Broadcom has released security updates addressing five vulnerabilities across VMware products, including three critical flaws that enable authentication bypass and virtual machine escapes to the host system.
The vulnerabilities affect VMware vCenter, ESX, Workstation, and Fusion. The three critical issues allow attackers to bypass authentication, execute arbitrary code, and escape from virtual machines to gain access to the underlying host.
VMware users should apply patches immediately to affected systems. The fixes address a range of severity levels, with the critical flaws presenting the highest risk to enterprise infrastructure and individual users running virtualized environments.
Details on specific vulnerability identifiers and affected versions are available through Broadcom's official security advisory. Organizations running VMware infrastructure should prioritize patching to prevent potential exploitation. The company has not reported active exploitation of these flaws in the wild at this time.
This update follows Broadcom's acquisition of VMware and its ongoing responsibility for maintaining security across the virtualization platform's product suite.
Healthcare software company Unlimited Technology Systems disclosed a data breach affecting 3.8 million individuals. The breach occurred in October 2025.
Cybercriminals are leveraging artificial intelligence to discover and exploit security weaknesses at unprecedented speeds, creating threats that traditional defenses were never designed to counter.
Levi Strauss & Co. disclosed a cyberattack in which hackers used social engineering tactics to compromise three employees and steal corporate data from their machines.
Computer maker Framework has notified its entire customer base of a data breach that exposed personal information. Hackers accessed names, email addresses, phone numbers, and physical addresses.