CISA: Critical VMware RCE flaw now exploited by ransomware gangs

CISA has issued a warning that ransomware gangs are actively exploiting a critical remote code execution (RCE) vulnerability in VMware vCenter Server. The flaw was patched by VMware in July but continues to be targeted by threat actors. CISA's alert indicates that exploitation has escalated beyond initial attackers to include ransomware groups, significantly raising the threat level. Organizations running VMware vCenter are urged to apply the patch immediately if they have not already done so. The vulnerability allows attackers to execute arbitrary code remotely, potentially giving them full control over affected systems. This type of critical infrastructure exposure is particularly dangerous as vCenter manages virtualized environments at enterprise scale.