Excited to share new research I co-authored with @lawrencesec.bsky.social
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
GhostFrame: A new ESXi Implant Linked to Settra Ransomware
GhostFrame is a new post-exploitation framework targeting VMware ESXi environments, linked to TAG-218 and Settra ransomware.
www.recordedfuture.com
November 11, 2026 at 6:36 AM
Excited to share new research I co-authored with @lawrencesec.bsky.social
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
Excellent research by my colleagues on an undocumented VMware post-exploitation framework we track as GhostFrame! 🔥
Excited to share new research I co-authored with @lawrencesec.bsky.social
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
We uncovered GhostFrame, a previously undocumented VMware ESXi post-exploitation framework used by TAG-218, whose activity overlaps with Settra ransomware.
Read more: www.recordedfuture.com/blog/ghostfr...
GhostFrame: A new ESXi Implant Linked to Settra Ransomware
GhostFrame is a new post-exploitation framework targeting VMware ESXi environments, linked to TAG-218 and Settra ransomware.
www.recordedfuture.com
November 11, 2026 at 6:53 AM
Excellent research by my colleagues on an undocumented VMware post-exploitation framework we track as GhostFrame! 🔥
New GhostFrame Malware Lets Hackers Hijack VMware ESXi VMs and Steal Windows Credentials
cybersecuritynews.com/ghostframe-m...
#Cybersecurity #LargeScaleImpact #Vulnerability
cybersecuritynews.com/ghostframe-m...
#Cybersecurity #LargeScaleImpact #Vulnerability
New GhostFrame Malware Lets Hackers Hijack VMware ESXi VMs and Steal Windows Credentials
A new hacking toolkit called GhostFrame gives criminals a single control panel for taking over VMware ESXi servers and the virtual machines that run on them.
cybersecuritynews.com
November 11, 2026 at 5:19 AM
New GhostFrame Malware Lets Hackers Hijack VMware ESXi VMs and Steal Windows Credentials
cybersecuritynews.com/ghostframe-m...
#Cybersecurity #LargeScaleImpact #Vulnerability
cybersecuritynews.com/ghostframe-m...
#Cybersecurity #LargeScaleImpact #Vulnerability
CVE-2026-41709 deletes logs in VMware ESX without providing attackers with new access. #VMware #ESX #CVE202641709 #Cybersecurity https://dev.to/rbonweb/the-vmware-esx-vulnerability-that-doesnt-give-attackers-access-it-deletes-your-evidence-38k4
The VMware ESX Vulnerability That Doesn't Give Attackers Access. It Deletes Your Evidence. - DEV Community
The VMware ESX vulnerability CVE-2026-41709 scored Low severity but hit CISA's KEV list anyway, because it lets attackers act on the hypervisor unlogged. Tagged with security, cloud, devops, opensource.
dev.to
November 8, 2026 at 11:32 AM
CVE-2026-41709 deletes logs in VMware ESX without providing attackers with new access. #VMware #ESX #CVE202641709 #Cybersecurity https://dev.to/rbonweb/the-vmware-esx-vulnerability-that-doesnt-give-attackers-access-it-deletes-your-evidence-38k4
☁️ Transição do VMware para o Apache CloudStack: descubra como essa mudança pode tornar sua TI mais competitiva! 🚀 #CloudComputing #ApacheCloudStack #VMware #OpenSource
November 9, 2026 at 6:59 PM
☁️ Transição do VMware para o Apache CloudStack: descubra como essa mudança pode tornar sua TI mais competitiva! 🚀 #CloudComputing #ApacheCloudStack #VMware #OpenSource
honestly yeah, it's one of my favorite old blobbers and i keep meaning to get vmware working on this computer so i can emulate it properly
November 10, 2026 at 7:24 PM
honestly yeah, it's one of my favorite old blobbers and i keep meaning to get vmware working on this computer so i can emulate it properly
While VMware has been financially successful under Broadcom, the company's latest offering suggests it may be worried about losing business from smaller organizations: arstechnica.visitlink.me/4Bh9i8
VMware releases vSphere Express for virtualization on up to 128 cores
“We started listening to a lot of our lower-end customers," VMware exec says.
arstechnica.visitlink.me
November 5, 2026 at 4:35 PM
While VMware has been financially successful under Broadcom, the company's latest offering suggests it may be worried about losing business from smaller organizations: arstechnica.visitlink.me/4Bh9i8
So OpenGL isn't quite dead yet it seems .. certainly not if you want to run your app in a type 2 hypervisor such as VMware Workstation Pro.
#gamedev
#gamedev
November 8, 2026 at 10:19 AM
So OpenGL isn't quite dead yet it seems .. certainly not if you want to run your app in a type 2 hypervisor such as VMware Workstation Pro.
#gamedev
#gamedev
[Blog Archive] VMware security advisory VMSA-2026-0006
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
VMware security advisory VMSA-2026-0006
nolabnoparty.com
November 11, 2026 at 10:47 AM
[Blog Archive] VMware security advisory VMSA-2026-0006
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Recorded Future's Lawrence Stowe & Jerrilee Plude look into GhostFrame, a post-exploitation framework that gives threat actors control over compromised VMware ESXi environments. This is used by TAG-218, a threat activity group linked to Settra ransomware. www.recordedfuture.com/blog/ghostfr...
November 11, 2026 at 9:52 AM
Recorded Future's Lawrence Stowe & Jerrilee Plude look into GhostFrame, a post-exploitation framework that gives threat actors control over compromised VMware ESXi environments. This is used by TAG-218, a threat activity group linked to Settra ransomware. www.recordedfuture.com/blog/ghostfr...
CERTFR-2026-AVI-1486: Multiples vulnérabilités dans les produits VMware
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1486/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1486/
November 9, 2026 at 3:11 PM
CERTFR-2026-AVI-1486: Multiples vulnérabilités dans les produits VMware
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1486/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1486/
VMware Has a New Plan to Win Customers Back. But Will It Work? #vmware #vmwarelicensing #homelab bleevht.substack.com/p/vmware-has...
VMware Has a New Plan to Win Customers Back. But Will It Work?
Broadcom is bringing back simpler VMware licensing, but winning back customers who have already moved on may be a much bigger challenge.
bleevht.substack.com
November 10, 2026 at 6:07 PM
VMware Has a New Plan to Win Customers Back. But Will It Work? #vmware #vmwarelicensing #homelab bleevht.substack.com/p/vmware-has...
[Blog Archive] VMware security advisory VMSA-2026-0006
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
VMware security advisory VMSA-2026-0006
nolabnoparty.com
November 9, 2026 at 2:45 AM
[Blog Archive] VMware security advisory VMSA-2026-0006
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Broadcom published VMware security advisory VMSA-2026-0006 addressing multiple vulnerabilities across several VMware products.
The reported vulnerabilities impact the following platforms:
VMware ESXi, #esxi #securityadvisory #VMSA
Google Distributed Cloud (software only) for VMware update on November 11, 2026 https://docs.cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/release-notes#November_11_2026 #googlecloud Google Distributed Cloud (software only) for VMware 1.34.1100-gke.125 is
November 11, 2026 at 6:40 PM
Google Distributed Cloud (software only) for VMware update on November 11, 2026 https://docs.cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/release-notes#November_11_2026 #googlecloud Google Distributed Cloud (software only) for VMware 1.34.1100-gke.125 is
Broadcom Wants VMware Customers Back. There's Just One Problem. #VMware #Broadcom #vSphere #Virtualization #VMwareLicensing www.virtualizationhowto.com/2026/11/broa...
Broadcom Wants VMware Customers Back. There's Just One Problem.
Broadcom launches VMware vSphere Express to win back customers, but pricing, licensing restrictions, and lost trust could make it too late.
www.virtualizationhowto.com
November 10, 2026 at 1:15 PM
Broadcom Wants VMware Customers Back. There's Just One Problem. #VMware #Broadcom #vSphere #Virtualization #VMwareLicensing www.virtualizationhowto.com/2026/11/broa...
November 8, 2026 at 9:12 PM
heise-Angebot: iX-Workshop: Schritt für Schritt – VMware zu Proxmox VE
heise-Angebot: iX-Workshop: Schritt für Schritt – VMware zu Proxmox VE
Praktische Schritte, Fallstricke vermeiden: Lernen Sie, wie Sie Ihre VMware-Infrastruktur effizient und sicher auf Proxmox VE umstellen.
www.heise.de
November 11, 2026 at 9:10 AM
heise-Angebot: iX-Workshop: Schritt für Schritt – VMware zu Proxmox VE
Forgot I had a box of unopened Workstation, GSX & ESX software 💿 (kids, SW used to come in a box) that was given me, which was stored in one of Diane Greene’s (founder of VMware) moving boxes!
Figured I’d take them out to and put them on display next to my homelab!😁
Figured I’d take them out to and put them on display next to my homelab!😁
November 9, 2026 at 1:07 AM
Forgot I had a box of unopened Workstation, GSX & ESX software 💿 (kids, SW used to come in a box) that was given me, which was stored in one of Diane Greene’s (founder of VMware) moving boxes!
Figured I’d take them out to and put them on display next to my homelab!😁
Figured I’d take them out to and put them on display next to my homelab!😁
Da bekommt jemand kalte Füße…
vSphere Express: Broadcoms neues VMware-Einstiegspaket | heise online
https://heise.de/-11513502
vSphere Express: Broadcoms neues VMware-Einstiegspaket | heise online
https://heise.de/-11513502
vSphere Express: Broadcoms neues VMware-Einstiegspaket
Mit vSphere Express bringt Broadcom ein Einstiegspaket auf Basis von vSphere 9. Die Grenze liegt bei 128 CPU-Kernen pro Kunde.
heise.de
November 8, 2026 at 8:17 AM
Da bekommt jemand kalte Füße…
vSphere Express: Broadcoms neues VMware-Einstiegspaket | heise online
https://heise.de/-11513502
vSphere Express: Broadcoms neues VMware-Einstiegspaket | heise online
https://heise.de/-11513502
Praktische Schritte, Fallstricke vermeiden: Lernen Sie, wie Sie Ihre VMware-Infrastruktur effizient und sicher auf Proxmox VE umstellen. #Virtualisierung
iX-Workshop: Schritt für Schritt – VMware zu Proxmox VE
Praktische Schritte, Fallstricke vermeiden: Lernen Sie, wie Sie Ihre VMware-Infrastruktur effizient und sicher auf Proxmox VE umstellen.
www.heise.de
November 11, 2026 at 9:04 AM
Praktische Schritte, Fallstricke vermeiden: Lernen Sie, wie Sie Ihre VMware-Infrastruktur effizient und sicher auf Proxmox VE umstellen. #Virtualisierung
CERT-FR warns of multiple vulnerabilities across a wide set of VMware products
CERT-FR has flagged multiple vulnerabilities in VMware software, including Greenplum, GemFire and RabbitMQ. It lists affected versions and refers administrators to VMware bulletins dated 6 November 2026…
#cybersecurity
CERT-FR has flagged multiple vulnerabilities in VMware software, including Greenplum, GemFire and RabbitMQ. It lists affected versions and refers administrators to VMware bulletins dated 6 November 2026…
#cybersecurity
CERT-FR warns of multiple vulnerabilities across a wide set of VMware products
CERT-FR has flagged multiple vulnerabilities in VMware software, including Greenplum, GemFire and RabbitMQ. It lists affected versions and refers administrators to VMware bulletins dated 6 November 2026 for fixes.
secquill.com
November 9, 2026 at 3:37 PM
CERT-FR warns of multiple vulnerabilities across a wide set of VMware products
CERT-FR has flagged multiple vulnerabilities in VMware software, including Greenplum, GemFire and RabbitMQ. It lists affected versions and refers administrators to VMware bulletins dated 6 November 2026…
#cybersecurity
CERT-FR has flagged multiple vulnerabilities in VMware software, including Greenplum, GemFire and RabbitMQ. It lists affected versions and refers administrators to VMware bulletins dated 6 November 2026…
#cybersecurity
VMware Cloud Foundation getting major update for AI
www.theregister.com/hci/2026/11/...
#Cybersecurity #LargeScaleImpact #Vulnerability
www.theregister.com/hci/2026/11/...
#Cybersecurity #LargeScaleImpact #Vulnerability
VMware Cloud Foundation getting major update for AI
Broadcom is updating VMware Cloud Foundation (VCF) to add native S3 object storage to vSAN, an ...
www.theregister.com
November 9, 2026 at 6:01 PM
VMware Cloud Foundation getting major update for AI
www.theregister.com/hci/2026/11/...
#Cybersecurity #LargeScaleImpact #Vulnerability
www.theregister.com/hci/2026/11/...
#Cybersecurity #LargeScaleImpact #Vulnerability
Whoever allowed the Broadcom acquisition of VMware should be JAILED. The hoops you have to jump through to download anything are insane.
November 8, 2026 at 11:42 PM
Whoever allowed the Broadcom acquisition of VMware should be JAILED. The hoops you have to jump through to download anything are insane.
🖥️ vSphere Express bringt vMotion und HA in ein kleineres VMware-Paket. Doch 128 Kerne sind fest, mehrere Instanzen haben keine gemeinsame Verwaltung. »Express« heißt nicht klein.
👉 www.speicherguide.de/news/vmware-...
👉 www.speicherguide.de/news/vmware-...
Vmware: Vsphere Express soll Mittelstand zurückgewinnen
Mit »vSphere Express« bietet Vmware wieder Server-Virtualisierung für kleinere IT-Umgebungen an. Das Jahresabo ist auf maximal 128 CPU-Kerne begrenzt und lässt sich nicht erweitern. Zugleich verlänger...
www.speicherguide.de
November 10, 2026 at 10:22 AM
🖥️ vSphere Express bringt vMotion und HA in ein kleineres VMware-Paket. Doch 128 Kerne sind fest, mehrere Instanzen haben keine gemeinsame Verwaltung. »Express« heißt nicht klein.
👉 www.speicherguide.de/news/vmware-...
👉 www.speicherguide.de/news/vmware-...