Keep Tier-One Applications Out of Virtual Environments

This commentary warns that hypervisor-targeting vulnerabilities and ransomware have escalated to the point where compromise of hypervisors can lead to mass outages of virtualized tier-one applications; it cites VMware CVEs and recent attacks, explains the operational challenge of patching (downtime), and recommends mitigation strategies including reclassifying critical apps, migrating them to cloud/SaaS, or running them on physical hardware.