VMWare Security Blog

Update July 15, 2025 Today, Broadcom has released the following new VMware security advisory: VMSA-2025-0013 – VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239) The advisory documents the remediation of the Critical, Important, and Moderate severity vulnerabilities demonstrated at the Pwn2Own 2025 hacking contest. Customers should review the security … Continued

The post VMware and Pwn2Own 2025 – Berlin appeared first on VMware Security Blog.

New enhancements include: Micro-segmentation Assessment, Air-gapped NDR, and Scale-out Data Lake Platform (Security Services Platform 5.0) For decades, enterprises have relied on perimeter defenses to protect their private cloud assets from external threats. Yet, in this era of ransomware, protecting only the perimeter has proven to be insufficient. Traditionally, only a handful of “crown jewel” … Continued

The post VMware vDefend: Accelerate Enterprise’s Zero Trust Private Cloud Journey with Micro-segmentation and NDR Innovations appeared first on VMware Security Blog.

Complex, multi-staged ransomware attacks are top of mind for organizations across all industries. VMware vDefend Advanced Threat Prevention has won the AAA award from SE labs in the Advanced Security test, confirming its excellent capabilities in detecting these advanced threats. We are very happy to announce that SE Labs has awarded VMware vDefend Advanced Threat … Continued

The post SE Labs awards VMware vDefend Advanced Threat Prevention “AAA” Rating! appeared first on VMware Security Blog.

At Broadcom, we are committed to providing cutting-edge security solutions to empower VMware Cloud Foundation customers with cyber-resilient private cloud. We are excited to announce the general availability of Lateral Security for VMware Cloud Foundation with VMware vDefend validated solution. New to VMware Validated Solutions? VMware Validated Solutions is a vetted portfolio of technical validated solutions … Continued

The post Introducing Lateral Security for VMware Cloud Foundation with VMware vDefend Validated Solution appeared first on VMware Security Blog.

Introduction VMware vDefend objects can be created in both the UI and API. The vDefend API can be interacted with using tools like Postman, cURL, and Terraform along with scripting languages like Python and Golang. In this guide, we will be using Postman. The API documentation can be found here and has all the information … Continued

The post Getting Started with VMware vDefend Automation: Part 1 appeared first on VMware Security Blog.

VMware vDefend’s GenAI co-pilot innovation speeds up ransomware threat defense with context-driven explainability of the attack chain, correlated threat campaign insights, and guided remediation. There’s a lot of euphoria around generative AI/GenAI today, not just among enterprises but also among threat actors wanting to cast a wider net for ransom. As these technologies evolve, they … Continued

The post Introducing Intelligent Assist for VMware vDefend: Turbocharge Threat Defense with GenAI-Driven Intelligence appeared first on VMware Security Blog.

VMware Cloud Foundation (VCF) seamlessly integrates on-premises virtual infrastructure with the agility of the public cloud. This empowers customers to establish their own private cloud within a secure and controlled data center environment, delivering scalability, rapid innovation, and effective cost management. Security is a crucial consideration for any cloud environment. Organizations should design and implement … Continued

The post Secure VCF Management Workload Domain with VMware vDefend appeared first on VMware Security Blog.

The latest enhancements to the VMware vDefend portfolio include custom IDS/IPS signature options tailored for industry-specific attacks and a malware analysis test drive for advanced malware analysis.  In today’s evolving threat landscape, digital enterprises face sophisticated, laterally mobile cyberattacks within their private cloud environments. Traditional perimeter defenses are simply insufficient to secure east-west application traffic. … Continued

The post VMware vDefend: Latest Enhancements in Advanced Threat Prevention appeared first on VMware Security Blog.

VMware Explore Barcelona 2024 preparations are underway, and we couldn’t be more excited!  Mark your calendars for this year’s European event at Fira Gran Via in Barcelona from 4 – 7 November. The content catalog and session scheduling tool are now available, waiting for you to choose your favorites. In today’s ever-evolving cybersecurity arena, vDefend … Continued

The post VMware vDefend Security Sessions at VMware Explore Barcelona 2024 appeared first on VMware Security Blog.

Highlights: Innovations focus on GenAI assist for threat defense; greater performance, assessment and deployment flexibility for malware and ransomware prevention; VCF 9 integrations and Zero trust lateral security enhancements We are in an early stage of a thrilling journey with generative AI (GenAI) and large language models (LLMs).  There is tremendous excitement in regards to … Continued

The post VMware vDefend Innovations: Elevating Enterprise Lateral Threat Defense for the GenAI Era appeared first on VMware Security Blog.

Modern threats are shapeshifters. Attackers are evolving their tactics and techniques faster than ever before as they strive to evade detection and get past perimeter security solutions. Once inside the network, they’ll stop at nothing to steal sensitive data, commit extortion, or otherwise harm their victims. VMware created the vDefend architecture and product portfolio to … Continued

The post VMware vDefend – Zero Trust Lateral Security Sessions at Explore 2024 appeared first on VMware Security Blog.

Latest enhancements include significant scale increase, simplified Distributed Firewall operations, enhanced NDR threat defense and streamlined Security Intelligence capacity planning Digital enterprises need to combat relentless malware and ransomware attacks to protect their crown jewels – applications and data. All private cloud workloads – critical as well as non-critical – must be equally protected to … Continued

The post VMware vDefend Lateral Security: New Innovations to Strengthen Enterprise Ransomware Defense appeared first on VMware Security Blog.

Today’s attacks present a significant challenge for network security solutions Many network security products include sophisticated analysis components that inspect traffic for the presence of malicious payloads. This allows them to detect known exploits and malware binaries with good accuracy. Unfortunately, attacks have evolved over time and became much more sophisticated. Today, adversaries move stealthily … Continued

The post Workload-Aware Network Security appeared first on VMware Security Blog.

With each passing day, more and more companies are finding themselves victims of security breaches. Data center architectures have been traditionally flat network architectures that rely on perimeter firewalls to be the only inspection point. This inherent trust of the high speed private data center has allowed both unfettered access between workloads and malicious payloads … Continued

The post Securing Virtual Infrastructure and Zones with vDefend Distributed Firewall appeared first on VMware Security Blog.

Wednesday May 8, 2024 Updates I) Today, we’ve learned that it is NOT needed to login into the Broadcom Support Portal to see a list of VMware Security Advisories. The following URLs show the list of security advisories by VMware division without the need to login: VMware Division URL to list of VMware Security Advisories … Continued

The post Where did my VMware Security Advisories go? appeared first on VMware Security Blog.

The grim reality of today’s evolving threat landscape is that digital enterprises are getting breached daily. Despite deploying perimeter security, attackers are able to get in. The impact of malware and ransomware is the theft of sensitive data (such as intellectual property, personally identifiable information, and classified information).  Traditional appliance-based point solutions don’t work for … Continued

The post VMware vDefend – Defending Corporate Crown Jewels Against Unrelenting Cyber Attacks appeared first on VMware Security Blog.

Digital enterprises are investing in private cloud as the foundational infrastructure for their applications. These organizations have to deal with thousands of applications and many of them are crown jewels that power their businesses. Deploying these applications rapidly is challenging, maintaining compliance is getting harder, costs are mounting, and the need for visibility and control … Continued

The post Securing private cloud and enabling rapid application deployment for the digital enterprise appeared first on VMware Security Blog.

Applications are foundational to the internet and form the basic building blocks of any organization’s IT stack. Having complete and detailed visibility into the applications in your network is an important step in formulating an overall security posture for your organization. Visibility enables organizations to understand the types and traffic patterns of applications, determine the … Continued

The post App Dictionary: Stop guessing, start protecting. appeared first on VMware Security Blog.

Update May 14, 2024 Today, VMware has released the following new security advisory: VMSA-2024-0010 – VMware Workstation and Fusion updates address multiple security vulnerabilities (CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270) The advisory documents the remediation of the Critical and Important severity vulnerabilities demonstrated at the Pwn2Own 2024 hacking contest. Customers should review the security advisory and direct … Continued

The post VMware by Broadcom and Pwn2Own Vancouver 2024 appeared first on VMware Security Blog.