CYBERSECURITYTRACKER
Permanent story citation

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7340

As cited

Copy frozen at (site build).

ransomware

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning that ransomware gangs are actively exploiting a critical remote code execution (RCE) vulnerability in VMware vCenter. The flaw was patched in July, yet threat actors continue to leverage it in attacks.

Why it matters: Administrators running unpatched VMware vCenter instances face immediate risk of compromise by ransomware operators; prioritize application of the July patch if not already deployed.

VendorsVMware
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary