Search: “esxi”

508 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 330 Vulnerability 76 Exploit / PoC 47 Malware 20 Threat actor 10 Industry 10 Data breach 7 Phishing & fraud 3 Tools 2 AI tools & infra 1 Advisory 1 AI safety & security 1

SeverityAll critical 270 high 217 medium 12 low 5 info 4

Threat Analysis: VMware ESXi Attacks Soared in 2022

Infosecurity MagazineFeb 15, 12:00 UTC · Feb 15, 2023Ransomware CVE-2021-21974

60

Ransomware on ESXi: The Mechanization of Virtualized Attacks

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025Ransomware

60

China-linked APT UNC3886 used VMware ESXi Zero

Security AffairsJun 14, 08:44 UTC · Jun 14, 2023Exploit / PoC CVE-2023-20867

60

Experts uncovered novel Malware persistence within VMware ESXi Hypervisors

Security AffairsJun 13, 20:17 UTC · Jun 13, 2023Malware1

55

New wave of ransomware attacks targeting VMware ESXi Servers

Security AffairsFeb 4, 13:11 UTC · Feb 4, 2023Ransomware CVE-2021-21974

60

In Before The Lock: ESXi

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Ransomware CVE-2018-13379 CVE-2019-11510 CVE-2019-19781

60

ESXiArgs Ransomware Targets Publicly-Exposed ESXi OpenSLP Servers

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware CVE-2021-21974 CVE-2020-3992

60

+20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024

Security AffairsAug 1, 20:28 UTC · Aug 1, 2024Ransomware in the wildCVE-2024-37085

60

New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

The Hacker NewsJun 14, 13:32 UTC · Jun 14, 2023Ransomware in the wild

60

New GenieLocker ransomware for Windows, ESXi, and Linux

Kaspersky SecurelistJul 30, 08:00 UTC · Jul 30, 2026Ransomware

57

ESXi ransomware attacks use SSH tunnels to avoid detection

Security AffairsJan 27, 10:05 UTC · Jan 27, 2025Ransomware

57

Italian ACN warns ransomware campaign targeting VMware ESXi

Security AffairsFeb 6, 08:23 UTC · Feb 6, 2023Ransomware CVE-2021-21974

60

Ransomware gang uses a Python script to encrypt VMware ESXi servers

Security AffairsOct 5, 16:13 UTC · Oct 5, 2021Ransomware1

60

Chinese-speaking hackers exploited ESXi zero

Security AffairsJan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226 CVE-2025-22224 CVE-2025-22225

60

VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

Help Net SecurityJul 30, 00:00 UTC · Jul 30, 2024Ransomware in the wildCVE-2024-37085

60

Ransomware gangs exploit VMware ESXi bug CVE-2024

Security AffairsJul 29, 20:55 UTC · Jul 29, 2024Ransomware CVE-2024-37085 CVE-2023-28252

60

CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

Security AffairsFeb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22226 CVE-2025-22224

60

VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

Help Net SecurityMar 7, 00:00 UTC · Mar 7, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

Researchers discover ransomware that encrypts virtual machines hosted on an ESXi hypervisor

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2021Ransomware

60

CISA adds VMware ESXi bug to its Known Exploited Vulnerabilities catalog

Security AffairsJul 30, 21:08 UTC · Jul 30, 2024Exploit / PoC in the wildCVE-2024-37085

60

Hackers exploit VMware vulnerability that gives them hypervisor admin

Ars Technica · SecurityJul 29, 21:02 UTC · Jul 29, 2024Vulnerability CVE-2024-37085 CVE-2023-28252

47

Italy, France and Singapore Warn of a Spike in ESXI Ransomware

Security AffairsFeb 6, 21:55 UTC · Feb 6, 2023Ransomware CVE-2021-21974

60

U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 5, 06:09 UTC · Mar 5, 2025Exploit / PoC in the wildCVE-2024-50302 CVE-2025-22225 CVE-2025-22224+3 CVEs

60

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

The Hacker NewsJul 31, 04:04 UTC · Jul 31, 2024Ransomware in the wildCVE-2024-37085 CVE-2023-28252

60

VMware urgent updates addressed Critical ESXi Sandbox Escape bugs

Security AffairsMar 5, 21:47 UTC · Mar 5, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

VMware has no evidence of zero-day exploitation in ESXiArgs ransomware attacks

Security AffairsFeb 7, 15:52 UTC · Feb 7, 2023Ransomware CVE-2021-21974

60

45,654 VMware ESXi servers reached End of Life on Oct. 15

Security AffairsOct 17, 07:01 UTC · Oct 17, 2022Ransomware

57

Experts analyze first LockBit ransomware for Linux and VMware ESXi

Security AffairsJan 27, 09:48 UTC · Jan 27, 2022Ransomware

57

VMware fixes several flaws in its ESXi, Workstation, Fusion and NSX-T

Security AffairsOct 22, 07:26 UTC · Oct 22, 2020Vulnerability CVE-2020-3992 CVE-2020-3993 CVE-2020-3994

60

China-Linked Hackers Exploit VMware ESXi Zero

The Hacker NewsJan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224 CVE-2025-22225 CVE-2025-22226

60

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs

Help Net SecurityApr 23, 00:00 UTC · Apr 23, 2025Ransomware

57

BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024

Security AffairsAug 28, 14:39 UTC · Aug 28, 2024Ransomware CVE-2024-37085

60

Microsoft calls out apparent ESXi vulnerability that some researchers say is a ‘nothing burger’

CyberScoopJul 30, 17:13 UTC · Jul 30, 2024Vulnerability in the wildCVE-2024-37085

60

Play Ransomware Expands to Target VMWare ESXi Environments

Infosecurity MagazineJul 22, 17:15 UTC · Jul 22, 2024Ransomware

60

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

The Hacker NewsMar 6, 15:00 UTC · Mar 6, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

More than 18,500 ESXi servers still vulnerable to VMware bug behind initial ransomware spree

The RecordFeb 14, 18:48 UTC · Feb 14, 2023Ransomware CVE-2021-21974

60

HelloKitty ransomware now targets VMware ESXi servers

Security AffairsJul 15, 17:07 UTC · Jul 15, 2021Ransomware

57

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

The Hacker NewsJul 29, 04:24 UTC · Jul 29, 2025Exploit / PoC CVE-2023-34048 CVE-2023-20867 CVE-2022-1388

60

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

The Hacker NewsJan 28, 13:08 UTC · Jan 28, 2025Ransomware

57

Akira ransomware continues to evolve

Cisco TalosOct 21, 16:50 UTC · Oct 21, 2024Ransomware in the wildCVE-2024-40766 CVE-2020-3259 CVE-2023-20263+5 CVEs

60