VMware is pushing so many patches, it thinks users need new tools to manage the flood
Broadcom will sell HyperArmor to virtually patch VCF, lock configurations, and add MFA.
Broadcom's VMware is selling HyperArmor as an add-on to VMware Cloud Foundation after moving to monthly updates driven partly by bugs found with AI. HyperArmor virtually patches by blocking exploit traffic, rejects unapproved changes to known-good VCF states, and requires SSH credentials plus a time-based one-time password to limit use of stolen privileged credentials against ESX. VMware already describes similar virtual patching in vDefend using MOVEit CVE-2024-5806 as an example. Symantec and Carbon Black built HyperArmor; Broadcom previously launched AgentMinder for VCF from its CA business.
- HyperArmor is a paid VCF add-on from Symantec and Carbon Black.
- It offers virtual patching, configuration-state locking, and SSH plus TOTP MFA.
- VMware cites AI-found bugs and a shift to monthly VCF updates.
- Virtual patching is illustrated with MOVEit CVE-2024-5806 in vDefend.
- CVEs
- CVE-2024-5806
- Organizations
- SymantecCarbon Black
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-5806 | Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer | 9.8 | 81% |
From the original article
3 min read at theregister.comVMware has discovered so many flaws in its products using AI that it felt the need to create a new product to help users manage them. Prashanth Shenoy, vice president of product marketing in the VMware Cloud Foundation (VCF) division of Broadcom, told The Register that VMware recently moved to deliver monthly software updates, in part to address bugs found by AI.
By Simon Sharwood · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.