Volume 343, Issue 3 · 8 articles
Broadcom's HyperArmor adds script allowlisting, real-time execution blocking and SSH MFA to VMware ESX to counter fast AI-built exploits.
Broadcom will add HyperArmor to VMware ESX next month, intercepting malicious actions during process execution and blocking any unauthorized executable or script on the host.
It builds an auditable inventory of existing scripts and allows only approved ones to run, effectively providing virtual patching until real fixes are deployed, and on ESX 8.x and later it complements vDefend network-level virtual patching.
Broadcom also added time-based one-time password MFA to the ESX SSH login path, so a stolen root password alone is not enough.
The article ties the move to attackers using AI to build exploits within hours.
Broadcom introduces KubeVM Service, bringing declarative, Kubernetes-native lifecycle management to VMs running on ESX.
Broadcom says many enterprises deploy Kubernetes workloads through GitOps pipelines while VM provisioning still runs through separate Terraform runs, scripts or ticket queues.
It argues VMs remain the right compute primitive for mission-critical databases and backend systems, and that AI agents and specialized workstations reinforce that role.
The company is introducing KubeVM Service, which brings declarative, Kubernetes-native lifecycle management to VMs running directly on ESX.
Kubernetes provides the developer-facing API and reconciliation model while VMware Cloud Foundation continues to provide the virtualization layer, without rip-and-replace modernization.
Broadcom highlights a new white paper on running Microsoft SQL Server on VMware Cloud Foundation with Data Services Manager.
Broadcom says organizations that grow from a handful of SQL Server instances to hundreds face mounting operational overhead in provisioning, high availability, backups and monitoring.
The post introduces a new white paper, Architecting Microsoft SQL Server on VMware Cloud Foundation with Data Services Manager, which distills enterprise expertise into practical guidance.
It focuses on how Data Services Manager simplifies the lifecycle, administration and management of SQL Server environments on VCF.
Broadcom announces general availability of VMware Tanzu Platform 11.0, positioned as the agent platform for VMware Private AI Cloud.
Broadcom has announced general availability of VMware Tanzu Platform 11.0, which it calls the agent platform for VMware Private AI Cloud and the native platform as a service for VMware Cloud Foundation 9.1.
The company says enterprises are balancing the need to operationalize agentic AI with pressure to control rising infrastructure and cloud costs.
Tanzu Platform 11.0 brings the cf push developer experience directly to Kubernetes, decouples and modernizes enterprise data fleets, unifies multi-region operations and delivers an end-to-end security model from source code to infrastructure, with support for sovereign AI.
Broadcom argues vSAN encryption in VMware Cloud Foundation is a low-effort security win that protects data on drives leaving the data center.
Broadcom says that unlike network segmentation or identity projects, storage encryption in VMware Cloud Foundation takes a few clicks and runs in the background without downtime.
The post explains that drives routinely leave data centers through failures, upgrades and server retirements, and that reliably sanitizing flash devices such as SSDs and NVMe drives is very difficult.
vSAN encryption protects against that common data-leak path.
Broadcom also outlines what storage encryption does and does not protect against so teams understand its limits before enabling it.
Broadcom examines how identity providers fit into zero trust and why an IdP plus MFA is not the same as zero trust in VCF.
Broadcom says zero trust may be the most overused phrase in security marketing, and that many people wrongly equate putting an identity provider in front of everything and enabling MFA with zero trust.
The post explains that an identity provider is an important part of zero trust but is also a single system everything depends on and every attacker wants to control.
Using NIST's definition of zero trust as a set of guiding principles, it looks at identity providers through a zero trust lens in the context of VMware Cloud Foundation.
Broadcom outlines how VMware Cloud Foundation can protect the virtual infrastructure under Active Directory domain controllers.
Broadcom calls Active Directory the crown jewels of most organizations, since an attacker who controls it usually controls the organization, which is why ransomware and espionage campaigns target domain controllers.
Because most domain controllers run as virtual machines, the post argues that protecting Active Directory is partly a job for the virtualization platform.
It focuses on what VMware Cloud Foundation can do to keep that infrastructure from becoming an easy way in, noting that hypervisor admins are effectively domain admins and that the same ideas apply to certificate authorities, secrets vaults and backup servers.
Broadcom details the refreshed capacity forecasting engine in VMware Cloud Foundation 9.1.1, built for clarity and explainability.
Broadcom says capacity planning in VMware Cloud Foundation balances preventing resource exhaustion with maximizing hardware utilization, and that the VCF capacity engine has long powered rightsizing, reclamation and time-remaining recommendations.
In VCF 9.1.1 the capacity engine gets a refresh focused on clarity, predictability and actionable context.
Administrators gain more visibility into how forecasts are derived and how policy settings shape projections, making them easier to explain to executives.
The post covers what is new and what to expect when adopting the update.