Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities

Attackers are scanning VMware vCenter after critical vulnerabilities were disclosed, with DefusedCyber’s honeypots recording increased vCenter fingerprinting activity. The activity includes requests to the /sdk/ endpoint using RetrieveServiceContent and exploration of the /websso single sign-on path. The requests do not prove compromise but show that attackers are identifying exposed systems before launching more direct attacks. […] The post Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities appeared first on Cyber Security News.