VMware Patches Authentication Bypass Flaw in Windows Tool

On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a malicious user with basic access on a Windows guest virtual machine to execute high-privilege tasks within that VM.

VMware’s important bulletin states that an authentication bypass bug, due to improper access control, has a CVSS severity score of 7.8/10.

• Hot Topic

Gmail Data exposes via ChatGPT Deep Research Agent dubbed “ShadowLeak Zero-Click” Flaw

By infosecbulletin / Saturday , September 20 2025

Cybersecurity researchers revealed a zero-click vulnerability in OpenAI ChatGPT's Deep Research agent that lets attackers leak sensitive Gmail inbox data...

Read More

• Cyber Attack
• Hot Topic
• International

Cyber attack disrupts several European airports: check-in and boarding systems affected

By infosecbulletin / Saturday , September 20 2025

Several European airports are experiencing flight delays and cancellations due to a cyber attack on a check-in and boarding systems...

Read More

• Cyber Attack
• Data Breach
• National

Hacker claim to breach Link3; 189,000 Users data up for sale

By infosecbulletin / Wednesday , September 17 2025

A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The...

Read More

• Event

Check Point Hosts “Securing the Hyperconnected World in the AI Era” in Dhaka

By infosecbulletin / Wednesday , September 17 2025

Check point, a cyber security solutions provider hosts an event titled "securing the hyperconnected world in the AI era" at...

Read More

• International

Microsoft Confirms 900+ XSS Vulns Found in IT Services

By infosecbulletin / Tuesday , September 16 2025

Cross-Site Scripting (XSS) is one of the oldest and most persistent vulnerabilities in modern applications. Despite being recognized for over...

Read More

• Daily Security Update

Daily Security Update Dated : 15.09.2025

By infosecbulletin / Monday , September 15 2025

Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...

Read More

• Alert
• Vulnerabilities

IBM QRadar SIEM Vuln Let Attackers Perform Unauthorized Actions

By infosecbulletin / Monday , September 15 2025

A critical permission misconfiguration in the IBM QRadar Security Information and Event Management (SIEM) platform could allow local privileged users...

Read More

• Hot Topic

Major Australian Banks using Army of AI Bots to Scam Scammers

By infosecbulletin / Monday , September 15 2025

Australian banks are now using bots to combat scammers. These bots mimic potential victims to gather real-time information and drain...

Read More

• International

F5 to acquire CalypsoAI for $180M for Advanced AI Security Capabilities

By infosecbulletin / Saturday , September 13 2025

F5 plans to acquire CalypsoAI, which offers adaptive AI security solutions. CalypsoAI's technology will be added to F5's Application Delivery...

Read More

• Alert
• Cyber Attack
• Hot Topic

AI Pentesting Tool ‘Villager’ Merges Kali Linux with DeepSeek AI for Automated Attacks

By infosecbulletin / Saturday , September 13 2025

The Villager framework, an AI-powered penetration testing tool, integrates Kali Linux tools with DeepSeek AI to automate cyber attack processes....

Read More

The company acknowledged a researcher from Positive Technologies, a Russian cybersecurity firm, for discovering the bug and stated that patches have been added to VMware Tools for Windows v 12.5.1.

The Linux and macOS versions of the utilities are not affected.

VMware Tools for Windows is a set of utilities and drivers that improves virtual machine performance and management, offering enhanced graphics, better mouse integration, and time synchronization between the host and guest operating systems.

Over 40% of cloud environments are vulnerable to RCE