Broadcom’s advisory does not mention anything about in-the-wild exploitation. However, it’s not uncommon for threat actors toexploit VMware product vulnerabilities.In addition, Broadcom has been known not to include an in-the-wild exploitation warning in its initial advisory, even forlong-exploited zero-days.Related:High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenterRelated:2024 VMware Flaw Now in Attackers’ CrosshairsRelated:VMware Patches High-Severity Vulnerabilities in Aria Operations

In addition, Broadcom has been known not to include an in-the-wild exploitation warning in its initial advisory, even forlong-exploited zero-days.Related:High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenterRelated:2024 VMware Flaw Now in Attackers’ CrosshairsRelated:VMware Patches High-Severity Vulnerabilities in Aria Operations

Related:High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenterRelated:2024 VMware Flaw Now in Attackers’ CrosshairsRelated:VMware Patches High-Severity Vulnerabilities in Aria Operations

Related:2024 VMware Flaw Now in Attackers’ CrosshairsRelated:VMware Patches High-Severity Vulnerabilities in Aria Operations

Related:VMware Patches High-Severity Vulnerabilities in Aria Operations

Eduard Kovacs (@EduardKovacs) is the managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Attendees will walk away with guidance for how to build robust identity defenses, unify them under a consistent security model, and ensure business operations move quickly without compromise.

SecurityWeek’s 2026 Ransomware Summit will discuss a roadmap for defending the enterprise, from mitigating root causes to mastering recovery, giving security teams the critical insights needed to navigate and neutralize today’s ransomware extortion threats.

Wealth management platform Envestnet announced the appointment of Rich Friedberg as CISO.

Yuneeb Khan has been named Chief Financial Officer of KnowBe4, succeeding Bob Reich, who is retiring.

Source: SecurityWeek