VMware Introduces HyperArmor to Strengthen Security Across Cloud Infrastructure
VMware, owned by Broadcom, has introduced HyperArmor, a security add-on designed to protect VMware Cloud Foundation (VCF) deployments against cyberattacks as artificial intelligence tools uncover more software vulnerabilities and increase pressure on patch management.
Prashanth Shenoy, vice president of product marketing for Broadcom's VMware Cloud Foundation division, told The Register that VMware recently shifted to monthly software updates, partly to address bugs identified by AI.
The faster release schedule has created challenges for customers who need time to test patches before deploying them, despite VCF's support for live patching without service disruption. Shenoy said users need sufficient breathing room to manage changes safely.
Three Security Functions
HyperArmor combines three capabilities. The first, virtual patching, blocks attempts to exploit vulnerabilities without modifying the underlying software.
VMware already provides similar protection through its vDefend network security product. The company has described how the technology detects and blocks traffic associated with exploitation attempts involving CVE-2024-5806, an authentication bypass vulnerability in the MOVEit file-transfer tool that drew attention in 2024.
HyperArmor applies comparable protections to malicious traffic targeting VCF environments.
Its second function prevents actions that would alter established, trusted system states. When a human administrator approves a change, HyperArmor updates its security policies to accommodate the newly authorized state.
The third capability is multi-factor authentication (MFA). Shenoy told The Register that the feature is intended to help prevent attackers from using stolen privileged credentials to gain control of VMware's ESX hypervisor.
Users must provide SSH credentials and a time-based one-time password delivered to an individual with a verified identity.
Broadcom Reuses Security Technology Across Products
VMware will sell HyperArmor separately as a paid add-on to VCF. The product was developed by Broadcom's security businesses, Symantec and Carbon Black, rather than by VMware itself.
The approach reflects Broadcom's practice of bringing technologies developed across its business units into wider product offerings.
At VMware Explore on August 31, Broadcom introduced AgentMinder, a tool intended to prevent AI systems running within VCF from acting outside their intended controls. Originally developed within Broadcom's CA business, the product also targets third-party Kubernetes platforms.
Ram Velaga, president of Broadcom's Infrastructure Software Group, told The Register that the company combines team-level autonomy with collaboration across its divisions.
He said smaller, focused teams can innovate faster, while sharing existing technical assets helps avoid duplicating development work.
Broadcom's Infrastructure Software Group operates with at least six teams. When a team needs additional functionality, it can draw on technology developed elsewhere within the organization rather than building the same capabilities from scratch. That model allows contributions from multiple Broadcom businesses to feed into broad platforms such as VMware Cloud Foundation.