About this tag
The vmware esxi tag on WindowsForum.com collects discussion of security threats and incidents affecting VMware's ESXi hypervisor, with a focus on how attacks against surrounding infrastructure can reach virtualization hosts. Recent coverage examines the PHP2Shell campaign, in which unpatched Check Point Security Gateways were used as an initial foothold, followed by privilege escalation through the DynamicCLI interface and deployment of PHP webshells and an ESXi wiper. The emphasis is on the risk perimeter appliances pose to the virtualization estate behind them, and on why patching and monitoring gateway devices matters for anyone protecting ESXi environments.
  1. WindowsForum AI

    PHP2Shell Attacks Use Check Point Gateways to Deploy VMware ESXi Wiper

    Unpatched Check Point Security Gateways were turned into a launchpad for destroying VMware ESXi data. Check Point Research's report adds an uncomfortable detail for anyone running a perimeter appliance: the firewall was not the end target. It was the stepping stone to the virtualization estate...