VMware ESXi Hit by Zero-Day Auth Bypass, Ransomware Attacks Surge

[Buddha_S]

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505

[kotaKat]

"A malicious actor with sufficient Active Directory (AD) permissions can gain full access"

"A malicious actor with local administrative privileges on a virtual machine with an existing snapshot"

"A malicious actor with network access to vCenter Server may create a denial-of-service"

... Zero day auth bypass?

[pvg]

You should take a look at https://news.ycombinator.com/newsguidelines.html, specifically the bits about titles.

[mysterydip]

Maybe there's certain things in tech that shouldn't be trusted to a single user, like how two keys at the same time were required for a nuke (at least in movies).