Latest Virtual Machine news

Hackers abuse QEMU to covertly tunnel network traffic in cyberattacks

Malicious actors were detected abusing the open-source hypervisor platform QEMU as a tunneling tool in a cyberattack against a large company.
- Bill Toulas
- March 05, 2024
- 11:47 AM
- 0
Linux version of Qilin ransomware focuses on VMware ESXi

A sample of the Qilin ransomware gang's VMware ESXi encryptor has been found and it could be one of the most advanced and customizable Linux encryptors seen to date.
- Lawrence Abrams
- December 03, 2023
- 04:07 PM
- 0
Microsoft fixes Windows Server VMs broken by October updates

Microsoft fixed a known issue causing blue screens and boot failures in Windows Server 2022 virtual machines (VMs) deployed on VMware ESXi hosts.
- Sergiu Gatlan
- November 15, 2023
- 03:51 PM
- 2
New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs

A new software-based fault injection attack, CacheWarp, can let threat actors hack into AMD SEV-protected virtual machines by targeting memory writes to escalate privileges and gain remote code execution.
- Sergiu Gatlan
- November 14, 2023
- 03:34 PM
- 2
Microsoft shares temp fix for broken Windows Server 2022 VMs

Microsoft publicly acknowledged a known issue causing Windows Server 2022 virtual machine (VM) blue screens and boot failures on VMware ESXi hosts.
- Sergiu Gatlan
- November 09, 2023
- 01:07 PM
- 0
BlackCat ransomware uses new ‘Munchkin’ Linux VM in stealthy attacks

The BlackCat/ALPHV ransomware operation has begun to use a new tool named 'Munchkin' that utilizes virtual machines to deploy encryptors on network devices stealthily.
- Bill Toulas
- October 19, 2023
- 05:40 PM
- 0
October Windows Server updates cause Hyper-V VM boot issues

According to customer reports, this month's Patch Tuesday updates are breaking virtual machines on Hyper-V hosts, causing them to no longer boot and display "failed to start" errors.
- Sergiu Gatlan
- October 17, 2023
- 08:31 AM
- 4
Linux version of Abyss Locker ransomware targets VMware ESXi servers

The Abyss Locker operation is the latest to develop a Linux encryptor to target VMware's ESXi virtual machines platform in attacks on the enterprise.
- Lawrence Abrams
- July 29, 2023
- 11:17 AM
- 0
Linux version of RTM Locker ransomware targets VMware ESXi servers

RTM Locker is the latest enterprise-targeting ransomware operation found to be deploying a Linux encryptor that targets virtual machines on VMware ESXi servers.
- Bill Toulas
- April 27, 2023
- 12:20 PM
- 1
Emergency VMware ESXi update fixes Windows Server 2022 VM boot issues

VMware has released a vSphere ESXi update to address a known issue causing some Windows Server 2022 virtual machines to no longer boot after installing this month's KB5022842 update.
- Sergiu Gatlan
- February 21, 2023
- 02:05 PM
- 2
Microsoft: February updates break some Windows Server 2022 VMs

Microsoft says some Windows Server 2022 virtual machines might not boot up after installing updates released during this month's Patch Tuesday.
- Sergiu Gatlan
- February 16, 2023
- 06:25 AM
- 3
Google ads push ‘virtualized’ malware made for antivirus evasion

An ongoing Google ads malvertising campaign is spreading malware installers that leverage KoiVM virtualization technology to evade detection when installing the Formbook data stealer.
- Bill Toulas
- February 02, 2023
- 07:04 PM
- 1
Microsoft pushes emergency fix for Windows Server Hyper-V VM issues

Microsoft has released emergency out-of-band (OOB) Windows Server updates to address a known issue breaking virtual machine (VM) creation on Hyper-V hosts after installing this month's Patch Tuesday updates.
- Sergiu Gatlan
- December 20, 2022
- 06:05 PM
- 0
Microsoft: December Windows Server updates break Hyper-V VM creation

Microsoft says Windows Server updates released during December's Patch Tuesday will trigger errors when trying to create new virtual machines on some Hyper-V hosts.
- Sergiu Gatlan
- December 14, 2022
- 07:40 AM
- 8
New Python malware backdoors VMware ESXi servers for remote access

A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system.
- Bill Toulas
- December 12, 2022
- 04:26 PM
- 0
New GwisinLocker ransomware encrypts Windows and Linux ESXi servers

A new ransomware family called 'GwisinLocker' targets South Korean healthcare, industrial, and pharmaceutical companies with Windows and Linux encryptors, including support for encrypting VMware ESXi servers and virtual machines.
- Bill Toulas
- August 06, 2022
- 10:05 AM
- 0
New RedAlert Ransomware targets Windows, Linux VMware ESXi servers

A new ransomware operation called RedAlert, or N13V, encrypts both Windows and Linux VMWare ESXi servers in attacks on corporate networks.
- Lawrence Abrams
- July 05, 2022
- 06:20 PM
- 3
Microsoft Azure now has confidential VMs with ephemeral storage

Microsoft has expanded its confidential computing offering and is now allowing Azure cloud computing service customers to create hardware isolated virtual machines (aka confidential VMs) with Ephemeral OS disks.
- Sergiu Gatlan
- July 05, 2022
- 03:40 PM
- 0
New ‘Cheers’ Linux ransomware targets VMware ESXi servers

A new ransomware named 'Cheers' has appeared in the cybercrime space and has started its operations by targeting vulnerable VMware ESXi servers.
- Bill Toulas
- May 25, 2022
- 03:25 PM
- 6
Cisco Umbrella default SSH key allows theft of admin credentials

Cisco has released security updates to address a high severity vulnerability in the Cisco Umbrella Virtual Appliance (VA), allowing unauthenticated attackers to steal admin credentials remotely.
- Sergiu Gatlan
- April 21, 2022
- 04:16 AM
- 0