Vcenter Server News Today

Admins are urged to remove vSphere's vulnerable Enhanced Authentication Plug-in, which was discontinued nearly three years ago but is still widely in use.

The VMware Enhanced Authentication Plug-in risks authentication relay and session hijacking.

Discover major vulnerabilities from the past week, including issues with Apple, Apache, and VMware as well as remediation recommendations.

Ransomware/Malware Activity Apache Active MQ Vulnerability Exploited to Deliver Godzilla Web Shell Within the opening weeks of 2024, a resurgence in the exploitation of CVE-2023-46604, a now patched...

Within the opening weeks of 2024, a resurgence in the exploitation of CVE-2023-46604, a now patched vulnerability for Apache ActiveMQ hosts...

A Chinese advanced persistent threat group took advantage of a zero-day vulnerability that VMware patched in October.

UNC3886 was abusing a flaw in VMware for years, exfiltrating sensitive data

The LockBit ransomware gang hit the Subway fast food chain, and this is the start of Data Privacy Week Welcome to Cyber Security Today. It's Monday, January 22nd, 2024. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. The LockBit ransomware gang says it compromised the Subway fast food chain.

Even the most careful VMware customers may need to go back and double check that they weren't compromised by a zero-day exploit for CVE-2023-34048.

A VMware security vulnerability has been exploited by Chinese cyberspies since late 2021, according to Mandiant, in what has been a busy week for nation-state…