Vulnerability Spotlight: Multiple vulnerabilities in NVIDIA Windows GPU Display Driver, VMware ESXi, Workstation and FusionCisco Talos·Aug 5, 15:30 UTC · Aug 5, 2019Vulnerability in the wildCVE-2019-5521CVE-2019-5684CVE-2019-568560
Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming PatternThe Hacker News·May 24, 05:01 UTC · May 24, 2024Ransomware57
New Linux Variant of Play Ransomware Targeting VMware ESXi SystemsThe Hacker News·Jul 22, 05:48 UTC · Jul 22, 2024Ransomware60
Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi SystemsThe Hacker News·May 12, 05:21 UTC · May 12, 2023Ransomware57
A new variant of Cicada ransomware targets VMware ESXi systemsSecurity Affairs·Sep 2, 07:06 UTC · Sep 2, 2024Ransomware57
US CISA releases a script to recover servers infected with ESXiArgs ransomwareSecurity Affairs·Feb 8, 09:45 UTC · Feb 8, 2023RansomwareCVE-2021-2197460
VMware has no evidence of zero-day exploitation in ESXiArgs ransomware attacksSecurity Affairs·Feb 7, 15:52 UTC · Feb 7, 2023RansomwareCVE-2021-2197460
VMware fixed three actively exploited zeroSecurity Affairs·Mar 4, 23:39 UTC · Mar 4, 2025Exploit / PoC in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
VMware fixes flaws demonstrated at Chinese Tianfu Cup hacking contestSecurity Affairs·Feb 16, 09:15 UTC · Feb 16, 2022Exploit / PoCCVE-2021-22040CVE-2021-22041CVE-2021-22042+1 CVEs60
VMware addresses flaws exploited at recent Tianfu CupSecurity Affairs·Nov 20, 21:12 UTC · Nov 20, 2020VulnerabilityCVE-2020-4004CVE-2020-400560
New variant of ESXiArgs ransomware makes recovery much harderSecurity Affairs·Feb 9, 17:08 UTC · Feb 9, 2023RansomwareCVE-2021-2197460
VMware Warns Customers to Patch Actively Exploited ZeroInfosecurity Magazine·Mar 4, 15:45 UTC · Mar 4, 2025Vulnerability in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
VMware addresses ESXi issue disclosed at the Tianfu Cup competitionSecurity Affairs·Dec 6, 13:07 UTC · Dec 6, 2019Exploit / PoCCVE-2019-554460
VMware urgent updates addressed Critical ESXi Sandbox Escape bugsSecurity Affairs·Mar 5, 21:47 UTC · Mar 5, 2024VulnerabilityCVE-2024-22252CVE-2024-22253CVE-2024-22254+1 CVEs60
VMware Security Flaws Exploited in the Wild—Broadcom Releases Urgent PatchesThe Hacker News·Jan 9, 17:29 UTC · Jan 9, 2026Exploit / PoC in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
Broadcom Patches Critical ESXi Vulnerability Enabling Host Code ExecutionSecurity Affairs·Jul 29, 13:02 UTC · Jul 29, 2026Vulnerability in the wildCVE-2026-47876CVE-2026-59309CVE-2026-59310+2 CVEs60
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter EnvironmentsThe Hacker News·Jul 29, 04:24 UTC · Jul 29, 2025Exploit / PoCCVE-2023-34048CVE-2023-20867CVE-2022-138860
Italy, France and Singapore Warn of a Spike in ESXI RansomwareSecurity Affairs·Feb 6, 21:55 UTC · Feb 6, 2023RansomwareCVE-2021-2197460
VMware fixes several flaws in its ESXi, Workstation, Fusion and NSX-TSecurity Affairs·Oct 22, 07:26 UTC · Oct 22, 2020VulnerabilityCVE-2020-3992CVE-2020-3993CVE-2020-399460
BlackByte Adopts New Tactics, Targets ESXi HypervisorsInfosecurity Magazine·Aug 29, 16:30 UTC · Aug 29, 2024RansomwareCVE-2024-3708560
CISA adds VMware vCenter Server bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 23, 08:00 UTC · Jan 23, 2024Exploit / PoC in the wildCVE-2023-34048CVE-2023-20867160
China-linked APT UNC3886 exploits VMware zeroSecurity Affairs·Jan 22, 22:57 UTC · Jan 22, 2024Exploit / PoCCVE-2023-34048CVE-2023-20867260
VMware patches serious vulnerabilities in ESXi hypervisor, SD-WAN OrchestratorHelp Net Security·Nov 20, 00:00 UTC · Nov 20, 2020Vulnerability in the wildCVE-2020-4004CVE-2020-400560
July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugsHelp Net Security·Jul 13, 00:00 UTC · Jul 13, 2021Vulnerability in the wildCVE-2021-34527CVE-2021-34448CVE-2021-33771+6 CVEs60
More than 18,500 ESXi servers still vulnerable to VMware bug behind initial ransomware spreeThe Record·Feb 14, 18:48 UTC · Feb 14, 2023RansomwareCVE-2021-2197460
Experts warn of Babuk Locker attacks with recently leaked ransomware builderSecurity Affairs·Jul 2, 11:45 UTC · Jul 2, 2021Ransomware57
BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacksCisco Talos·Aug 28, 10:00 UTC · Aug 28, 2024VulnerabilityCVE-2024-3708560
Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021The Hacker News·Feb 19, 06:10 UTC · Feb 19, 2022Vulnerability42
ESXiArgs Ransomware Targets Publicly-Exposed ESXi OpenSLP ServersRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025RansomwareCVE-2021-21974CVE-2020-399260
Attackers use novel technique, malware to compromise hypervisors and virtual machinesHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2022Malware42
VMware fixed Code Execution Flaw in ESXi,Workstation & Fusion productsSecurity Affairs·Oct 17, 09:23 UTC · Oct 17, 2018VulnerabilityCVE-2018-6974CVE-2018-697360
Microsoft calls out apparent ESXi vulnerability that some researchers say is a ‘nothing burger’CyberScoop·Jul 30, 17:13 UTC · Jul 30, 2024Vulnerability in the wildCVE-2024-3708560
VMware addresses critical flaws in Workstation and FusionSecurity Affairs·Jun 24, 20:50 UTC · Jun 24, 2020VulnerabilityCVE-2020-3962CVE-2020-3969CVE-2020-3970+1 CVEs60
New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi ServersThe Hacker News·Feb 7, 06:10 UTC · Feb 7, 2023RansomwareCVE-2021-2197460
VMware Finds No Evidence of 0The Hacker News·Feb 9, 04:26 UTC · Feb 9, 2023RansomwareCVE-2021-2197460
Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux SystemsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Exploit / PoCCVE-2023-20867CVE-2023-20887CVE-2023-20888+1 CVEs160
Linux version of REvil ransomware targets ESXi VMSecurity Affairs·Jun 29, 13:24 UTC · Jun 29, 2021Ransomware57
AvosLocker ransomware targets Linux systems, including ESXi serversSecurity Affairs·Jan 11, 09:46 UTC · Jan 11, 2022Ransomware57