virtualization

Proxmox Virtual Environment 8.3: SDN-firewall integration, faster container backups, and more!

November 22, 2024

The Proxmox Virtual Environment 8.3 enterprise virtualization solution features management tools and a user-friendly web interface, allowing you to deploy open-source …

Beware of phishing emails delivering backdoored Linux VMs!

November 5, 2024

Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix researchers have discovered. …

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

October 22, 2024

Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the …

Critical VMware vCenter Server bugs fixed (CVE-2024-38812)

September 18, 2024

Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to …

VirtualBox 7.1: This is a major update, here’s what’s new

September 12, 2024

VirtualBox is a full virtualizer for x86 hardware designed for servers, desktops, and embedded systems. VirtualBox 7.1 introduces an enhanced user interface, cloud VM …

VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

July 30, 2024

Ransomware operators have been leveraging CVE-2024-37085, an authentication bypass vulnerability affecting Active Directory domain-joined VMware ESXi hypervisors, to gain full …

Docker fixes critical auth bypass flaw, again (CVE-2024-41110)

July 25, 2024

A critical-severity Docker Engine vulnerability (CVE-2024-41110) may be exploited by attackers to bypass authorization plugins (AuthZ) via specially crafted API request, …

Microsoft releases tool to speed up recovery of systems borked by CrowdStrike update

July 22, 2024

By now, most people are aware of – or have been personally affected by – the largest IT outage the world have ever witnessed, courtesy of a defective update for …

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

July 9, 2024

For July 2024 Patch Tuesday, Microsoft has released security updates and patches that fix 142 CVEs, including two exploited zero-days (CVE-2024-38080, CVE-2024-38112) in …

Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)

June 18, 2024

VMware by Broadcom has fixed two critical vulnerabilities (CVE-2024-37079, CVE-2024-37080) affecting VMware vCenter Server and products that contain it: vSphere and Cloud …

VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

February 21, 2024

VMware Enhanced Authentication Plug-in (EAP), a plugin for VMware vSphere, has two vulnerabilities (CVE-2024-22245, CVE-2024-22250) that could be exploited by attackers to …

Exploit writers invited to probe Chrome’s V8 engine, Google Cloud’s KVM

October 9, 2023

Google is asking bug hunters and exploit writers to develop 0-day and n-day exploits in Chrome’s V8 JavaScript engine and Google Cloud’s Kernel-based Virtual …