Big Changes for VCF Security & Compliance: What’s Included—and What’s Not
Broadcom’s VCF updates reshape infrastructure compliance, VMware Salt workload enforcement, and recovery. See what’s included, what’s planned, and what’s extra.
-
-
SRM Now Included with VCF and VVF: How to Get Your License and Protect Your VMs
SRM is now included for active VCF and VVF subscribers. Find your interim license, activate disaster recovery, and plan the 2027 transition.
-
Quantum-Safe Storage Isn’t a 2030 Problem. It’s Shipping Today.
Post-quantum Fibre Channel encryption is shipping now. A deep technical guide to SecureHBA, FC-SP-3, FOS 10.0.1, PowerStoreOS 5.1, Brocade Extension, VMware vSAN, and how to prove the link is encrypted.
-
Cybersecurity Awareness Month Is Over. Your Exposure Isn’t.
October ended. Your exposure didn’t. A hands-on guide to turning VCF Operations, Logs, Networks and Orchestrator into a verified security response—then extending protection with ACC, vDefend, Avi and existing tools.
-
VCF Operations Orchestrator: Deploy Standalone, Automate Remediation — No VCF Automation Required
Deploy a standalone VCF Operations Orchestrator without VCF Automation, connect it to Operations, and turn 15 familiar IT tickets into monitored, approved and verified workflows. Includes OVA setup, APIs, real Broadcom KBs and expert walkthroughs.
-
The Vulnerability You Didn’t Know You Were Running: Node2Shell’s Hidden Reach
Node2Shell reaches beyond Node.js into buildpacks, containers, cloud workloads and appliances. Learn what’s affected, how to remediate, and why upgrades can undo interim protections.
-
Node2Shell Under the Hood: Hidden Dependencies, Affected Runtimes, and Fixes That Actually Work
A technical Node2Shell companion: affected runtimes and platforms, hidden buildpack dependencies, vendor-specific remediation, and how to verify fixes survive upgrades.
-
What’s New Is Old Again: VMware Tools, Virtual Hardware, and the Hidden Cost of Standing Still
A VMware Tools release sparked a look back at a production environment where 90% of VMs were on hardware version 21—and the rest spanned generations. Here’s why Tools, virtual hardware, Secure Boot, and lifecycle gaps deserve a closer look.
-
VMSA-2026-0008: Critical SDDC Manager RCE (CVE-2026-111497) — Workarounds Available, Patches Pending
Broadcom’s October 28 VMSA-2026-0008.1 revises CVE-2026-111497 affected-product scope to VCF-only SDDC Manager 9.x and 5.2.x, superseding the original VVF 9.x listing. CVSS 9.8/7.5, patches pending, workarounds available in KB 460732 and 460734.
-
PHP2Shell (CVE-2026-109618/19): Broadcom & VMware Impact & Mitigation
October 21, 2026: PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 require urgent PHP updates. Review fixed versions, official Broadcom product-assessment links, and the limits of WAF-based protection.
-
De-Risking Day 0 with the Open-Source VCF Readiness Tool
A practical look at the open-source VCF Readiness Tool for VMware Cloud Foundation 9.1: assess BMCs, hardware compatibility, vSAN ESA, firmware and security before Day 0, with a safe first-scan checklist.
-
The Architect’s Edge: Decoding VMware Cloud Foundation 9.1.1 (and EP1)
What does VMware Cloud Foundation 9.1.1 mean for architects, and how does EP1 fit in? Explore management sizing, Avi networking changes, Secure Boot, lifecycle updates, deprecations, and practical checks to perform before upgrading.
