"Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw"

According to Microsoft's threat intelligence team, ransomware groups are exploiting a critical vulnerability in ESXi hypervisors to gain full administrative access on domain-joined systems less than a week after VMware shipped patches for the flaw. Multiple ransomware groups have exploited the vulnerability, tracked as CVE-2024-37085 with a CVSS severity score of 6.8, to deploy data-extortion malware on enterprise networks. This article continues to discuss the exploitation of a recently patched VMware ESXi flaw by ransomware groups.

SecurityWeek reports "Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw"

Submitted by grigby1