Microsoft is urging VMware ESXi users to address a critical vulnerability that allows attackers to achieve full administrative control, potentially leading to devastating consequences like encrypting files and compromising virtual machines.
Ransomware groups like Storm-0506 and Octo Tempest have been exploiting this flaw for post-compromise attacks, with Microsoft highlighting how a simple domain group creation can escalate privileges to unrestricted admin.
[
Collection
]
[
|
...
]