Bleeping Computer
VMWare has made Workstation Pro and Fusion Pro free for personal use, allowing home users and students to set up their own virtualized test labs and play with another operating system at little to no cost.
Security Affairs
VMware fixed four flaws in its Workstation and Fusion desktop hypervisors, including three zero-days exploited at the Pwn2Own Vancouver 2024
The Hacker News
Researchers have uncovered a critical vulnerability in VMware's Bluetooth device, allowing code execution by malicious actors.
Bleeping Computer
VMware fixed four security vulnerabilities in the Workstation and Fusion desktop hypervisors, including three zero-days exploited during the Pwn2Own Vancouver 2024 hacking contest.
SecurityWeek
VMware has patched three critical and high-severity vulnerabilities exploited earlier this year at the Pwn2Own hacking competition.
.png)
Cyber Security News
Staying informed is the key in this dynamic battle of cybersecurity, and due to this, the weekly news recap provides you with the newest trends, weaknesses, infringements found, and some possible defense mechanisms.
Security Affairs
Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin's private SSH key.
Bleeping Computer
Citrix notified customers this week to manually mitigate a PuTTY SSH client vulnerability that could allow attackers to steal a XenCenter admin's private SSH key.
Cyber Security News
Citrix has released a security bulletin detailing a critical vulnerability (CVE-2024-31497) affecting certain versions of their Citrix
Cyber Security News
In the rapidly evolving, complex threat landscape EDR companies constantly race against new vectors.As recently Helvio Benedito Dias de
Cyber Security News
The weekly cybersecurity news wrap-up provides readers with the latest information on emerging risks, vulnerabilities, ways to reduce them, and harmful schemes to help make defensive measures proactive.
Bleeping Computer
Researchers have demonstrated the "first native Spectre v2 exploit" for a new speculative execution side-channel flaw that impacts Linux systems running on many modern Intel processors.
The Hacker News
Cybersecurity researchers reveal the 'first native Spectre v2 exploit' targeting Linux kernel on Intel systems.
SecurityWeek
New Ahoi attacks Heckler and WeSee target AMD SEV-SNP and Intel TDX with malicious interrupts to hack confidential VMs.
DarkReading
A Babuk variant has been involved in at least four attacks on VMware EXSi servers, in one case demanding $140 million from a Chilean data center company.
Ars Technica
Proxmox is a Linux-based hypervisor that could replace ESXi for some users.
Latest Hacking News
Another security vulnerability has been found in the modern CPUs supporting speculative execution. Identified as “GhostRace”, the vulnerability is a Spectre variant that combines with race condition, exposing data to an adversary. GhostRace Vulnerability Impacts Most
DarkReading
Like Spectre, the new exploit could give attackers a way to access sensitive information from system memory, and take other malicious actions.
The Hacker News
New CPU attack, "GhostRace" discovered. Exploits speculative execution + race conditions to steal sensitive data.
DarkReading
Carmakers are offering all kinds of over-the-air subscriptions and features, many of which benefit the businesses that use them. But this also opens up a wider attack surface for vehicle attackers.
Cyber Security News
Microsoft published its March 2024 Patch Tuesday, which addressed almost 59 vulnerabilities in its products and none of them were Zero-day or
SecurityWeek
Intel, AMD, Arm and IBM, as well as software vendors, are impacted by a new speculative race condition (SRC) attack named GhostRace.
The Cyber Express
March 2024 brings a fresh focus on cybersecurity as Microsoft rolls out its latest set of patches, addressing 61 vulnerabilities
Bleeping Computer
Today is Microsoft's March 2024 Patch Tuesday, and security updates have been released for 60 vulnerabilities, including eighteen remote code execution flaws.
Ars Technica
VMware ESXi, Workstation, Fusion, and Cloud Foundation all affected.
The Hacker News
BlackCat ransomware returns with a vengeance, healthcare sector under fire. U.S. government warning a must-read.
CSO
The security business was meant to be a part of a $3.8 billion sale of VMware divestitures to equity firm KKR
DarkReading
Admins are urged to remove vSphere's vulnerable Enhanced Authentication Plug-in, which was discontinued nearly three years ago but is still widely in use.
Bleeping Computer
The alleged source code for the third iteration of the Knight ransomware is being offered for sale to a single buyer on a hacker forum by a representative of the operation.
Cyber Security News
The RansomHouse group recognized as a Ransomware-as-a-Service (RaaS), surfaced in the latter part of 2021 has been actively utilizing ransomware.
Ars Technica
Broadcom has cut VMware products, perpetual licenses, and its partner program.
Bleeping Computer
The RansomHouse ransomware operation has created a new tool named 'MrAgent' that automates the deployment of its data encrypter across multiple VMware ESXi hypervisors.
Ars Technica
Software's free version was a good fit for tinkerers and hobbyists.
The Hacker News
Tackling the ever-expanding enterprise attack surface is a daunting task for IT pros. From servers to apps, the challenge is real.
The Hacker News
Microsoft's latest update tackles a whopping 48 security vulnerabilities! Stay protected with their January 2024 Patch Tuesday fixes
Bleeping Computer
Today is Microsoft's January 2024 Patch Tuesday, which includes security updates for a total of 49 flaws and 12 remote code execution vulnerabilities.
CSO
As digital compliance tasks and data sovereignty rules get ever more complicated, Amazon wants automation to help.
Cyber Security News
CacheWarp, is a new software-based fault attack that allows attackers to gain access to encrypted virtual machines (VMs).
Bleeping Computer
Citrix has released hotfixes for two vulnerabilities impacting Citrix Hypervisor, one of them being the "Reptar" high-severity flaw that affects Intel CPUs for desktop and server systems.
Bleeping Computer
Intel has fixed a high-severity CPU vulnerability in its modern desktop, server, mobile, and embedded CPUs, including the latest Alder Lake, Raptor Lake, and Sapphire Rapids microarchitectures.
Ars Technica
Among other things, bug allows code running inside a VM to crash hypervisors.
Bleeping Computer
A new software-based fault injection attack, CacheWarp, can let threat actors hack into AMD SEV-protected virtual machines by targeting memory writes to escalate privileges and gain remote code execution.
The Hacker News
Researchers uncover new "CacheWarp" attack on AMD's SEV technology. It could lead to privilege escalation in encrypted VMs.
SecurityWeek
CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines.
Cyber Security News
Metasploit is an open-source penetration testing framework created by Rapid7 that enables security professionals to simulate attacks against computer systems, networks, and applications.
The Hacker News
Russian hackers Sandworm caused a power outage in Ukraine by targeting an electrical substation.
Bleeping Computer
Russian state hackers have evolved their methods for breaching industrial control systems by adopting living-off-the-land techniques that enable reaching the final stage of the attack quicker and with less resources
Infosecurity News
Sandworm conducted a disruptive cyber-attack targeting a Ukrainian critical infrastructure organization in late 2022
SecurityWeek
Citrix has released patches for a critical information disclosure vulnerability in NetScaler ADC and NetScaler Gateway.
SecurityWeek
Google is hosting capture the flag (CTF) events focused on Chrome’s V8 engine and on Kernel-based Virtual Machine (KVM).
DataBreaches
AlphV has posted a statement about their attack on MGM Resorts. They also post some scathing criticisms of journalists and news outlets for reporting...
Bleeping Computer
Microsoft is adding the Python programming language to Microsoft Excel, allowing users to create powerful functions for analyzing and manipulating data.
SecurityWeek
Several major companies have published advisories in response to the Downfall vulnerability affecting Intel CPUs.
Naked Security
74 CVEs, and two “Exploitation Detected” advisories, which are nearly but not quite the same as 0-days. Also, two potential Teams treacheries that you really want to fix.
The Hacker News
Microsoft's Patch Tuesday for August 2023 addresses 74 vulnerabilities in its software, including 6 Critical and 67 Important security flaws.
SecurityWeek
The US government's cybersecurity agency describes UEFI as "critical attack surface" that requires urgent security attention.
.jpg)
DarkReading
The 4-month-old ransomware gang is now actively targeting VMware's virtual environments with a second variant of its custom malware.
Security Affairs
The source code for the BlackLotus UEFI bootkit has been published on GitHub and experts warn of the risks of proliferation of custom versions. Researchers from ESET discovered in March a new stealthy Unified Extensible Firmware Interface (UEFI) bootkit, named BlackLotus, that is able to bypass Secure Boot on Windows 11. Secure Boot is a security feature of the […]
Bleeping Computer
The source code for the BlackLotus UEFI bootkit has leaked online, allowing greater insight into a malware that has caused great concern among the enterprise, governments, and the cybersecurity community.
Ars Technica
Microsoft blocks a new batch of system drivers, but the loophole empowering them remains.
Trend Micro
In this blog post, we discuss different configuration scenarios that may lead to security issues with Azure Service Fabric, a distributed platform for deploying, managing, and scaling microservices and container applications.
DarkReading
Mandiant's ongoing investigation of UNC3886 has uncovered new details of threat actors' TTPs.
Cyber Security News
Best Cloud Service Providers: 1. AWS 2. Google Cloud 3. Azure 4. Oracle Cloud 5. VMware 6. DigitalOcean 7. Rackspace 8. IBM Cloud.
Bleeping Computer
In the ever-shifting ransomware landscape, we saw new ransomware gangs emerge, threat actors return from a long absence, operations shifting extortion tactics, and a flurry of attacks on the enterprise.
DarkReading
Wide use and lack of support for malware detection technologies has made VMware's virtualization technology a prime target for cyberattackers.
Infosecurity News
Actor is using leaked Babuk code to target US and Korean firms
DataBreaches
Nancy Liu reports: CrowStrike discovered a new ransomware-as-a-service (RaaS) group — MichaelKors (formerly Qilin) — targeting VMWare ESXi servers...
The Hacker News
Beware of hypervisor jackpotting! Linux and VMware ESXi systems under attack by the new ransomware-as-service (RaaS) operation MichaelKors.
Security Affairs
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. We are in the final! Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERSVote for me in the sections […]
Infosecurity News
According to SentinelOne, these novel variants emerged between 2022 and 2023
DarkReading
The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.
.jpg)
The Hacker News
Heads up VMware users! Make sure to update your Workstation and Fusion software as the company has released updates to fix several security flaws.
Security Affairs
A flaw in the Service Location Protocol (SLP), tracked as CVE-2023-29552, can allow to carry out powerful DDoS attacks. A high-severity security vulnerability (CVE-2023-29552, CVSS score: 8.6) impacting the Service Location Protocol (SLP) can be exploited by threat actors to conduct powerful volumetric DDoS attacks. The Service Location Protocol (SLP) is a legacy service discovery […]
Security Affairs
VMware addressed zero-day flaws that can be chained to achieve arbitrary code execution on Workstation and Fusion software hypervisors. VMware released security updates to address two zero-day vulnerabilities (CVE-2023-20869, CVE-2023-20870) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors. The STAR Labs (@starlabs_sg) […]
CSO
A vulnerability in the Service Location Protocol on internet-connected devices could create a DDoS amplification factor of up to 2200X.
Bleeping Computer
VMware has released security updates to address zero-day vulnerabilities that could be chained to gain code execution systems running unpatched versions of the company's Workstation and Fusion software hypervisors.
Security Affairs
Google Cloud Security and Project Zero researchers found multiple vulnerabilities in the Intel Trust Domain Extensions (TDX). Google Cloud Security and Project Zero researchers, working with Intel experts, discovered multiple vulnerabilities in the Intel Trust Domain Extensions (TDX). The Intel Trust Domain Extensions (Intel® TDX) allows to deploy hardware-isolated, virtual machines (VMs) called trust domains […]
The Hacker News
A new vulnerability in SLP Protocol that could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.
CyberSecurity Dive
Over 54,000 SLP-speaking instances and 670 product types are vulnerable, researchers from BitSight and Curesec found, including VMware ESXi Hypervisor.
Bleeping Computer
Microsoft has shared guidance to help organizations check if hackers targeted or compromised machines with the BlackLotus UEFI bootkit by exploiting the CVE-2022-21894 vulnerability.
Ars Technica
BlackLotus represents a major milestone in the continuing evolution of UEFI bootkits.
Bleeping Computer
The developers of the BlackLotus UEFI bootkit have improved the malware with Secure Boot bypass capabilities that allow it to infected even fully patched Windows 11 systems.
Security Affairs
ESET discovered a stealthy Unified Extensible Firmware Interface (UEFI) bootkit dubbed BlackLotus that is able to bypass the Secure Boot on Windows 11. Researchers from ESET discovered a new stealthy Unified Extensible Firmware Interface (UEFI) bootkit, named BlackLotus, that is able to bypass Secure Boot on Windows 11. Secure Boot is a security feature of the […]
The Hacker News
ESET warns of a new, powerful UEFI bootkit malware called BlackLotus that can bypass Secure Boot protection on Windows 11 systems.
Bleeping Computer
VMware has released a vSphere ESXi update to address a known issue causing some Windows Server 2022 virtual machines to no longer boot after installing this month's KB5022842 update.
Bleeping Computer
A new stealthy malware named 'Beep' was discovered last week, featuring many features to evade analysis and detection by security software.
DarkReading
It's not just Internet-accessible hosts that are vulnerable, researchers say.
CyberSecurity Dive
Recorded Future analysis underscores a growing ransomware threat confronting organizations using VMware ESXi.
The Record
Rapid7 said 18,581 VMware ESXi servers are still exposed to CVE-2021-21974 — a 2-year-old bug being exploited by the ESXiArgs ransomware.
CSO
The FBI and CISA have released a recovery script for the global ESXiArgs ransomware campaign targeting VMware ESXi servers, but the ransomware has since been updated to elude former attempts at remediation.
ZDNet
Organizations affected by the ESXiArgs ransomware for VMware ESXI servers can use an automated script for recovery.
Security Affairs
VMware said there is no evidence that threat actors are exploiting a zero-day flaw in its software as part of an ongoing ESXiArgs ransomware campaign. VMware said that it found no evidence that the threat actors behind the ongoing ESXiArgs ransomware attacks are leveraging a zero-day vulnerability in VMware ESXi servers. “VMware has not found evidence […]
ZDNet
VMware and cybersecurity authorities warn enterprises to update ESXi hypervisors to supported versions amid widespread ransomware attacks.
Security Affairs
ESXi ransomware targeted thousands of VMware servers in a global-scale campaign, security experts and international CERTs warn. Thousands of computer servers have been targeted by a global ransomware hacking attack targeting VMware (VMW.N) ESXi servers. ESXi is VMware’s hypervisor, a technology that allows organizations to host several virtualized computers running multiple operating systems on a […]
Ars Technica
Servers running unpatched versions of ESXi are sitting ducks for ESXiArgs attacks.
CSO
Cybersecurity agencies globally — including in Italy, France, the US and Singapore — have issued alerts about a ransomware attack targeting the VMware ESXi hypervisor.
The Record
Thousands of servers running an unpatched version of VMware's ESXi product are vulnerable to ESXiArgs ransomware, researchers say.
Security Affairs
The Italian National Cybersecurity Agency (ACN) warns of an ongoing massive ransomware campaign targeting VMware ESXi servers. The Italian National Cybersecurity Agency (ACN) warns of an ongoing massive ransomware campaign targeting VMware ESXi servers worldwide, including Italian systems. The attackers are attempting to exploit the CVE-2021–21974 vulnerability. According to the ACN, most of the attacks […]
CyberSecurity Dive
Cyber authorities linked the attacks, dubbed ESXiArgs, to a two-year-old VMware vulnerability. At least 2,250 machines have been compromised.
Security Affairs
A new wave of ransomware attacks is targeting VMware ESXi servers to deliver ransomware, CERT of France warns. The French Computer Emergency Response Team (CERT-FR) warns that threat actors are targeting VMware ESXi servers to deploy ransomware. CERT-FR reported that threat actors behind these ransomware attackers are actively exploiting the vulnerability CVE-2021-21974. “OpenSLP as used […]
Loading more articles....