Are Virtual Machines the New Gold for Cyber Criminals?

This McAfee blog details critical VMware vCenter vulnerabilities (notably CVE-2021-21985 with CVSS 9.8 and CVE-2021-21986) that enable remote code execution or plugin authentication bypass, notes ~55,000 publicly reachable ESXi/vCenter servers potentially vulnerable, documents ransomware groups (DarkSide, Babuk) and initial-access brokers targeting virtualized environments and ESXi hosts, and provides patching and mitigation guidance including inventory, network access restriction, disabling internet exposure, and applying VMware patches.