# VMware / Broadcom 日跟踪 · 2026-10-05
> 日期：2026-10-05（Asia/Shanghai，周一）。原料：archive/2026-10-05/vmware/。窗口：10-02（周五）早报之后 → 10-05 早；**周末 10-03/10-04 无早报、无 archive 目录**。上一日成功日跟踪 2026-10-02（周五）。抓取全库：Saved 266 / skipped 29 / errors 40；blocked：blocksandfiles.com / docs.redhat.com / e.huawei.com / support.huawei.com / www.nextplatform.com / www.reddit.com / www.theregister.com。

## 摘要
- **新稿 · Security is a Way of Thinking**（VCF 博客 10-01；**Cybersecurity Awareness Month 系列 Day 1/22**）：AI 作为攻防"force multiplier"语境；公布 10 月整月日程——**4 场技术 webinar（10-08 基础安全控制/vMotion/HA/DRS；10-15 补丁+快照/vTPM/机密计算；10-22 身份与访问控制；10-29 勒索/灾难/地缘场景）+ 11-04 Designing Secure VCF**，以及 10-05 Hardening Guidance → 11-02 Regulatory Compliance 共 22 篇博文排期——**厂商内容营销日程，非产品发版**。
- **新稿 · Security Starts with Hardware**（VCF 博客 10-02；系列 Day 2）：硬件/BIOS/BMC 安全基线——TPM 2.0（vSAN DARE 密钥、ESX boot 配置加密密封）、M.2 自加密启动盘、**VCF 9.1 起 SmartNIC（NVIDIA ConnectX-6 DX / ConnectX-7）与 DPU 一样可卸载 IPsec VPN**、Intel QAT 卸载 vMotion 加密、AMD SEV-SNP / Intel TDX BIOS 开启要点；**VCF Readiness** 经 Redfish 审计 BIOS/BMC（文内自称 "over 50" / "55+" BMC 安全审计项，两处表述不一，照录）——**厂商最佳实践博，SmartNIC IPsec offload 为 9.1 能力点名**。
- **续档（10-02 NEW，不升格）**：VCF 9.1 Express Patching（月度；Live Patch ESX / Quick Patch vCenter）；Japan VKS Add-Ons howto。
- **续档（轻）**：Explore on Tour Season Recap 页更新 Singapore（10-01–02，Raffles City Convention Centre）现场回顾段——**活动营销，不升格**。
- **续档**：VKS scale / CI-CD；VVF 9.1 Cost Case；AI Part2；memtier；HCX 9.1 Part 3；双 MQ Leaders PR。VR 09-23 MQ 媒体转述仍有效；**本地仍无 Gartner PDF**。

## 原文摘录

### [Security is a Way of Thinking](https://blogs.vmware.com/cloud-foundation/2026/10/01/security-way-of-thinking/) · 新稿（厂商博客，系列 Day 1）
- 归档：`vmware/security-is-a-way-of-thinking-78ef83aa.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/01/security-way-of-thinking/
> (Day 1 of 22 in our Cybersecurity Awareness Month series. See the whole month's schedule below.)
> … there is no doubt that AI is a force multiplier, both for good and for evil… in the security space we see attacks ramping up, more than ever. Frontier AI models often draw focus here, but it's also the open-source models, running on GPUs everywhere, that are doing the attacking.（**威胁叙事——厂商观点**）
> Thursday, October 8: Starting at the Beginning with VCF Security (Base security controls, logging, vMotion, vSphere HA, and DRS)
> Thursday, October 15: VCF Protects While the Landscape Changes (Technical and organizational strategies for patching both VCF and workloads, snapshots, vTPM, confidential computing)
> Thursday, October 22: VCF Identity and Access Control … Thursday, October 29: VCF Helps You Survive Bad Situations (… ransomware, bad application upgrades, natural disasters, and geopolitical turmoil)
> There is also a webinar on Wednesday, November 4 as part of our VCF Adoption Series, on Designing Secure VCF.
> October 5: VCF Security Hardening Guidance … October 12: Patch Easier, Not Faster … October 21: Easiest Thing Ever: VCF Storage Encryption … October 26: Workloads Keeping Secrets: Confidential Computing … November 2: Regulatory Compliance and VCF（**排期预告，未发文不等于已发布**）

### [Security Starts with Hardware](https://blogs.vmware.com/cloud-foundation/2026/10/02/security-starts-with-hardware/) · 新稿（厂商博客，系列 Day 2）
- 归档：`vmware/security-starts-with-hardware-cd0b9488.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/02/security-starts-with-hardware/
> TPMs are simple inexpensive devices that are critical to proving server identity, measuring the integrity of firmware, and helping with survivability of key access for features like vSAN Data-at-Rest Encryption.
> VMware ESX boot configuration is encrypted by default. The TPM is used to enhance this and seal the encryption…
> Starting in VCF 9.1 Smart NICs such as NVIDIA ConnectX®-6 DX, ConnectX-7 join DPUs in being able to offload IPSEC VPN traffic. Line rate offloads that avoid the CPU help push workload density up.（**9.1 SmartNIC IPsec 卸载——厂商主张**）
> Intel® QAT™ – Offloading vMotion encryption to dedicated QAT cores… Now it is an embedded option in some Intel CPUs (generally starting with 4th generation Sapphire Rapids).
> … AMD requires SVM mode, SEV-SNP be enabled, as well as the SNP Memory RMP table … be enabled.（**机密计算 BIOS 前置**）
> To help simplify the steps of auditing these BIOS VCF Readiness can be used to audit the posture of the BIOS settings, and BMC configuration using Redfish APIs. … over 50 built in BMC Hardware Security Audit Findings…（另段写 "an additional 55+ BMC security audit controls"——**厂商自称，两处数字照录**）

### [VMware Explore on Tour 2026 | Season Recap](https://blogs.vmware.com/explore/explore-on-tour-recap-2026/) · 轻续档（页面更新）
- 归档：`vmware/vmware-explore-on-tour-2026-season-recap-5049bdb4.txt`
> Singapore | 1 – 2 October 2026 … Explore on Tour touched down in Singapore. Hundreds of attendees converged…（**活动回顾，"Hundreds" 为厂商描述**）

### [Navigating the AI Threat Era… Express Patches](https://blogs.vmware.com/cloud-foundation/2026/10/01/navigating-the-ai-threat-era-upgrading-to-vmware-cloud-foundation-9-1-and-applying-express-patches/) · 续档（10-02 NEW）
- 归档：沿用 `archive/2026-10-02/vmware/navigating-the-ai-threat-era-upgrading-to-vmware-cloud-foundation-9-1--e89ceeb8.txt`
> （Express Patching 续档；本日安全月系列 10-12「Patch Easier, Not Faster」/10-13「Upgrading VCF」排期与之呼应——**今日不升格**）

## 对基础档案的影响
- **最近动态追加**：Cybersecurity Awareness Month 22 篇 + 4 webinar 排期（10-08/15/22/29 + 11-04）——**内容营销节奏，提示 10 月 VCF 安全叙事密集期**；Security Starts with Hardware：**VCF 9.1 SmartNIC（CX-6 DX/CX-7）IPsec 卸载**、QAT vMotion 加密卸载、SEV-SNP/TDX、VCF Readiness Redfish 审计 BIOS/BMC——**厂商博客**。