Hypervisor Archives - Page 6 of 10

Scattered Spider: The Group Behind Major ESXi Ransomware Attacks

A new wave of ransomware actors is rewriting the rulebook. Their sights are set on VMware ESXi. Scattered Spider (AKA UNC3944, 0ktapus, Muddled Libra) is one of the most agile and dangerous threat clusters in operation today. They’re not a traditional ransomware gang....

From Retail Floors to Virtual Cores: ESXi Is the Next Attack Vector in Retail

In April 2025, Marks & Spencer—one of Britain’s most successful retailers—was crippled by a ransomware attack that didn’t just encrypt endpoints. It locked down VMware ESXi hypervisors, freezing core systems and bringing operations to a standstill. Sales were...

Virtual Demo: A Hole in the Firewall – Why Network Defenses Just Don’t Cut It

Nathan Montierth and Joseph Comps from Vali Cyber’s Threat Intelligence Team break down why traditional network defenses, such as firewalls, aren’t enough to stop modern threats. Using a real-world inspired attack from UNC3886, where the firewall was the...

Webinar: ATT&CK v17 Decoded: What IT & Security Teams Must Know

Exploits targeting hypervisors are at an all-time high. Enterprise virtualization is a prime target for threat groups due to valuable data and the challenges associated with preventing escape to host attacks. This has been validated with the recent ATT&CK v17...

The Oversight That Could Cost You: Why Basic Hypervisor Protection Fails

Modern hypervisors form the backbone of today’s cloud and virtualization environments. By enabling multiple business functions to reside on a single physical server, they enhance efficiency and reduce administrative overhead. As organizations increasingly rely...

MITRE ATT&CK v17: Spotlighting ESXi

In a landmark update, MITRE ATT&CK v17 introduces a dedicated ESXi platform to its framework, bringing hypervisor threats into the spotlight. As a result, this move validates what security teams have been seeing for years: attackers are targeting hypervisors...