Topic

Virtualization Security

Security of hypervisors and the isolation boundary between guest virtual machines and their hosts, including guest-to-host escape techniques and the assumptions VM sandboxes carry.

Current clusters

security1 publisher

Ransomware gangs move onto the vCenter Syslog bug Broadcom patched on July 29

CVE-2026-59310 gave a suspected APT crew persistence on vCenter systems in August. CISA has now flagged the same directory traversal as abused by ransomware operators. Broadcom patched it on July 29.

Publishers:bleepingcomputer.com

Reality

Evidence58
Adoption62
Hype gap+20
Incentives45
Confidence55

security3 publishers

Guest admin is enough to break out of VMware Workstation onto the host

Broadcom's VMSA-2026-0007 fixes an integer overflow in the VMXNET3 adapter and a stack overflow in HGFS, both reachable by a local administrator inside the VM, and the only remedy on offer is version 26H1u1.

Publishers:securityaffairs.comsecurityweek.comthehackernews.com

Perspective Coverage

3 publishers

Builder: Builder 28%
Operator: Operator 58%
Investor: Investor 14%

Reality

Evidence80
Adoption30
Hype gap+8
Incentives60
Confidence72