Pwn2Own Berlin 2026: participants earned a total of $1,298,250 for 47 vulnerabilities, with successful exploits of AI products like Codex, Cursor, and LM Studio
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products. … Pwn2Own Berlin 2026 has come to an end …
Broadcom fixes three VMware zero-days exploited in the wild found by Microsoft; attackers with admin or root access can chain the flaws to escape a VM's sandbox
Broadcom warned customers today about three VMware zero-days, tagged as exploited in attacks and reported by the Microsoft Threat Intelligence Center.
Researchers detail a spam campaign using 21K hijacked abandoned domains and subdomains from brands like eBay, MSN, and VMware to send ~5M malicious emails daily
A massive ad fraud campaign named “SubdoMailing” is using over 8,000 legitimate internet domains and 13,000 subdomains to send …
The US, France, Italy, and others warn about a ransomware attack on VMware ESXi servers, despite a February 2021 patch; Censys: 3,200+ servers have been hacked
Description OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551 … Edward Hawkins / VMware Security Blog : VMware Security Response Center (vSRC) Response to ‘ESXiArgs’ Ransomware Attacks Elvira Pol...
VMware and Google's Mandiant say a sophisticated hacker group has been installing backdoors in VMware's virtualization software on multiple targets' networks
Andy Greenberg / Wired :
The CISA orders US federal civilian agencies to patch or remove VMware products affected by a critical RCE vulnerability that hackers are actively exploiting
Security flaws in VMware and F5's BIG-IP are being exploited by malicious hackers. — Malicious hackers, some believed to be state-backed … Source: CISA , VMware , CISA , and CISA .
VMware urges customers to immediately patch a critical arbitrary file upload vulnerability in its flagship vCenter and vSphere products
File upload vuln lets miscreants hijack vCenter Server — VMware has disclosed a critical bug in its flagship vSphere and vCenter products and urged users to drop everything and patch it. Source: VMw...
VMware patches a new bug in vCenter Server, a virtualization management product used by an estimated 43K organizations, that could allow remote code execution
Patch Now! Antonia Din / Heimdal Security Blog : Critical Flaw Is Impacting All vCenter Server Deployments, VMware Alerts Simon Sharwood / The Register : VMware reveals critical vCenter hole it says ‘...
Researchers detected mass scanning activity targeting VMware vCenter servers vulnerable to a remote code execution vulnerability; VMware has issued a patch
Thousands of servers running vCenter server could be in for a nasty surprise. — Hackers are mass-scanning the Internet in search …