Malicious npm Packages Target Chinese-Speaking EngineersMalicious npm Packages Target Chinese-Speaking...In a recent write-up, Socket details a complex supply chain attack utilizing a cluster of fraudulent npm packages to distribute a cross-platform remote access trojan. The threat actors uploaded counterfeit unscoped modules designed to impersonate proprietary Alibaba Group [...]Broadcom Social Media Advocacy

How to Replace VCF Automation Certificate | Tomas FojtaHow to Replace VCF Automation CertificateIn an Enterprise or Cloud Provider scenario the VCF Automation (VCFA) certificate should be signed by a public Certificate Authority and will need to be rotated yearly. If the VCFA is fronted by an external load balancing the same certificate must be... Continue Reading →

VMware Cloud Foundation APIs: Configure Certificate Authorities | #vExpert Gary J. BlakeVMware Cloud Foundation APIs: Configure...A key fleet management capability delivered by VMware Cloud Foundation is the ability to centrally manage certificates across all the components of your platform, the process involves first configuring VCF Operations to interact with either a Microsoft or an OpenSSL... Continue Reading →

Resetting the admin@local Password on the VMware Cloud Foundation 9 Installer | Learn how to reset the admin@local password on the VMware Cloud Foundation 9 Installer with a safe operational runbook, validation steps, and rollback guidance. #vExpert Paul BryantResetting the admin@local Password on the...Learn how to reset the admin@local password on the VMware Cloud Foundation... Continue Reading →

Refreshing an Existing vSAN Cluster with New ServersRefreshing an Existing vSAN Cluster with New...Refreshing hardware is an inevitable task of lifecycle management in a data center. Existing vSAN clusters may have servers that are nearing the end of life by the manufacturer, or simply may no longer meet the technical requirements of an organization. The... Continue Reading →

vSphere 8.0 Update 3k Fixes Critical CVEs—but Temporarily Blocks the VCF 9.1 Upgrade Path | #vExpert Piotr TarnawskivSphere 8.0 Update 3k Fixes Critical CVEs—but...Broadcom released VMware vSphere 8.0 Update 3k on 29 July 2026, delivering critical security fixes for both vCenter Server and ESXi. Normally, the recommendation would be straightforward: review the release notes, validate... Continue Reading →

VMSP Toolkit 2.0 — Assurance Edition. #vExpert Tommy GrotVMSP Toolkit 2.0 — Assurance EditionMost compliance tooling shows you the first number. The second number is the reason to trust the first one. A requirement the appliance cannot answer is returned as Not_Reviewed, never inferred, never quietly counted as a pass. [...]Broadcom Social Media Advocacy

Is lateral movement still your data center’s biggest blind spot? 🚨 Stopping east-west threats sounds great in theory, but mapping and securing that traffic in practice? That’s where things usually get messy. If you're attending VMware Explore, join us for session [SECB1247LV] where we’re cutting through the complexity. | Apoorv MalmaneZero visibility to total lockdown... Continue Reading →

VCF and VKS Core Concepts | A practical VCF and VKS core concepts blog explaining vSphere Supervisor, vSphere Namespaces, VKS clusters, Kubernetes namespaces, VKr, Cluster API, ClusterClass, VM Class, Storage Policy, Spherelet, CRX and Supervisor Services. – Sourabh ShrivastavVCF and VKS Core Concepts | Sourabh ShrivastavA practical VCF and VKS core concepts blog explaining vSphere... Continue Reading →

Optimizing VCF Operations for Logs: Why Indexing Fields Changes the Game – #vExpert Marc De GrasseOptimizing VCF Operations for Logs: Why...If you’ve recently found yourself rolling out VCF 9.1 express patches, you might have run into situations where you need to troubleshoot the upgrade of some VCF 9.1 VSP components. The first reflex to tracking... Continue Reading →