Virtual Workspaces vulnerability exploited by malicious cyber actors
The NCSC is supporting an NSA advisory detailing how Russian state-sponsored actors have been exploiting a vulnerability in VMware® products.
Art Alex via Getty Images
Organisations are being encouraged to apply a patch which will resolve a vulnerability that can allow cyber criminals to access protected data on affected systems via VMware® products.
The National Security Agency (NSA) have issued an advisory which emphasises the importance of applying vendor-provided patches to affected VMware® identity management products. The advisory also provides further details on how to detect and mitigate compromised networks.
An NCSC spokesperson said:
“The NCSC works closely with international allies to counter the cyber threat and we fully support the findings of our US partners.
“We recommend following vendor best practice in the mitigation of vulnerabilities and urge customers to update systems immediately.
Further information
- Read the National Security Agency’s advisory (external link opens in new tab)
- VMWare has issued a patch to mitigate this vulnerability (external link opens in new tab)
