GoKawiil
Tech News
CISA has updated its Known Exploited Vulnerabilities catalog to flag ransomware gangs actively exploiting a critical VMware vCenter directory traversal flaw, CVE-2026-59310, patched by Broadcom in July. The bug had already been abused by a suspected APT group to compromise over 361 IP addresses across 47 countries, and Shadowserver now tracks more than 450 exposed vCenter servers online.
Broadcom has removed public access to VMware's Virtual Disk Development Kit (VDDK), a library relied on by major migration tools including Microsoft Azure Migrate, Red Hat's Migration Toolkit, Nutanix Move, and various VMware-to-KVM utilities. Customers report that Broadcom support confirmed the kit is no longer available for general download, though no official announcement or explanation has been issued.
A technical write-up explains how libzmq now supports AF_VSOCK, the Linux socket address family used for VM-to-hypervisor communication, originally developed by VMware as VMCI. The piece notes that while several languages already offer low-level AF_VSOCK bindings, no higher-level abstraction existed until this libzmq integration, which lets developers use familiar ZeroMQ patterns instead of manually handling raw socket calls.
VMware's parent Broadcom acknowledged that its sales team overemphasized VCF, its costly private cloud bundle, even when smaller customers wanted the cheaper vSphere Standard product. VCF chief product officer Paul Turner admitted the company has corrected this practice, and executives say an updated vSphere Standard release is coming soon, likely detailed at VMware Explore in Frankfurt in October.
Empirik, incubated inside Sequoia Capital since 2023 by former infrastructure executives Avon Puri and Sudheer Dhurjati, is now launching as an independent company with $21 million in seed funding from Sequoia, Canapi, and Alumni Ventures. The startup, now led by CEO Kartik Chandrayana, builds software that monitors infrastructure changes and predicts how they might cascade into failures before they happen. It already counts startups and Fortune 500 firms like S&P Global among its customers.