Search: “esxi”

270 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 330 Vulnerability 76 Exploit / PoC 47 Malware 20 Threat actor 11 Industry 10 Data breach 7 Phishing & fraud 3 Tools 2 AI tools & infra 1 Advisory 1 AI safety & security 1

SeverityAll critical 270 high 218 medium 12 low 5 info 4

Threat Analysis: VMware ESXi Attacks Soared in 2022

Infosecurity MagazineFeb 15, 12:00 UTC · Feb 15, 2023Ransomware CVE-2021-21974

60

Ransomware on ESXi: The Mechanization of Virtualized Attacks

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025Ransomware

60

China-linked APT UNC3886 used VMware ESXi Zero

Security AffairsJun 14, 08:44 UTC · Jun 14, 2023Exploit / PoC CVE-2023-20867

60

Experts uncovered novel Malware persistence within VMware ESXi Hypervisors

Security AffairsJun 13, 20:17 UTC · Jun 13, 2023Malware1

55

In Before The Lock: ESXi

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Ransomware CVE-2018-13379 CVE-2019-11510 CVE-2019-19781

60

+20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024

Security AffairsAug 1, 20:28 UTC · Aug 1, 2024Ransomware in the wildCVE-2024-37085

60

Ransomware gang uses a Python script to encrypt VMware ESXi servers

Security AffairsOct 5, 16:13 UTC · Oct 5, 2021Ransomware1

60

Chinese-speaking hackers exploited ESXi zero

Security AffairsJan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226 CVE-2025-22224 CVE-2025-22225

60

VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

Help Net SecurityJul 30, 00:00 UTC · Jul 30, 2024Ransomware in the wildCVE-2024-37085

60

CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

Security AffairsFeb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22226 CVE-2025-22224

60

VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

Help Net SecurityMar 7, 00:00 UTC · Mar 7, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

Researchers discover ransomware that encrypts virtual machines hosted on an ESXi hypervisor

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2021Ransomware

60

Italy, France and Singapore Warn of a Spike in ESXI Ransomware

Security AffairsFeb 6, 21:55 UTC · Feb 6, 2023Ransomware CVE-2021-21974

60

U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 5, 06:09 UTC · Mar 5, 2025Exploit / PoC in the wildCVE-2024-50302 CVE-2025-22225 CVE-2025-22224+3 CVEs

60

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

The Hacker NewsJul 31, 04:04 UTC · Jul 31, 2024Ransomware in the wildCVE-2024-37085 CVE-2023-282521

60

VMware urgent updates addressed Critical ESXi Sandbox Escape bugs

Security AffairsMar 5, 21:47 UTC · Mar 5, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

VMware has no evidence of zero-day exploitation in ESXiArgs ransomware attacks

Security AffairsFeb 7, 15:52 UTC · Feb 7, 2023Ransomware CVE-2021-21974

60

VMware fixes several flaws in its ESXi, Workstation, Fusion and NSX-T

Security AffairsOct 22, 07:26 UTC · Oct 22, 2020Vulnerability CVE-2020-3992 CVE-2020-3993 CVE-2020-3994

60

China-Linked Hackers Exploit VMware ESXi Zero

The Hacker NewsJan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224 CVE-2025-22225 CVE-2025-22226

60

BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024

Security AffairsAug 28, 14:39 UTC · Aug 28, 2024Ransomware CVE-2024-37085

60

Microsoft calls out apparent ESXi vulnerability that some researchers say is a ‘nothing burger’

CyberScoopJul 30, 17:13 UTC · Jul 30, 2024Vulnerability in the wildCVE-2024-37085

60

Play Ransomware Expands to Target VMWare ESXi Environments

Infosecurity MagazineJul 22, 17:15 UTC · Jul 22, 2024Ransomware

60

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

The Hacker NewsMar 6, 15:00 UTC · Mar 6, 2024Vulnerability CVE-2024-22252 CVE-2024-22253 CVE-2024-22254+1 CVEs

60

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

The Hacker NewsJul 29, 04:24 UTC · Jul 29, 2025Exploit / PoC CVE-2023-34048 CVE-2023-20867 CVE-2022-1388

60

Akira ransomware continues to evolve

Cisco TalosOct 21, 16:50 UTC · Oct 21, 2024Ransomware in the wildCVE-2024-40766 CVE-2020-3259 CVE-2023-20263+5 CVEs

60

BlackByte Adopts New Tactics, Targets ESXi Hypervisors

Infosecurity MagazineAug 29, 16:30 UTC · Aug 29, 2024Ransomware CVE-2024-37085

60

VMware Finds No Evidence of 0

The Hacker NewsFeb 9, 04:26 UTC · Feb 9, 2023Ransomware CVE-2021-21974

60

VMware addresses ESXi issue disclosed at the Tianfu Cup competition

Security AffairsDec 6, 13:07 UTC · Dec 6, 2019Exploit / PoC CVE-2019-5544

60

Zeodium pays up to $500,000 for VMware ESXi, Microsoft Hyper

Security AffairsMar 8, 09:09 UTC · Mar 8, 2019Exploit / PoC

60

VMware patches serious vulnerabilities in ESXi hypervisor, SD-WAN Orchestrator

Help Net SecurityNov 20, 00:00 UTC · Nov 20, 2020Vulnerability in the wildCVE-2020-4004 CVE-2020-4005

60

Broadcom Patches Critical ESXi Vulnerability Enabling Host Code Execution

Security AffairsJul 29, 13:02 UTC · Jul 29, 2026Vulnerability in the wildCVE-2026-47876 CVE-2026-59309 CVE-2026-59310+2 CVEs

60

New Malware Families Found Targeting VMware ESXi Hypervisors

The Hacker NewsOct 2, 05:17 UTC · Oct 2, 2022Malware

55

China-linked APT UNC3886 exploits VMware zero

Security AffairsJan 22, 22:57 UTC · Jan 22, 2024Exploit / PoC CVE-2023-34048 CVE-2023-208672

60

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

The Hacker NewsJul 29, 04:19 UTC · Jul 29, 2025Ransomware

60

BlackMatter ransomware also targets VMware ESXi servers

Security AffairsAug 6, 06:53 UTC · Aug 6, 2021Ransomware

60

Critical RCE Flaws Affect VMware ESXi and vSphere Client — Patch Now

The Hacker NewsFeb 24, 17:35 UTC · Feb 24, 2021Vulnerability in the wildCVE-2021-21972 CVE-2019-19781 CVE-2021-21973+3 CVEs

60

LockBit 5.0 ransomware expands its reach across Windows, Linux, and ESXi

Help Net SecurityMay 13, 10:11 UTC · May 13, 2026Ransomware

60

VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi

The Hacker NewsApr 28, 14:01 UTC · Apr 28, 2026Ransomware

60

CISA confirms exploitation of VMware ESXi flaw by ransomware attackers

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22224 CVE-2025-22226

60

Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi

Security AffairsMay 16, 20:11 UTC · May 16, 2025Exploit / PoC

60