BLOG POSTS
Scattered Spider: The Group Behind Major ESX Ransomware Attacks
A new wave of ransomware actors is rewriting the rulebook. Their sights are set on VMware ESX. Scattered Spider (AKA UNC3944, 0ktapus, Muddled Libra) is one of the most agile and dangerous threat clusters in operation today. They’re not a...
From Retail Floors to Virtual Cores: ESX Is the Next Attack Vector in Retail
In April 2025, Marks & Spencer—one of Britain’s most successful retailers—was crippled by a ransomware attack that didn’t just encrypt endpoints. It locked down VMware ESX hypervisors, freezing core systems and bringing operations to...
The Oversight That Could Cost You: Why Basic Hypervisor Protection Fails
Modern hypervisors form the backbone of today's cloud and virtualization environments. By enabling multiple business functions to reside on a single physical server, they enhance efficiency and reduce administrative overhead. As...
ZeroLock® Mitigates 100% of ESXi TTPs
MITRE ATT&CK v17 introduces a dedicated ESXi platform, marking a major shift in cybersecurity priorities. The new ESXi matrix spans 12 attack stages — adapting 34 Linux TTPs, carrying over 30 more, and introducing 4 ESXi-specific...
MITRE ATT&CK v17: Spotlighting ESXi
In a landmark update, MITRE ATT&CK v17 introduces a dedicated ESXi platform to its framework, bringing hypervisor threats into the spotlight. As a result, this move validates what security teams have been seeing for years: attackers...
Why ESXi Security in Manufacturing Can’t Wait
Industry 4.0 is transforming manufacturing, making operations smarter, faster, and more efficient. But with increased connectivity comes increased risk. Hypervisor threats are evolving fast—especially for organizations relying on VMware...
MITRE ATT&CK v17 Is Coming: What Security Teams Should Watch For
MITRE ATT&CK v17 is set to launch on April 22, 2025. While full details haven’t been released, a recent X post from MITRE suggests that VMware ESXi may be a new focus area—an important signal as concerns around ESXi ransomware...
Virtual Patching: How to Protect VMware ESXi from Zero-Day Exploits
Broadcom recently patched three VMware zero-days (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226), suspected to be actively exploited. These vulnerabilities allow attackers with VM admin access to break out, execute code on the...
ESXi Ransomware: The Growing Threat to Virtualized Environments
Ransomware has reshaped the cybersecurity landscape. A disturbing new trend is emerging: the targeting of VMware ESXi environments. As the core of countless organizations’ IT infrastructures, VMware ESXi has become a prime target for...
Protecting Networks at Scale: The Cyber Imperative for Managed Providers
Cybersecurity has become a critical concern across industries, but Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) are facing mounting pressure to secure not only their own operations, but also the vast...
BUILDING IN ROBUSTNESS FROM THE START (Part 1): A Critical Look at Resilient Software Development
By Austin Gadient Challenges in Keeping Software Clean and A New Hope The recent global outage caused by an update to the CrowdStrike Falcon agent caused me to reflect on software development and software design practices, with a focus on...
Vali Cyber® Announces Early Access to the First Ever Runtime Security Platform for ESXi
Vali Cyber, Inc., a next-generation provider of Linux cybersecurity solutions, announces that its autonomous zero-trust security platform, ZeroLock® has been expanded to protect ESXi hypervisors, 6.7+. With no other runtime security...
The Critical Role of Hypervisor Security in the Financial Sector
Imagine a financial institution where every virtual machine supporting transactions, trading, customer access, and internal operations suddenly goes dark. In 2026, that risk is becoming harder to ignore: finance-sector ransomware...
The Urgent Need for Hypervisor Security in Healthcare
In this white paper, we examine the threats the healthcare sector faces, emphasizing the crucial need for enhanced cybersecurity measures.
Ransomware in the Education Sector
In recent years, educational institutions have been relentlessly targeted by cyber-attacks, with hypervisor vulnerabilities standing out as one of the most critical risks. As remote learning has proliferated, the IT landscape in academia...
Vali Cyber® Secures $15M in Seed Funding to Revolutionize Linux Cybersecurity
Vali Cyber, Inc., a next-generation provider of Linux cybersecurity solutions, announces the successful completion of its seed funding round, raising USD 15 million. The funding round was co-led by Grotech Ventures and the 412 Venture Fund (412VF) and aided with strong support from Riverfront Ventures, Florida Funders, and additional strategic investors.