The conversation discusses a vulnerability in VMware ESXi hypervisors that grants full admin privileges to threat actors. The vulnerability has been exploited by ransomware groups to deploy ransomware after gaining access to a network. The hosts emphasize the importance of patching systems and working with security teams or MSP/MSSPs to address the vulnerability. They also highlight the need for better monitoring and detection tools for ESXi hypervisors and the potential risks associated with domain access and group creation. The conversation concludes with a reminder to stay vigilant and secure.

Article: VMware ESXi hypervisor vulnerability grants full admin privileges

https://www.csoonline.com/article/3478658/vmware-esxi-hypervisor-vulnerability-grants-full-admin-privileges.html?fbclid=IwY2xjawEcQr9leHRuA2FlbQIxMAABHcdeBdrmjA-lnkJbw6prQ-v38t6CLlZCzmMJXUWgGSZbmZpdAp54EXZpHw_aem_ir4GNeCxoUn1V4IwZzNKwg&

Please LISTEN 🎧 LIKE 👍🏿 and SHARE ❤️ Thanks!

Socials:

Website - https://www.heroesmediagroup.com/shows/the-other-side-of-the-firewall/

Audio - https://podcasts.apple.com/us/podcast/the-other-side-of-the-firewall/id1542479181

YouTube - https://www.youtube.com/@theothersideofthefirewall7511

Facebook - https://www.facebook.com/profile.php?id=61556539026086

Instagram - https://www.instagram.com/theothersideofthefw

X (Twitter) - https://twitter.com/Ask_a_CISSP

TikTok - https://www.tiktok.com/@ryanwilliams683

Medium - https://medium.com/@ryanwilliamssenior

Subscribe to LinkedIn Newsletter - https://www.linkedin.com/build-relation/newsletter-follow?entityUrn=7172626552545865728

LinkedIn - https://www.linkedin.com/company/the-other-side-of-the-firewall/

Ryan on Twitter, LinkedIn, Clubhouse, and Threads - @ryrysecurityguy

Chris on LinkedIn - https://www.linkedin.com/in/chrisabacon/

Daniel on LinkedIn - https://www.linkedin.com/in/daniel-acevedo-3a8b641b/

Chapters

00:00 Introduction and Vacation Recap

01:41 Vulnerability in VMware ESXi Hypervisors

03:23 Importance of Patching Systems and Working with Security Teams

05:11 ESXi Hypervisor Privileges and Threat Actors

05:58 Securing Hypervisors and Monitoring Tools

09:02 Domain Access and Admin Group Creation

09:45 Defense and DEF Frameworks

#cybersecurity #esxi #vulnerability