TLDR Tech / InfoSec
Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access (2 minute read)
Digital forensics firm QUIRSO reports that a recently patched, critical vulnerability in VMware vCenter Syslog Server is actively being exploited by threat actors. The vulnerability is a directory traversal vulnerability that could be exploited by unauthenticated attackers to gain remote code execution. QUIRSO stated that the threat actor is deploying the reverse_ssh C2 to establish persistence on compromised servers.
Read the full story