VMware plays down risk of source code leak
Virtualisation giant confirms authenticity of leaked ESX source code.

Virtualisation giant VMware has confirmed that part of the source code for its ESX hypervisor has been leaked online, but insists it poses little risk to its customers.
The leak consists of a single file from the VMware ESX source code and is understood to have been posted on text sharing website Pastebin by known hacktivist Hardcore Charlie on 8 April.
In a post on the software vendor's website, Iain Mulholland, director of VMware's security response centre, said the code could date back to 2003 or 2004.
He also revealed that the firm became aware of the leak several days ago and acknowledged that more code could be leaked in future.
"The fact the source code may have been publicly shared does not necessarily mean that there is any increased risk to VMware customers," said Mulholland.
"We take customer security seriously and have engaged internal and external resources, including our VMware security response centre to thoroughly investigate," he added.
Get the ITPro. daily newsletter
Sign up today and you will receive a free copy of our Focus Report 2025 - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives