Quick Hit | VMware Cybersecurity Breach | Solarwinds hack continues

VMware Cybersecurity Breach

NSA Advisory
Russian State-Sponsored Actors Exploiting Vulnerability in
VMware® Workspace ONE Access Using Compromised
Credentials

VMware Flaw a Vector in SolarWinds Breach?
U.S. government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds products to attack high-value targets. According to sources, among those was a flaw in software virtualization platform VMware, which the U.S. National Security Agency (NSA) warned on Dec. 7 was being used by Russian hackers to impersonate authorized users on victim networks.

VMware latest to confirm breach in SolarWinds hacking campaign
VMware is the latest company to confirm that it had its systems breached in the recent SolarWinds attacks but denied further exploitation attempts.

The company said that the hackers did not make any efforts to further exploiting their access after deploying the backdoor now tracked as Sunburst or Solarigate.

Nevertheless, more than three-quarters of all business locations with 50 or more employees use server virtualization. The most commonly used server virtualization solution is still VMware (77%). In fact, compared to last year, VMware has further expanded its share (from 75.4% in 2017 to 77.1% now). This has come at the expense of numbers two and three, namely Microsoft and Citrix. They saw their share fall, from 16.9% in 2017 to 15.8% now and from 6.9% in 2017 to 6.4% now.