Happy Veterans Day. Three generations in my family served: my grandpa in the Navy, my dad in the Army, and me in the Marine Corps. Thank you to every veteran, and to the families who served alongside them.
Happy 251st birthday to the United States Marine Corps. Proud to have served as a Sergeant and Data Communications Chief from 2003 to 2010. To every Marine, past and present: Semper Fi.
PHP2Shell (CVE-2026-109618/19) doesn't touch VCF itself, since VCF has no PHP. The web VMs you run on it are another story. VCF Operations service discovery, vDefend flow data, and vCenter owner tags can turn "where is PHP?" into a call list fast. https://t.co/4PXs3PJG3A
CVE-2026-41709 in ESX scores just a 2.7, but CISA added it to the Known Exploited list. An attacker with valid credentials can work freely without leaving a trace. It may look like a low score, but it adds extra damage once someone is already inside. https://t.co/K2cGw8JsgD
@EmunaEliran Good summary. If you're running any of these SDDC Manager versions, put the KB workaround in now instead of waiting for the patch, and make sure SDDC Manager can only be reached from the networks that actually need it.
@WaldemarPera@VMware@Broadcom@Sarge_Siddiqui@vmwarevcf@vExpert Good breakdown. Staging it this way is what I see working best. Most folks I talk to also wait for the first point release before moving production, so a staged plan gives you room to do that.
That's a wrap on #VMUGConnect Orlando. Day 2 closed with the VMUG Board sharing real lessons from VCF 9 deployments, plus a lot of new VCPs. Great to host the community in our backyard, and it's back in Orlando in 2027. #VMUG#vExpert
@MyVMUG@BradTompkins_ Great week, Brad and team. Thanks to everyone who made the trip to Orlando. The local chapter will be glad to have you back in 2027.
@MyVMUG Congrats, Dejah, and welcome to the leader crew. Passing VCP-VCF Admin on the first try is no small thing. Glad to have another Florida chapter leader in the mix.
@ericnipro Classic homelab-on-the-road problem. GPU heat over the NIC will get you every time. Good call standing it up vertically. See you on the floor today.
Day 1 of #VMUGConnect Orlando: the keynote showed Broadcom's own private cloud on VCF, with 205K+ VMs, 2.5M containers, 99.9%+ uptime, and zero major security incidents in 2 years. Best advice of the day: "Don't buy the buzzword. Validate the capability." #VMUG#vExpert
@BradTompkins_@vali_cyber@MyVMUG Great session. Hypervisor security doesn't get nearly enough attention, and the ESX ransomware trend is a good reminder to lock down management access and keep hosts patched.