Latest vCenter Server news

VMware fixes critical vCenter RCE vulnerability, patch now

VMware has issued a security advisory addressing critical vulnerabilities in vCenter Server, including remote code execution and local privilege escalation flaws.
- Bill Toulas
- June 18, 2024
- 02:08 PM
- 0
VMware makes Workstation Pro and Fusion Pro free for personal use

VMWare has made Workstation Pro and Fusion Pro free for personal use, allowing home users and students to set up their own virtualized test labs and play with another operating system at little to no cost.
- Lawrence Abrams
- May 14, 2024
- 03:34 PM
- 9
Chinese hackers exploit VMware bug as zero-day for two years

A Chinese hacking group has been exploiting a critical vCenter Server vulnerability (CVE-2023-34048) as a zero-day since at least late 2021.
- Sergiu Gatlan
- January 19, 2024
- 11:32 AM
- 0
VMware confirms critical vCenter flaw now exploited in attacks

VMware has confirmed that a critical vCenter Server remote code execution vulnerability patched in October is now under active exploitation.
- Sergiu Gatlan
- January 19, 2024
- 08:22 AM
- 0
VMware fixes critical code execution flaw in vCenter Server

VMware issued security updates to fix a critical vCenter Server vulnerability that can be exploited to gain remote code execution attacks on vulnerable servers.
- Sergiu Gatlan
- October 25, 2023
- 05:00 AM
- 0
Dell Compellent hardcoded key exposes VMware vCenter admin creds

An unfixed hardcoded encryption key flaw in Dell's Compellent Integration Tools for VMware (CITV) allows attackers to decrypt stored vCenter admin credentials and retrieve the cleartext password.
- Bill Toulas
- August 10, 2023
- 10:38 AM
- 1
VMware fixes vCenter Server bugs allowing code execution, auth bypass

VMware has addressed multiple high-severity security flaws in vCenter Server, which can let attackers gain code execution and bypass authentication on unpatched systems.
- Sergiu Gatlan
- June 22, 2023
- 12:07 PM
- 0
VMware vCenter Server bug disclosed last year still not patched

VMware informed customers today that vCenter Server 8.0 (the latest version) is still waiting for a patch to address a high-severity privilege escalation vulnerability disclosed in November 2021.
- Sergiu Gatlan
- October 11, 2022
- 02:42 PM
- 0
VMware patches vCenter Server flaw disclosed in November

Eight months after disclosing a high-severity privilege escalation flaw in vCenter Server's IWA (Integrated Windows Authentication) mechanism, VMware has finally released a patch for one of the affected versions.
- Sergiu Gatlan
- July 12, 2022
- 07:31 PM
- 0
Linux version of LockBit ransomware targets VMware ESXi servers

LockBit is the latest ransomware gang whose Linux encryptor has been discovered to be focusing on the encryption of VMware ESXi virtual machines.
- Lawrence Abrams
- January 26, 2022
- 06:40 PM
- 0
Conti ransomware uses Log4j bug to hack VMware vCenter servers

Conti ransomware operation is using the critical Log4Shell exploit to gain rapid access to internal VMware vCenter Server instances and encrypt virtual machines.
- Ionut Ilascu
- December 17, 2021
- 10:00 AM
- 0
Working exploit released for VMware vCenter CVE-2021-22005 bug

A complete exploit for the remote code execution vulnerability in VMware vCenter tracked as CVE-2021-22005 is now widely available, and threat actors are taking advantage of it.
- Ionut Ilascu
- September 28, 2021
- 07:03 AM
- 0
Hackers are scanning for VMware CVE-2021-22005 targets, patch now!

Threat actors have already started targeting Internet-exposed VMware vCenter servers unpatched against a critical arbitrary file upload vulnerability patched yesterday that could lead to remote code execution.
- Sergiu Gatlan
- September 22, 2021
- 05:44 PM
- 0
VMware warns of critical bug in default vCenter Server installs

VMware warns customers to immediately patch a critical arbitrary file upload vulnerability in the Analytics service, impacting all appliances running default vCenter Server 6.7 and 7.0 deployments.
- Sergiu Gatlan
- September 21, 2021
- 01:40 PM
- 4
Attackers are scanning for vulnerable VMware servers, patch now!

Threat actors are actively scanning for Internet-exposed VMware vCenter servers unpatched against a critical remote code execution (RCE) vulnerability impacting all vCenter deployments and patched by VMware ten days ago.
- Sergiu Gatlan
- June 04, 2021
- 02:23 PM
- 0
FreakOut malware worms its way into vulnerable VMware servers

A multi-platform Python-based malware targeting Windows and Linux devices has now been upgraded to worm its way into Internet-exposed VMware vCenter servers unpatched against a remote code execution vulnerability.
- Sergiu Gatlan
- June 04, 2021
- 09:03 AM
- 0
VMware warns of critical bug affecting all vCenter Server installs

VMware urges customers to patch a critical remote code execution (RCE) vulnerability in the Virtual SAN Health Check plug-in and impacting all vCenter Server deployments.
- Sergiu Gatlan
- May 25, 2021
- 02:21 PM
- 0