Broadcom Locks Down VMware ESX Hypervisors
Techstrong IT, Monday, October 19th, 2026
Broadcom's HyperArmor adds script allowlisting, real-time execution blocking and SSH MFA to VMware ESX to counter fast AI-built exploits.
Broadcom will add HyperArmor to VMware ESX next month, intercepting malicious actions during process execution and blocking any unauthorized executable or script on the host.
It builds an auditable inventory of existing scripts and allows only approved ones to run, effectively providing virtual patching until real fixes are deployed, and on ESX 8.x and later it complements vDefend network-level virtual patching.
Broadcom also added time-based one-time password MFA to the ESX SSH login path, so a stolen root password alone is not enough.
The article ties the move to attackers using AI to build exploits within hours.