Patches are not enough for VMWare vCenter Server and Cloud Foundation vulns

This report warns of critical VMware vCenter Server and Cloud Foundation vulnerabilities (notably CVE-2021-22005, CVSS 9.8) that allow remote file-upload RCE; public exploits emerged quickly, so organizations should urgently patch, assume possible compromise, perform compromise assessments and threat hunts, and retain/collect forensic data for extended investigation and incident response.