Microsoft calls out apparent ESXi vulnerability that some researchers say is a 'nothing burger'

The vulnerability allowed attackers to add users to an attacker-created admins group, facilitating full administrative permissions on domain-joined ESXi hypervisors, exploited by cybercriminal operations.

The CVE affecting VMware ESXi, vCenter Server, and Cloud Foundation, allows threat actors full administrative access, encrypting files, affecting server functionality, and potentially exfiltrating data within networks.

Read at CyberScoop