LightNews — News, ranked by scholars

@wiretor.bsky.social

🚨 Employee Monitoring Software Abused in Ransomware Attacks 🚨 🛡️ Don’t wait for attackers to strike. Contact us today to fortify your digital defenses!
support@wiretor.com

wiretor.com/%f0%9f%9a%a8...

#CyberSecurity #Ransomware #InfoSec #ThreatIntelligence #MalwareAnalysis #VMwareSecurity

May 9, 2025 at 7:34 PM

Cybersecurity News Everyday

@hendryadrian.bsky.social

BRICKSTORM targets VMware vSphere control plane (VCSA, ESXi) and Photon OS for deep persistence. Key defenses include Photon OS firewalling, strict segmentation, VM encryption, and forensic remote logging. #VMwareSecurity #PhotonOS #BRICKSTORM

vSphere and BRICKSTORM Malware: A Defender's Guide

This article details Mandiant and GTIG findings on persistent BRICKSTORM operations that target the VMware vSphere control plane (VCSA and ESXi) and the Photon OS, and it prescribes a four-phase, infrastructure-centric hardening strategy to prevent and detect those intrusions. It emphasizes Photon OS–level firewalling and logging (auditd, AIDE), strict identity/network segmentation (PAWs, PAM, Zero Trust), VM encryption, and forensic remote logging to expose actions such as startup script injections and VMDK theft. #BRICKSTORM #VCSA

www.hendryadrian.com

April 2, 2026 at 6:40 PM

BaseFortify.eu

@basefortify.bsky.social

🔍 Details: CVE-2026-22719 is a command injection flaw

Attackers can execute arbitrary commands in VMware Aria Operations during support-assisted migrations, potentially leading to remote code execution & infrastructure access.

⚠️ Patch to 8.18.6 or 9.0.2.

#CyberDefense #VMwareSecurity #Infosec

March 4, 2026 at 2:29 PM