VMware is pushing so many patches, it thinks users need new tools to manage the flood

VMware is pushing so many patches, it thinks users need new tools to manage the flood

By Simon Sharwood
Publication Date: 2026-10-13 07:01:00

VMware has discovered so many flaws in its products using AI that it felt the need to create a new product to help users manage them.

Prashanth Shenoy, vice president of product marketing in the VMware Cloud Foundation (VCF) division of Broadcom, told The Register that VMware recently moved to deliver monthly software updates, in part to address bugs found by AI.

He admitted, however, that users struggled to keep up with the pace of change before the move to monthly releases because it takes time to test the impact of patches – even though VCF allows non-disruptive live patching.

Shenoy said customers therefore need “room to breathe.” Enter a new tool called HyperArmor, which does three things.

One is “virtual patching” – blocking attempts to exploit a vulnerability without changing the vulnerable software itself.

VMware already offers virtual patching in its vDefend network security product and explains how it works by referring to CVE-2024-5806, the bug in file transfer tool MOVEIt that made waves in 2024. VMware says vDefend can detect patterns associated with attempts to exploit the authentication bypass flaw and block the traffic.

HyperArmor will do similar things to block malicious traffic heading toward VCF implementations.

Another job HyperArmor takes on is rejecting any actions that alter known good states in VCF. If a human approves a change, the tool will update policies to allow the altered state.

The third job is multi-factor authentication…