#vmware — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #vmware, aggregated by home.social.
-
Как перенести любую ВМ с одной платформы на другую: тестируем агентскую миграцию в мультивендорной среде
Привет, Хабр! Это снова Евгений Шилкин и Степан Татауров, эксперты дивизиона инфраструктуры Группы Rubytech. В прошлой статье мы разобрали подходы к миграции, посмотрели, какие есть альтернативные решения, и обмолвились парой фраз про MIND Migrate Guest. В этой статье — практическая часть, проверим MIND в деле и протестируем его. Что из себя представляет процесс миграции с точки зрения алгоритма и чем он отличается от простого переноса между серверами? В процессе обнаружили несколько интересных находок. Давайте разбираться.
https://habr.com/ru/companies/rubytech/articles/1072072/
#миграция #vmware #виртуализация #тестирование #виртуальная_машина #скалар #пак #kvm #linux #mind_migrate
-
41 deceptive download sites show a real link, then send you somewhere else
A network of 41 fraudulent websites has been identified impersonating popular games and Windows software to redirect users toward Download Studio installer. These sites advertise legitimate products including Counter-Strike, Half-Life, Fallout, Roblox, VLC, 7-Zip, and VMware using authentic product information and real download links. The deception employs JavaScript to display legitimate URLs when hovering over download buttons, but redirects users elsewhere upon clicking. Sites target users seeking everyday software and security tools, pushing them through affiliate redirects to Download Studio installation. The campaign is particularly concerning as Download Studio's automatic updater was previously compromised in 2020 to distribute FakeMBAM backdoor and cryptocurrency miners, though no current malicious activity is confirmed.
Pulse ID: 6a86abf21e440a7b0b2784c0
Pulse Link: https://otx.alienvault.com/pulse/6a86abf21e440a7b0b2784c0
Pulse Author: AlienVault
Created: 2026-08-20 07:25:38Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#BackDoor #CyberSecurity #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #VMware #Windows #ZIP #bot #cryptocurrency #AlienVault
-
Build a Private AWS!
Deploy Apache CloudStack on Ubuntu 24.04 Bare Metal.SRE Blueprint:
• Netplan Bridge: Set up cloudbr0 & disable NIC DHCP.
• Libvirt Trap: Mask libvirtd.socket & disable AppArmor.
• Secure Storage: Restrict NFS exports strictly to Management VLANs.
• VMware Escape Plan: Convert VMDK to QCOW2 with built-in virt-v2v.https://www.servermo.com/howto/deploy-apache-cloudstack-ubuntu-24-04/
-
oh man so the 150GB of vmdks actually downloaded through the weird permissions web and vpn didn't drop over night. Lettuce pray that converting these to vhd and attaching them to an azure vm actually works.
If anyone out there has experience with doing this, I would be happy to hear about it or any links shared. Azure migrate can be a long tail solution, but this is a nasty rhel 7.9 vm running an ancient java version, among other things, and migrating this particular nightmare is time sensitive.
-
Теория миграции ИТ-систем. Чем отличаются подходы вендоров и как с этим дела в разных странах
Привет, Хабр! В целом, про миграцию и импортозамещение высказался уже практически каждый утюг нашей необъятной родины. Почему мы вообще снова хотим подсветить эту тему? Потому что прошло уже достаточно времени, чтобы осознать: миграция — это не просто оперативное решение проблемы, а новый подход к созданию и поддержанию ИТ-инфраструктуры. Мы в компании работаем в такой парадигме довольно давно, начали задолго до 2022 и роста популярности подобных решений, так что успели накопить достаточно опыта. Статья носит обзщепознавательный характер и будет полезна тем, кому в целом интересны механизмы миграции ИТ-систем — и их ключевые отличия у разных вендоров в разных странах. В следующих статьях цикла мы разберем типы миграции, их алгоритмы и посмотрим на результаты тестирования, чтобы оценить их работу в реальных условиях. А пока…
https://habr.com/ru/companies/rubytech/articles/1071950/
#миграция #vmware #виртуализация #виртуальная_машина #basis #скалар #пак #kvm
-
CVE Alert: CVE-2026-59310 - VMware - Cloud Foundation - https://www.redpacketsecurity.com/cve-alert-cve-2026-59310-vmware-cloud-foundation/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-59310 #vmware #cloud-foundation
-
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Indicators extracted from public reporting. Source: https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html
Pulse ID: 6a82e8add8a03551e0f0dd0e
Pulse Link: https://otx.alienvault.com/pulse/6a82e8add8a03551e0f0dd0e
Pulse Author: CyberHunter_NL
Created: 2026-08-17 10:55:41Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#China #CyberSecurity #HTML #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #RansomWare #UK #VMware #bot #CyberHunter_NL
-
CVE-2026-59310: VMware vCenter Flaw Exploited Five Days After Disclosure - https://www.redpacketsecurity.com/vcenter-flaw-exploited-just-five-days-after-disclosure/
-
Falha crítica no VMware vCenter permite ataques a servidores em larga escala. Uma vulnerabilidade crítica no VMware vCenter Syslog Server está a ser explorada por atacantes sem autenticação para executar código arbitrário. 🚨
-
#VMware Splitter: Schwachstelle wird angegriffen, Zugriff auf Updates ohne Wartungsvertrag und sporadische Shutdowns ohne Ursache
-
🚨 SIGINT // Cybersecurity Watch — 2026-08-14
Critical VMware vCenter vulnerability is actively being exploited by attackers — patch now to protect virtualized infrastructure.
https://www.securityweek.com/critical-vmware-vcenter-vulnerability-in-attackers-crosshairs/
#CVE #VMware #InfoSec #Cybersecurity -
📢 ⚠️ Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.
Listen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/
-
🛠️ Here's how to configure the VCF 9.1 Installer with an online depot to deploy VCF or VVF.
https://thedxt.ca/2026/08/configure-vcf-installer-online-depot/
-
🆕 Here's how to deploy the VCF Installer which you can use to deploy VCF or VVF.
-
iX-Workshop: Schritt für Schritt – VMware zu Proxmox VE
Praktische Schritte, Fallstricke vermeiden: Lernen Sie, wie Sie Ihre VMware-Infrastruktur effizient und sicher auf Proxmox VE umstellen.
#Containerisierung #IT #iXWorkshops #Migration #Virtualisierung #VMware #news
-
HostDzire suffered a critical ransomware attack on its VMware infrastructure, encrypting virtual disks and causing total data loss for affected VPS users.
-
#VMware fixes three critical flaws allowing auth bypass, VM escapes
-
#VMware: three critical #vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. Patches released by Broadcom - it's time to patch!
👇
https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/ -
5 VMware vulnerabilities.
One of them is CVE-2026-47876, which allows to escape a VM using the VM virtual network card VMXNET3 using a out-of-bounds write vulnerability. Needs local admin permissions on the VM.
-
VMware ESX, vCenter, Workstation, and Fusion: Updates close critical gaps
VMware updates for ESX, vCenter, Workstation, and Fusion close security vulnerabilities that allow, for example, bypassing authentication.
#Übernahme #IT #Security #Sicherheitslücken #Updates #VMware #news
-
VMware ESX, vCenter, Workstation und Fusion: Updates schließen kritische Lücken
VMware-Updates für ESX, vCenter, Workstation und Fusion schließen Sicherheitslücken, die etwa die Umgehung der Authentifizierung erlauben.
#Übernahme #IT #Security #Sicherheitslücken #Updates #VMware #news
-
VMware : 3 failles critiques dans vCenter et ESX, dont une évasion de machine virtuelle https://www.it-connect.fr/vmware-3-failles-critiques-vcenter-esx-juillet-2026/ #ActuCybersécurité #Vulnérabilités #Cybersécurité #VMware
-
I am really impressed with #Proxmox now. Not that I wasn't already, but on many previous attempts, I failed to run #macOS on #VMware on an #AMD CPU.
And here comes Proxmox: first try, installed #Tahoe, and it just works. There were a few minor hiccups, but in general, it was pretty easy thanks to https://github.com/lucid-fabrics/osx-proxmox-next
I have an #iOS app I need to maintain for a customer, and I refuse to buy #Apple hardware just for that. I don't want to give that greedy blood sucking company a single cent. I was using services like MacInCloud, but for the time being, I can use this VM.
Unfortunately, I think Tahoe will be the last version to run on x86. I will probably be lucky if I can squeeze one more year of life out of this VM solution. But every second counts.
-
I’m excited to be attending VMware Explore this year in Las Vegas. Here are some of the sessions I am looking forward to attending.
-
I like a fresh lab. I do not like building one for the umpteenth time, especially when the build takes longer than the thing I actually wanted to test.
build-lab is the final piece in a three-script set, and the one that ties the other two together. One command, an ISO, and roughly half an hour later you have a Windows Server 2025 domain controller. Log on once and the domain populates itself with a directory that looks lived in, nested groups and GPOs and an Enterprise CA included. No GUI, no answer file to hand-edit, no clicking Next.
This is an orchestrator. It calls New-VMwareWorkstationVM to build and start the VM, pushes the new-AdDomain payload into the guest over vmrun, and kicks off the promotion. Still PowerShell 5.1, still nothing outside what Microsoft and VMware already ship.
One thing is deliberately manual. Directory population runs from a scheduled task that fires at your first Administrator logon, so you do have to log into the console once. I could automate it by storing a domain Administrator password under a startup-triggered task. That's the one compromise I decided not to make, even in a lab, and I'm still not certain it was the right call.
The interesting problem was verification. A successful AD promotion reboots Windows immediately, which tears down the vmrun guest-operations channel mid-call. A blocking call hung on that reboot and never came back. So the guest script gets launched fire-and-forget, which means there is no exit code to read. Just silence.
Instead, build-lab confirms success by polling for ntds.dit in the guest, and pulls the guest's deployment logs back to the host either way, because the run you need logs from is the one that failed.
https://github.com/0x44616e69656c/build-lab
What's the step in your lab build that you've rebuilt by hand so many times you've stopped noticing it?
#PowerShell #ActiveDirectory #WindowsServer #Automation #HomeLab #VMware #InfoSec
