Project
Broadcom's VMware Cloud Foundation (VCF) is an integrated private-cloud platform bundling vSphere/ESX, storage, networking and centralized lifecycle management.
Broadcom introduced VMware HyperArmor in Frankfurt, adding virtual patching, script controls and multifactor login to ESX hosts. The stated aim is a longer window to test official patches, aimed at stolen root credentials and unpatched vulnerabilities.
Reality
The Distributed Services Engine still ships inside Cloud Foundation, but the SmartNIC-resident distributed firewall that justified it is no longer sold, and Broadcom's lifecycle documentation ends the matching security capability by October 2027.
Reality
Amazon EVS now spans 22 regions with support for VCF 9.0 and 9.1, and AWS says the calls it fields almost weekly start with an expiring data centre contract. The licence arithmetic sits outside the pitch.
Reality
VCF 9.1 pushes rarely used pages onto NVMe flash while DRAM stays expensive, and a customer at VMware Explore told Broadcom the switch saved up to $70,000 a server. Whether that number holds on your own hosts is something you can check yourself.
Reality
QUIRSO says a suspected China-nexus actor turned CVE-2026-59310 into a backdoor, a reverse SSH binary and Babuk-derived ransomware, with 361 victim IPs across 47 countries.
Reality