Hackers compromised VMware ESXi hypervisors with a global ransomware attack. VMware admits the attack isn't zero day but a known threat for at least two years.
The global assault on vulnerable VMware hypervisors may have been mitigated by updating to the latest version of the product, but patch management is only part of the story.
When threat actors evaluate a company s attack surface, they re not thinking in terms of organizational silos. They re probing for the right combination of vulnerabilities, misconfigurations and identity privileges.