
Work Here?
VMware provides software to help organizations build, run, manage, connect, and protect applications across public, private, and hybrid clouds. Its products cover the full stack: vSphere for server virtualization, vSAN for storage virtualization, and NSX for network virtualization, plus vRealize for cloud management and Carbon Black for security. These tools work by abstracting and pooling computing resources, enabling migration from on-premises data centers to scalable cloud environments and by using hyperconverged infrastructure that combines compute, storage, and networking in one system. What sets VMware apart is its integrated, end-to-end suite that connects compute, storage, networking, security, and cloud management across multiple cloud environments, with a strong focus on hybrid and multi-cloud deployments. The company’s goal is to help businesses modernize their IT infrastructure, improve security, and boost operational efficiency across diverse cloud environments.
Industries
Enterprise Software
Cybersecurity
Company Size
10,001+
Company Stage
Post IPO Equity
Headquarters
Palo Alto, California
Founded
1998
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$1.4B
Above
Industry Average
Funded Over
10 Rounds
Broadcom and VMware: Broadcom falls amid VMware security vulnerability reports. Broadcom Stock Drops Amid VMware vCenter Exploit Reports Broadcom's stock fell nearly 5% on Friday, extending a week of losses as reports emerged of active exploitation targeting a vulnerability in VMware's vCenter Server. The decline marked the third drop in four trading days, reflecting investor concerns over potential security risks in VMware's widely used virtualization platform. The vulnerability, which has not been detailed in public reports, appears to be under active attack, raising alarms among enterprises relying on VMware's infrastructure. vCenter Server is a critical component for managing virtualized environments, making it a high-value target for threat actors. While the full scope of the exploit remains unclear, the incident underscores the financial and operational risks tied to unpatched software in enterprise IT systems. Broadcom, which completed its $61 billion acquisition of VMware in late 2023, has faced scrutiny over its integration of the company amid ongoing security challenges. The stock's decline highlights the market's sensitivity to cybersecurity threats in core enterprise software. "id": "vmw1786731826", "linkid": "vmware", "type": "Vulnerability", "date": "8/2026", "severity": "60", "impact": "2", "explanation": "Attack limited on finance or reputation" {'affected_entities': [{'customers_affected': 'Enterprises relying on VMware's ' 'infrastructure', 'industry': 'Technology/Semiconductors/Software', 'name': 'Broadcom', 'type': 'Corporation'}, {'customers_affected': 'Enterprises relying on VMware's ' 'infrastructure', 'industry': 'Virtualization/Cloud Computing', 'name': 'VMware', 'type': 'Subsidiary'}], 'description': 'Broadcom's stock fell nearly 5% on Friday, extending a week ' 'of losses as reports emerged of active exploitation targeting ' 'a vulnerability in VMware's vCenter Server. The vulnerability ' 'appears to be under active attack, raising alarms among ' 'enterprises relying on VMware's infrastructure. vCenter ' 'Server is a critical component for managing virtualized ' 'environments, making it a high-value target for threat ' 'actors.', 'impact': {'brand_reputation_impact': 'Market sensitivity to cybersecurity ' 'threats', 'financial_loss': 'Broadcom stock fell nearly 5%', 'operational_impact': 'Potential security risks in enterprise IT ' 'systems', 'systems_affected': 'VMware vCenter Server'}, 'lessons_learned': 'The incident underscores the financial and operational ' 'risks tied to unpatched software in enterprise IT ' 'systems.', 'post_incident_analysis': {'root_causes': 'Unpatched software vulnerability ' 'in VMware vCenter Server'}, 'references': [{'source': 'Public reports'}], 'title': 'Broadcom Stock Drops Amid VMware vCenter Exploit Reports', 'type': 'Vulnerability Exploitation', 'vulnerability_exploited': 'VMware vCenter Server vulnerability'} Published by MessiahGPT: A New AI-Powered Threat Emerges in Cybercrime Underground A newly uncovered criminal AI service, MessiahGPT, is being openly marketed... Aug 14, 2026 AI Token Jacking: How Stolen API Keys Are Costing Organizations Millions Cybercriminals are increasingly targeting AI credentials through a tactic... Aug 14, 2026 Cyberattacks Disrupt U.S. Water Utilities, Raising Critical Infrastructure Concerns A series of coordinated cyberattacks has targeted water utilities across... Aug 14, 2026
Rimini Street expands c-suite leadership for Growth with appointment of two Proven industry veterans as Chief Operating Officer and Chief Delivery Officer. Rimini Street appoints Keith Costello as EVP and Chief Operating Officer and Alexander Guasch as EVP and Chief Delivery Officer Rimini Street, the Software Support and Agentic AI ERP Company and the leading third-party support provider for Oracle, SAP and VMware software, today announced the appointment of Keith Costello as chief operating officer (COO) and Alexander Guasch as chief delivery officer (CDO). Alexander Guasch, EVP and Chief Delivery Officer at Rimini Street New COO Brings Proven Experience Scaling Organisations for Growth Keith Costello brings decades of experience building and scaling global enterprise software and services organisations, including leading teams of tens of thousands and managing businesses generating billions of dollars in revenue. He previously served as president, enterprise applications and technology at DXC Technology and global managing partner for IBM's SAP business unit. Earlier, he completed eight years at SAP in various senior leadership roles, including executive vice president and general manager of business analytics and technology, senior vice president of global field services and chief customer officer. As COO, Costello will own product strategy, determining what products, services and solutions Rimini Street will bring to market. He will also own professional services sales and other global business operations, which he will take over from Rimini Street president and CEO Seth Ravin. "It's an exciting time at Rimini Street. The company has successfully sold billions of dollars of services and built a differentiated offering that helps clients unlock more value from their mission-critical enterprise systems while gaining greater control over their technology roadmaps," said Costello. "I'm looking forward to working with the global team to scale operations, strengthen execution and support the company's continued growth worldwide." New CDO Brings Global Delivery Leadership and Client-Focused Execution Alex Guasch is a seasoned leader with more than 30 years of experience leading integrated global IT service delivery organisations with thousands of professionals. He has led numerous initiatives across enterprise software support, managed services, consulting, modernisation, cloud transformation and AI-enabled innovation. Guasch formerly served as a senior executive at HPE, IBM, VMware and Cognizant and has held leadership positions at Effectual and Optiv. As Rimini Street CDO, he is responsible for the end-to-end development and delivery of all company products, services and solutions worldwide, assuring reliable operational excellence, unparalleled service quality and successful client outcomes. "Client success starts with consistent, high-quality delivery, especially for the mission-critical systems that keep global organisations and government clients running smoothly," said Guasch. "I'm pleased to join Rimini Street and lead an organisation that has a storied reputation as one of the best enterprise software and technology engineering teams in the world, delivering 24/7/365 service globally with an average two-minute response time and client satisfaction ratings of 4.9 out of 5.0." Rimini Street is firmly focused on executing its operating plan to accelerate revenue growth and increase profitability. These expanded leadership roles strengthen execution, scale global operations and support continued client success. "Keith and Alex bring the global operating experience, execution discipline and client-first leadership to scale our organisation with speed and quality," said Seth Ravin, CEO, Rimini Street. "Keith and Alex understand what it takes to run and grow complex technology organisations and deliver extraordinary client outcomes. They are welcome additions to our leadership team as we continue helping clients use technology to lower their total operating costs, improve profitability and enhance competitive advantage."
Introducing the VMware Bootstrap Registry Appliance: air-gapped Harbor Service in VMware Cloud Foundation 9.0. August 11, 2026 Deploying containerized workloads in air-gapped environments has always required careful orchestration, especially when the platform registry you want to use cannot install itself without images it does not yet have. Consequently, streamlining the deployment of Harbor as a Supervisor Service in air-gapped VMware Cloud Foundation (VCF) environments has been a key area of focus for VMware, Inc.. While community-supported solutions like third-party registries provided an effective bridge in the past, VMware, Inc. is now pleased to offer an official VCF-supported solution designed specifically for this workflow. With the General Availability of the VMware Bootstrap Registry Appliance, VMware, Inc. now have an official, VCF-supported solution: a purpose-built OVA that gives VCF customers a clean, secure, and operationally well-defined path to bootstrapping Harbor as a Supervisor Service in air-gapped VCF 9.0 and vSphere 8.0 Update 3 environments. What is the VMware Bootstrap Registry Appliance? The VMware Bootstrap Registry Appliance is a hardened virtual appliance distributed as an OVA. Additionally, it ships with an OCI-compliant Harbor registry running natively on Photon OS 5.0 and is designed to host the OCI images required to enable Harbor Supervisor Service (and Contour) on the vSphere Supervisor. However, the appliance is not a general-purpose enterprise registry and is not intended to serve workloads in production. Instead, it is Registry 0 in the air-gapped deployment sequence, a temporary bootstrapping tool that hands off responsibility to Harbor Supervisor Service (Registry 1) once that service is healthy and operational. To maintain architectural compliance and supportability, the deployment of the VMware Bootstrap Registry Appliance is governed by the following mandatory operational constraints: * Exclusive Bootstrap Purpose: The VMware Bootstrap Registry Appliance shall only be utilized to upload and host the OCI images necessary to enable Contour and Harbor Supervisor services on the Supervisor. * Prohibition of Secondary Roles: The appliance must not be utilized for any other purpose within the infrastructure. Specifically, it is explicitly prohibited from serving as a permanent platform registry or enterprise workload registry. * Version-Specific Deployment Constraint: The use of the VMware Bootstrap Registry Appliance is restricted to deployments prior to VCF 9.1. Starting with VCF 9.1, the Fleet Depot Service (FDS) serves as the officially supported solution for air-gapped environment lifecycle management. Downloading the VMware Bootstrap Registry Appliance. The appliance is available on the Broadcom Support Portal at the following paths: * For vSphere 8.0: * Broadcom Support Portal > My Downloads > VMware vSphere > VMware vSphere Standard > 8.0 > Drivers and Tools > VMware Bootstrap Appliance > BOOTSTRAP_APPLIANCE-2.15.2+vmware.1-25635995.ova * For VCF 9.0: * Broadcom Support Portal > My Downloads > VMware Cloud Foundation > VMware Cloud Foundation 9 - 9.0.2 > VMware vCenter > Drivers and Tools > VMware Bootstrap Appliance > BOOTSTRAP_APPLIANCE-2.15.2+vmware.1-25635995.ova Deployment overview. Air-gapped VCF deployments follow a two-phase approach. Initially, phase 1 establishes the bootstrap registry using the VMware Bootstrap Registry Appliance. Phase 2 deploys Harbor as a Supervisor Service, which then becomes the production registry for all workloads. For a full step-by-step walkthrough including OVA deployment, Supervisor registration, image pre-staging with Carvel imgpkg and Harbor data values configuration required for air-gapped use, refer to the updated deployment blog: Deploying Harbor Service in Air-Gapped VMware Cloud Foundation 9.0 or the VMware vSphere Supervisor GitHub Repository. Looking ahead: VCF 9.1 and Fleet Depot Service. The VMware Bootstrap Registry Appliance is the right solution for VCF 9.0 and vSphere 8.0 U3 environments today. Customers upgrading to VCF 9.1 will benefit from the Fleet Depot Service (FDS). This built-in registry natively handles the bootstrapping lifecycle as part of the platform. In VCF 9.1 environments, you no longer need the VMware Bootstrap Registry Appliance, as FDS takes over this role. Conclusion. In summary, the VMware Bootstrap Registry Appliance closes a gap in the air-gapped VCF deployment story. It offers a purpose-built, supported tool for bootstrapping the Harbor Supervisor Service. This replaces the Bitnami Harbor solution with a production-ready alternative. VMware, Inc. recommend this path whether you are deploying fresh on VCF 9.0 or migrating an existing air-gapped environment. Download the appliance from the Broadcom Support Portal under VMware vSphere or VCF 9.0, and follow the updated air-gapped Harbor deployment guide for the full step-by-step walkthrough. Discover more from VMware Cloud Foundation (VCF) blog.
VMware fixes multiple issues in Avi Load Balancer. VMware has an update available to handle multiple critical vulnerabilities in its Avi Load Balancer that could allow an unauthenticated attacker cause issues within its products. In one issue, VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. CVE-2026-47865 is the case number for the vulnerability, which has a CVSS V3 base score of 9.8. Additionally, VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. CVE-2026-47866 is the case number for the vulnerability, which has a CVSS V3 base score of 8.3. Also, VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. CVE-2026-47867 is the case number for the vulnerability, which has a CVSS V3 base score of 8.7. Meanwhile, AVMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root. CVE-2026-47868 is the case number for the vulnerability, which has a CVSS V3 base score of 7.8. Moreover, VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code. CVE-2026-47869 is the case number for the vulnerability, which has a CVSS V3 base score of 8.7. Furthermore, VMware Avi Load Balancer contains a privilege escaltion vulnerability. A malicious authenticated user with network access may be able to execute remote code. CVE-2026-47870 is the case number for the vulnerability, which has a CVSS V3 base score of 7.1. Indeed, VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. CVE-2026-47871 is the case number for the vulnerability, which has a CVSS V3 base score of 8.8. Fixed versions. The following are release notes for fixed versions for Avi Loader Balancer:
The future of cloud infrastructure: deep dive into VMware Cloud Foundation Automation at Explore 2026. August 3, 2026 VCF Automation at VMware Explore 2026 As enterprise IT rapidly evolves, fueled by the explosive growth of AI and the pressing need for secure Private AI architectures, the demand for agility, rigorous security, and true self-service infrastructure has never been higher. To meet these unprecedented demands, organizations must shift from traditional, siloed IT operations to a fully realized cloud operating model. VMware Explore 2026 in Las Vegas is the premier destination to discover how VMware Cloud Foundation (VCF) is driving this transformation. At the heart of a modern, self-service private cloud is VCF Automation, a core capability that recently helped Broadcom secure a position as a Leader in the 2026 IDC MarketScape for Worldwide Private and Hybrid Cloud Management and Automation. It goes far beyond basic provisioning. It is the engine that powers Internal Developer Platforms (IDPs), rapid application delivery, and seamless lifecycle management. For IT executives, cloud architects, cloud admins, and platform engineers, VCF Automation is the key to maximizing IT efficiency, eliminating provisioning bottlenecks, and achieving a robust return on investment. Transforming IT from cost center to strategic enabler. This year at Explore, we're showcasing how VCF Automation empowers platform engineering teams to architect and deliver production-ready, multi-tenant private clouds. By shifting from manual, ticket-based workflows to automated self-service, organizations can dramatically accelerate workload deployment while maintaining strict governance and security. Must-Attend VCF Automation sessions. We've curated a comprehensive track of breakout sessions, tutorials, and interactive roundtables designed to provide deep technical insights and actionable strategies. Here's your guide to the critical VCF Automation sessions you cannot miss: Monday, august 31. * Provisioning Modern Workloads with VMware Cloud Foundation Automation Services Offerings [CLOB1064LV]: From 11:30 AM to 12:15 PM PDT, learn how provider admins leverage VCF Automation to provision, lifecycle, and configure services for modern workloads efficiently. * Baked-in Protection for Your Kubernetes Applications in VMware Cloud Foundation [CLOB1727LV]: From 12:45 PM to 1:30 PM PDT, explore the cutting-edge of cloud-native data protection integrated directly into VCF 9.1. * Introducing App Stack Formation: Capturing Live VMs as Catalog Items [CLOB1061LV]: From 3:15 PM to 4:00 PM PDT, discover how to capture live VMs and instantly turn them into reusable catalog items using the new App Stack formation. Tuesday, september 1. * Meet the Expert Roundtable: Best Practices to Build a Self-Service Private Cloud [CLOM1539LV]: From 11:00 AM to 11:30 AM PDT, discuss the best practices IT admins can take to build and create a consumable private cloud using VCF, covering topics like resource assignments, content management, and security. * Meet the Expert Roundtable: Best Practices to Consuming a Self-Service Private Cloud [CLOM1540LV]: From 12:30 PM to 1:00 PM PDT, join an interactive session exploring how to consume a self-service private cloud using out-of-the-box services and the content catalog. You will learn how to provision resources efficiently, maintain security, and control costs. * Building a Private Cloud: A Provider Admin Guide for Multi-Tenant Success [CLOB1062LV]: From 12:45 PM to 1:30 PM PDT, learn to architect and deliver a production-ready, multi-tenant private cloud utilizing advanced networking strategies and true self-service capabilities. * End-to-End VMware Cloud Foundation Automation Provider, Organization, and Consumption Setup and Configuration [CLOT1063LV]: Running from 2:00 PM to 3:30 PM PDT, this immersive tutorial provides an end-to-end walkthrough on designing and operationalizing a modern private cloud. Wednesday, september 2. * Application Repo to Self-Service: Automating Applications with Infrastructure as Code [CLOB1066LV]: From 3:15 PM to 4:00 PM PDT, see real applications transform from a Git repository into a fully automated self-service experience using advanced IaC techniques. * VMware Cloud Foundation Automation: New Capabilities for Transforming Infrastructure Delivery [CLOB1060LV]: Also from 3:15 PM to 4:00 PM PDT, get an exclusive overview of the newest features, including enhancements to service management and tenant quotas. * Meet the Expert Roundtable: Your Questions, Expert Answers: VMware Cloud Director to VMware Cloud Foundation 9.1 Migration Service [CLOM1159LV]: From 3:30 PM to 4:00 PM PDT, drop into this session to ask anything about migrating from VMware Cloud Director to VCF 9.1. Whether you are planning or already in the middle of a migration, come share challenges and get practical, actionable advice based on real-world experience. Ecosystem innovation at the Booth Theater. * Deploying Modern Applications on VCF 9.1 and Rackspace VCF Cloud [CLOTH1814LVS]: Join Rackspace Technology at the Booth Theater to see how containerized and traditional applications can be deployed seamlessly on a consistent private cloud platform. [Sponsored Session] Get hands-on with VCF Automation. Theory is essential, but practice cements knowledge. Visit the Hands-on Labs area to interact with the latest tools at your own pace. Product experts will be on standby as you work through these self-paced labs: * Getting Started with Automation on VMware Cloud Foundation 9.1 [SPL-HOL-2711-21-VCF-L] * Mastering Organization Management in VCF Automation [SPL-HOL-2711-23-VCF-L] * Provider Management and Administration in VCF Automation [SPL-HOL-2711-22-VCF-L] * What's New: Automation on VMware Cloud Foundation 9.1 [SPL-HOL-2711-20-VCF-L] Ready to accelerate your cloud infrastructure? Add these sessions to your VMware Explore 2026 schedule today! Discover more from VMware Cloud Foundation (VCF) blog.
Find jobs on Simplify and start your career today
Industries
Enterprise Software
Cybersecurity
Company Size
10,001+
Company Stage
Post IPO Equity
Headquarters
Palo Alto, California
Founded
1998
Find jobs on Simplify and start your career today