion for All Users

VMware has made its Fusion and Workstation software free for all users, including commercial customers, as part of a strategy to simplify its product offerings following Broadcom's acquisition. The Pro versions are no longer available for purchase, and VMware is pushing customers towards subscription-based services. Some business customers have reported significant price increases post-acquisition, with VMware ending support ticketing for troubleshooting after current contracts expire.

VMware Offers Free Access to Workstation and Fusion for All Users
technology1 year ago

VMware Offers Free Access to Workstation and Fusion for All Users

VMware has announced that its desktop hypervisor products, VMware Fusion and VMware Workstation, are now free for all users, including commercial, educational, and personal users, effective November 11, 2024. This marks the end of the paid subscription model for these products, with all features from the previous paid versions included in the free versions. While existing support agreements will remain valid until expiration, future support will be limited to online resources and community forums. VMware plans to continue investing in these products, enhancing features and usability.

VMware Enhances Cloud Foundation with AI, Security, and Storage Upgrades
technology1 year ago

VMware Enhances Cloud Foundation with AI, Security, and Storage Upgrades

Broadcom has announced new and expanded services for VMware Cloud Foundation at VMware Explore 2024 in Barcelona, focusing on accelerating AI, enhancing cybersecurity, and supporting digital sovereignty. The updates include VMware Tanzu Data Services for streamlined data management, VMware Live Recovery for improved disaster recovery, and a new VMware vDefend Advanced Service with GenAI-based threat assistance. Broadcom is also expanding its Private Cloud Modernization Program and offering new certifications to support private cloud transitions. These initiatives aim to provide scalable, secure, and resilient cloud solutions for enterprises.

"Next $1 Trillion Club Contender Revealed"
finance2 years ago

"Next $1 Trillion Club Contender Revealed"

Broadcom is poised to join the trillion-dollar market capitalization club by 2030, driven by strong demand for its AI chips and networking solutions, strategic relationships with major tech companies, and the growth potential from its VMware acquisition. The company's diversified client base and robust revenue projections make it a compelling investment for long-term investors.

"Urgent VMware Patches Blunt Critical Hypervisor Flaws"
technology2 years ago

"Urgent VMware Patches Blunt Critical Hypervisor Flaws"

VMware's hypervisors have been found to have four significant flaws, with the most severe ones allowing a malicious actor with local administrative privileges on a virtual machine to execute code outside the guest. VMware has urged an emergency change to address these vulnerabilities, which affect its Workstation, Fusion, and ESXi hypervisors. The flaws were discovered by researchers at the Tianfu Cup Pwn Contest, and VMware has provided workarounds while acknowledging potential challenges in implementing them at scale.

"Critical VMware Sandbox Escape Flaws Patched Across Product Line"
technology2 years ago

"Critical VMware Sandbox Escape Flaws Patched Across Product Line"

VMware has released patches for critical vulnerabilities affecting VMware ESXi, Workstation, Fusion, and Cloud Foundation products, including out-of-support versions, that allow hackers to escape sandbox and hypervisor protections. The vulnerabilities, rated as severe, could allow an attacker with local administrative privileges to execute code on the host machine. VMware is urging customers to apply the patches and has provided workarounds, while also stating that it is not aware of any active exploitation of the vulnerabilities.