APT Actively targeting unpatched VMWare Horizon, exploiting Log4j

Share This Post

An Iranian APT is actively targeting unpatched VMWare Horizon systems to exploit Log4j vulnerabilities. The APT is destructive and these attacks often lead to full Ransomware deployment in the victim’s environment.

See the full Sentinel One synopsis here:

https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/



Reach out to our incident response team for help

More To Explore

Information Security News – 10/12/2026

TeamViewer Patches High-Severity Vulnerabilities in Remote Access Software Article Link: https://www.bleepingcomputer.com/news/security/teamviewer-urges-users-to-patch-severe-flaws-as-soon-as-possible/ What does this mean for me? Malicious ChatGPT Custom GPTs Lead to ClickFix Attack

Information Security News – 09/28/26

ShinyHunters Bypasses Firewall Protections in Oracle PeopleSoft Attacks Article Link: https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/ What does this mean for me? Citrix Confirms Two NetScaler Zero-Days Exploited in Attacks

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.