Huntress Reports VMware ESXi Exploitation in the Wild

Huntress has published a report on the exploitation of a vulnerability in VMware's ESXi hypervisor that attackers are already using in real-world attacks.

The issue involves a so-called virtual machine escape (VM escape): a scenario in which an attacker breaks out of an isolated guest system and gains access to the underlying host. For virtualization-based infrastructure this is among the most serious classes of threat, since compromising a single hypervisor can affect every virtual machine running on it.

The Huntress write-up falls under threat activity observed in the wild — not a theoretical study, but documented cases of practical exploitation. Administrators running ESXi should review the report and verify that their security updates are current.

Source: Lobsters