VMware NSX: High-risk security vulnerability patched

Manufacturer Broadcom has patched vulnerabilities in VMware NSX that allow attackers to infiltrate and execute malicious code.

https://www.heise.de/en/news/VMware-NSX-High-risk-security-vulnerability-patched-10431036.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

VMware NSX: Hochriskante Sicherheitslücke gestopft

In VMware NSX hat Hersteller Broadcom Schwachstellen gestopft, die Angreifern das Einschleusen und Ausführen von Schadcode erlauben.

https://www.heise.de/news/VMware-NSX-Hochriskante-Sicherheitsluecke-gestopft-10430375.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Broadcom ends business with VMware’s lowest-tier channel partners - Broadcom has cut the lowest tier in its VMware partner progr... - https://arstechnica.com/information-technology/2025/06/broadcom-ends-business-with-vmwares-lowest-tier-channel-partners/ #broadcom #biz⁢ #vmware

I installed VMware 16.00 and this happrnd(PopOS 22.04 LTS) #vmware

https://askubuntu.com/q/1549664/612

Just added Rocky Linux 10 (STG) to the Vagrant box collection for ARM64 systems. Have fun on your Mac, Devs! Happy coding!

Box: https://portal.cloud.hashicorp.com/services/vagrant/registries/gyptazy/boxes/rocky10.0-arm64
Collection: https://portal.cloud.hashicorp.com/services/vagrant/registries/gyptazy

EU cloud provider: Broadcom raised VMware license prices by 800 to 1500 percent

Complaints about the licensing policies of Broadcom and VMware continue: According to the EU cloud association CISPE, prices increased by 800 to 1500 percent.

https://www.heise.de/en/news/EU-cloud-provider-Broadcom-raised-VMware-license-prices-by-800-to-1500-percent-10394974.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Attackers can crash virtual machines created with VMware

Broadcom has released important security updates for VMware ESXi, vCenter Server, Workstation and Fusion.

https://www.heise.de/en/news/Attackers-can-crash-virtual-machines-created-with-VMware-10392982.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Report calls for regulation of “legally and ethically flawed” VMware - VMware's business model under Broadcom is "legally and ethic... - https://arstechnica.com/information-technology/2025/05/vmware-cloud-partners-demand-firm-regulatory-action-on-broadcom/ #broadcom #biz⁢ #europe #vmware

Angreifer können mit VMware erstellte virtuelle Maschinen crashen

Broadcom hat wichtige Sicherheitsupdates für VMware ESXi, vCenter Server, Workstation und Fusion veröffentlicht.

https://www.heise.de/news/Angreifer-koennen-mit-VMware-erstellte-virtuelle-Maschinen-crashen-10392911.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

No hardware required:Dell launches private cloud for VMware, Nutanix and Red Hat

Dell is presenting a new private cloud for various operating environments at its in-house exhibition. However, only VMware is available for the release.

https://www.heise.de/en/news/No-hardware-required-Dell-launches-private-cloud-for-VMware-Nutanix-and-Red-Hat-10392663.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Want to get rid of license costs of your #VMware environment? Switching to #Proxmox & looking for enterprise features like DRS? #ProxLB (opensource) has you covered!

With ProxLB you extend the features of your Proxmox cluster with DRS alike features including affinity & anti-affinity support, maintenance mode and soon also power management (DPM alike) and automated security patching!

https://github.com/gyptazy/ProxLB

Hackers exploit #VMware #ESXi, #Microsoft #SharePoint zero-days at #Pwn2Own

https://www.bleepingcomputer.com/news/security/hackers-exploit-vmware-esxi-microsoft-sharepoint-zero-days-at-pwn2own/

Second day of Pwn2Own Berlin: sandbox breakouts and AI exploits

At the first Pwn2Own competition in Germany, international participants collected six-figure prize money. Particularly popular: Nvidia's AI server Triton.

https://www.heise.de/en/news/Second-day-of-Pwn2Own-Berlin-sandbox-breakouts-and-AI-exploits-10386942.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Zweiter Tag der Pwn2Own Berlin: Sandkistenausbrüche und KI-Exploits

Beim ersten Pwn2Own-Wettbewerb in Deutschland sammelten internationale Teilnehmer sechsstellige Preisgelder ein. Besonders beliebt: NVIDIAs KI-Server Triton.

https://www.heise.de/news/Zweiter-Tag-der-Pwn2Own-Berlin-Sandkistenausbrueche-und-KI-Exploits-10386551.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Outstanding! Nguyen Hoang Thach of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin

Nutanix presents itself as an alternative for frustrated VMware customers

If Broadcom's licensing policy is scaring off VMware customers, the competition is happy, as could be seen at the Nutanix in-house exhibition.

https://www.heise.de/en/news/Nutanix-presents-itself-as-an-alternative-for-frustrated-VMware-customers-10384280.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

ZeroDay Labs report that the download for RVTools, a tool commonly used to inventarize and assess VMware infrastucture (and supported by Dell), had been trojanized for the past couple of days: https://zerodaylabs.net/rvtools-bumblebee-malware/

The rvtools web site was already offline in its May 8 archive.org snapshot, so this has probably been going on over a week ago. Apparently the last clean version was 4.7.1 with the sha256 hash 0506126bcbc4641d41c138e88d9ea9f10fb65f1eeab3bff90ad25330108b324c

New advisory from Dell, affecting VMware: CVE-2025-22224, CVE-2025-22225, CVE-2025-22226, CVE-2024-38812, CVE-2024-38813

DSA-2025-209: Security Update for Dell PowerFlex Appliance Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000321268/dsa-2025-209-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities #cybersecurity #infosec #Dell #VMware

VMware Aria Automation: Security vulnerability allows session takeover

Broadcom warns of a high-risk security vulnerability in VMware Aria Automation. Attackers can gain access.

https://www.heise.de/en/news/VMware-Aria-Automation-Security-vulnerability-allows-session-takeover-10382982.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

VMware Aria Automation: Sicherheitslücke ermöglicht Sitzungsübernahme

Broadcom warnt vor einer hochriskanten Sicherheitslücke in VMware Aria Automation. Angreifer können sich Zugang verschaffen.

https://www.heise.de/news/VMware-Aria-Automation-Sicherheitsluecke-ermoeglicht-Sitzungsuebernahme-10382726.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon