# VMware / Broadcom 日跟踪 · 2026-10-08
> 日期：2026-10-08（Asia/Shanghai，周四）。原料：archive/2026-10-08/vmware/。窗口：10-07（周三）早报之后 → 10-08（周四）早。上一日成功日跟踪 2026-10-07。抓取全库：Saved 276 / skipped 27 / errors 44；blocked：community.hpe.com / docs.redhat.com / e.huawei.com / support.huawei.com / www.reddit.com / www.sangfor.com（blocksandfiles.com、www.nextplatform.com 本日恢复可抓；theregister.com 文章页仅返回首页标题壳）。全库相对既往归档新增 URL 26 个（vmware 3、redhat 4、industry 19）。

## 摘要
- **新稿 · Vulnerabilities: Everything You’ve Wanted To Know**（VCF 博客 10-07；网络安全月「Day 5 of 22」）：AI 加速漏洞发现与利用链（"AI models are very good at detecting vulnerabilities, developing exploits, and chaining them together"），CVE/补丁数量激增；主张 **CVSS 分数≠风险**、看向量（AV/PR）、查 **CISA KEV / EPSS**；Low/Moderate 也要打（"A backlog of small flaws is the raw material for a chain"），"Staying current beats attempting to pick and choose"；解释 VMSA 定级（Critical 9.0–10 / Important 7.0–8.9 / Moderate / Low）与发布说明为何细节少——**厂商安全教育博，非新产品**；与 10-02 Express Patching / Live Patch、10-06「Dependencies」同一「快打补丁」叙事线。
- **新稿 · The Cloud Admin’s Path to Platform Engineering**（10-07，观点/指南博）：劝 vAdmin 进平台工程团队；把资源池/DRS/模板/NSX/升级/chargeback 映射到 VCF 9.1 的 **VCF Automation Org/Project/Namespace、vSphere Zones、VM Service、VPC+vDefend、Supervisor/VKS 升级编排、VCF Operations showback**；引 **2025 DORA**「约 90% 组织有内部平台、约四分之三有专门平台团队」（**第三方报告的厂商转引**）；点名 **VCF 9.1 Supervisor 可无中断把既有 vSphere VM 导入 vSphere Namespace 交 VM Service（KubeVM）管理，支持批量与回滚**——**厂商博客；版本功能以官方发布说明为准，本地未核**。
- **新稿（轻）· VCF Breakroom Chats Ep.96**：Jeremy Wolf 谈「以基础设施为中心的应用现代化」，KubeVM + vSphere Pods + vMotion——**视频导读页，无正文增量**；与上条 KubeVM 导入叙事同线。
- 续档：VCF Security Hardening Guidance（SCG，Day 3）；9.1.1 SSO On-Demand Lookup；Dependencies 观点博；Forrester 委托 Spotlight；AI Part 3 共置；SmartNIC IPsec 卸载；双 MQ Leaders PR；VR 09-23 MQ 媒体转述、**本地无 Gartner PDF**。techdocs.broadcom.com 首页仅轮换。
- 旁证（industry）：Blocks&Files RackWare 稿称 **"Broadcom’s removal of the VMware VDDK"** 限制工作负载迁出——**第三方媒体对厂商行为的表述**，与 09-11 VDDK 媒体簇同线，详见 migration 专题。

## 原文摘录

### [Vulnerabilities: Everything You’ve Wanted To Know](https://blogs.vmware.com/cloud-foundation/2026/10/07/vulnerabilities-everything-you-want-know/) · 新稿（安全月 Day 5）
- 归档：`vmware/vulnerabilities-everything-you-ve-wanted-to-know-3372488c.txt`
> AI models are very good at detecting vulnerabilities, developing exploits, and chaining them together. This is manifesting as an explosion of CVEs and patches, which is stressful for organizations and their change control processes.
> A CVSS score describes the vulnerability in general, assuming the worst reasonable case. It knows nothing about your environment.
> Low and Moderate still need to get patched. You can schedule them, but don’t skip them. A backlog of small flaws is the raw material for a chain.
> Staying current beats attempting to pick and choose.

### [The Cloud Admin’s Path to Platform Engineering](https://blogs.vmware.com/cloud-foundation/2026/10/07/the-cloud-admins-path-to-platform-engineering/) · 新稿（观点/指南）
- 归档：`vmware/the-cloud-admin-s-path-to-platform-engineering-1f1f9e00.txt`
> Platform engineering is now the default operating model: the 2025 DORA report found that roughly 90% of organizations have an internal platform and about three-quarters have a dedicated platform team.
> PE 2.0 widens the audience to security teams, FinOps, data and ML engineers, and increasingly to the non-human consumers (AI agents) calling infrastructure APIs directly.
> VCF 9.1 widens this door further: the vSphere Supervisor now supports non-disruptive import of existing vSphere VMs into a vSphere Namespace for VM Service (KubeVM) to manage, with batching and rollback.

### [VCF Breakroom Chats Episode 96](https://blogs.vmware.com/cloud-foundation/2026/10/07/vcf-breakroom-chats-episode-96-the-infrastructure-centric-path-to-app-modernization/) · 轻（视频页）
- 归档：`vmware/vcf-breakroom-chats-episode-96-the-infrastructure-centric-path-to-app--ad4154b1.txt`
> Learn how to leverage KubeVM and vSphere Pods to bridge the gap between developer velocity and enterprise infrastructure control with vMotion capabilities.

## 对基础档案的影响
- **最近动态追加**：安全月 Day 5 漏洞博（CVSS≠风险、AI 利用链、KEV/EPSS、"别挑着打"）；平台工程转型博（vAdmin→PE 映射表、DORA 90%/约 3/4 转引、**VCF 9.1 Supervisor 无中断导入既有 VM 至 VM Service/KubeVM**）；Breakroom Ep.96（KubeVM + vSphere Pods）。