Tag Archives: VMware

Review of the VMware ESXi server cyberdebacle (Feb. 2023)

Posted on 2023-03-04 by guenni

[German]A brief flashback to February 2023 – since the beginning of the year, numerous VMware ESXi servers have been hijacked via a known vulnerability that has long since been closed. This VMware ESXi vulnerability has a huge threat potential and … Continue reading →

Posted in Security, Virtualization, Windows | Tagged , , | Leave a comment
Advertising

Cyberattack debacle on VMware ESXi Server; "Recovery Script" for ESXiArgs Ransomware Victims

Posted on 2023-02-08 by guenni

[German]Since last weekend, cyberattacks on vulnerable ESXi servers have been ongoing worldwide and there are probably a number of people affected (in Germany, a three-digit number is said to be affected). The attackers are exploiting a vulnerability that was already … Continue reading →

Posted in Cloud, Security, Virtualization | Tagged , , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

VMware vulnerability CVE-2022-22954 threatened by ransomware, end of support for ESXi 6.5 & 6.7

Posted on 2022-10-23 by guenni

[German]Various VMware products contain the critical vulnerability CVE-2022-22954 , for which a security update was provided back in April 2022. I had addressed the vulnerability in the blog post Warning: critical vulnerabilities in VMware products (April 6, 2022). Advertising

Posted in Security, Software, Virtualization | Tagged , | Leave a comment
Advertising

Mandiant, VMware and US-CERT warn of malware targeting VMware ESXi servers

Posted on 2022-09-30 by guenni

[German]Google-acquired security vendor Mandiant has encountered a new malware family (VirtualPITA, VirtualPIE, and VirtualGATE) that targets virtualization solutions like VMware ESXi Server and uses specialized techniques to infiltrate. VMware has issued a security advisory to that effect, and US-CERT is … Continue reading →

Posted in Security, Virtualization | Tagged , , | Leave a comment

VMware: Security Adversory, Windows 11 TPM Issue

Posted on 2022-08-03 by guenni

[German]Brief note for VMware users and administrators. The vendor has published a security advisory for various products (VMware Workspace ONE Access, etc.) as of August 2, 2022, because there are numerous vulnerabilities there. In addition, I still came across an … Continue reading →

Posted in Security, Software, Windows | Tagged , , , | Leave a comment
Advertising

Warning: Critical Vulnerabilities in VMware Products (April 6, 2022)

Posted on 2022-04-08 by guenni

[German]Just yesterday, in the blog post VMware patches Spring4Shell RCE vulnerability CVE-2022-22965, I warned about a vulnerability in certain VMware products. Now the manufacturer has followed up and warns about critical vulnerabilities in various VMware products. This affects Workspace ONE … Continue reading →

Posted in Security, Software, Update | Tagged , , | Leave a comment

VMware patches Spring4Shell RCE vulnerability CVE-2022-22965

Posted on 2022-04-07 by guenni

[German]Virtualization specialist VMware has released security updates for various virtualization products. These are intended to close the remote code execution (RCE) vulnerability called Spring4Shell in these products. Cloud products that use virtualization are particularly at risk. Here is an overview … Continue reading →

Posted in Security, Software, Virtualization | Tagged , | Leave a comment

VMware closes critical vulnerabilities

Posted on 2022-02-17 by guenni

[German]VMware has released security updates for various products. These should close vulnerabilities that are rated as critical. It affects the products VMware ESXi, VMware Workstation, VMware Fusion and VMware Cloud Foundation. The vulnerabilities could be exploited to execute arbitrary code … Continue reading →

Posted in Security, Software, Update, Virtualization | Tagged , , | Leave a comment
Advertising

VMware Converter withdrawn (Feb. 2022)

Posted on 2022-02-07 by guenni

[German]Brief note, I came across here: VMware VMware has withdrawn the VMware Converter from its download pages last week. This is a tool that allows you to transfer images of physical machines into VMware virtual machines (P2V). Advertising

Posted in Software | Tagged , | 2 Comments

VMware security advisory about vulnerability CVE-2021-22045 in VMware Workstation & Co.

Posted on 2022-01-05 by guenni

[German]Vendor VMware has issued a security alert for vulnerability CVE-2021-22045 as of January 4, 2022. This vulnerability, located in the CD-ROM driver, threatens the security of VMware Workstation, Fusion and ESXi Server through a heap overflow. However, updates are available … Continue reading →

Posted in Security, Software, Update, Virtualization | Tagged , , , | Leave a comment