More than 18,500 ESXi servers still vulnerable to VMware bug behind initial ransomware spree

Multiple warnings from several of the biggest cybersecurity agencies in the world over the last week have not motivated some organizations to patch a security issue being exploited as part of the ESXiArgs ransomware campaign.

Cybersecurity firm Rapid7 said its Project Sonar telemetry showed that 18,581 VMware ESXi servers are still vulnerable to CVE-2021-21974 — a 2-year-old vulnerability being exploited by unknown cybercriminals. VMware issued a patch soon after the bug was discovered.

The situation has stayed in the …

bug campaign cve cve-2021-21974 cybercriminals cybersecurity esxi esxiargs esxiargs ransomware exploited issue old organizations patch project project sonar ransomware rapid7 security servers sonar telemetry vmware vmware esxi vmware esxi servers vulnerability vulnerable world