InfoSecBulletin Cybersecurity for mankind
On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a malicious user with basic access on a Windows guest virtual machine to execute high-privilege tasks within that VM.
VMware’s important bulletin states that an authentication bypass bug, due to improper access control, has a CVSS severity score of 7.8/10.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
The company acknowledged a researcher from Positive Technologies, a Russian cybersecurity firm, for discovering the bug and stated that patches have been added to VMware Tools for Windows v 12.5.1.
The Linux and macOS versions of the utilities are not affected.
VMware Tools for Windows is a set of utilities and drivers that improves virtual machine performance and management, offering enhanced graphics, better mouse integration, and time synchronization between the host and guest operating systems.
