The last 30 days
What's shipping, what's moving, what to watch — across vDefend, Avi, and the lateral-security ecosystem.
Pinned
v5.2 · Coming soon
April 22, 2026
Early word on the 5.2 line: deeper NDR integration with the DFW, richer AI-assisted signature triage, and an expanded east-west policy-intent model. Edit this entry as real dates and notes firm up.
v5.1.1 · GA
April 15, 2026
Maintenance release on top of 5.1 — signature-feed improvements, NDR detection tuning, and a handful of DFW rule-engine fixes. Upgrade path from 5.1.0 is in-place.
Release notes
vDefend and Avi release notes from the last month — the short version.
L7 WAF rule updates for the north-south side, plus fixes to the Avi controller's policy-sync path when paired with vDefend. Worth a skim if you're running the two together.
The 9.0 line on the vDefend firewall side — updated distributed IDS/IPS signatures, expanded NDR coverage for encrypted east-west traffic, and the usual round of stability fixes.
Broadcom TechDocs
Threat & CVE
Disclosures, exploitation-in-the-wild, and KEV additions worth tracking.
Low-privileged authenticated user, adjacent network — a textbook lateral-movement primitive sitting inside the service most east-west trust is built on. DFW quarantine rules earn their keep here.
Zero Day Initiative
Python notebook tool under active attack the same day its CVE went public. A clean case for virtual-patching the exploit pattern at the vNIC while the code-side fix works through change management.
The Hacker News
Broker hit the actively-exploited list within days of disclosure. If you run ActiveMQ east-west, a virtual-patch signature plus a scoped DFW rule buys you the week the real patch needs.
Vulert
Ecosystem
Notable posts from VMware Security, Broadcom, and the lateral-security community.
Barracuda's monthly read on what's hitting SOCs right now. Pairs well with whatever's on your own east-west detection backlog.
Barracuda
VMware Security's framing for the next couple of years — vDefend virtual patching positioned as the bridge between 'we know about the vuln' and 'we've shipped the patch,' with Avi on the north-south side.
VMware Security Blog