# VMware / Broadcom 日跟踪 · 2026-10-23
> 日期：2026-10-23（Asia/Shanghai，周五）。窗口：2026-10-22（周四）早报之后 → 2026-10-23（周五）早。上一成功早报 **2026-10-22**（昨日另发周报，本早报窗口仍以上一工作日早报为准）。抓取全库：Saved 276 / skipped 29 / errors 44；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.globenewswire.com、www.sangfor.com（**无** www.reddit.com；Reddit 本日为 SSL/timeout 失败，非 host_blocked）。相对全部历史归档真正新增 URL 18 条（industry 6、vmware 6、redhat 3、nutanix 1、vates 1、zstack 1）。 原料：archive/2026-10-23/vmware/。

## 摘要
- **中强 NEW · KubeVM Service**：声明式、K8s 原生 VM 生命周期管理，VM 仍跑在 ESX；K8s 作开发者 API/调和，VCF 提供虚拟化与治理。面向动态工作负载（沙箱/CI/AI）；稳态负载仍可用 PowerCLI/Terraform——**厂商博**。
- **中 NEW · PHP2Shell + vDefend/Avi 虚拟补丁**：CVE-2026-109618 / 109619，CVSS **9.2**（**厂商博数字**）；vDefend Gateway Firewall + Avi WAF 虚拟补丁，DFW/ATP 可见性。
- **中 · 安全月 Day14 · Protecting AD with VCF**：域控 VM 磁盘互换/静默克隆攻击面；加密 DC、特权等同 Tier 0——**安全教育博**。
- **中 · 安全月 Day13 · Zero Trust Versus Identity Providers**：IdP 不等于零信任；VCF Identity Broker 爆炸半径选型——**安全教育博**。
- **轻–中 · AppArmor on VKS**：AppArmorProfile CR 声明式分发；需端到端验证 enforcement——**运维/安全指南**。
- **轻 · Breakroom Ep97**：Harness CI/CD on VKS GitOps——**播客/联合验证**。

## 原文摘录

### 1. KubeVM Service
- 归档：`archive/2026-10-23/vmware/the-modern-compute-primitive-why-declarative-vm-management-matters-now-6c2b93ec.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/22/introducing-kubevm-service/
- 口径：厂商博

> We’re introducing KubeVM Service, bringing declarative, Kubernetes-native lifecycle management to VMs running directly on ESX. With KubeVM Service, Kubernetes provides the developer-facing API and reconciliation model, while VMware Cloud Foundation (VCF) continues to provide the virtualization capabilities, operational visibility, and governance enterprises depend on.

### 2. PHP2Shell / vDefend·Avi
- 归档：`archive/2026-10-23/vmware/neutralizing-php2shell-stopping-critical-php-rces-with-vmware-vdefend--b7c0dc70.txt`
- URL：https://blogs.vmware.com/load-balancing/2026/10/22/stop-php-rces-with-vdefend-avi-waf/
- 口径：厂商博

> The global threat landscape shifted dramatically today following the disclosure of PHP2Shell, a pair of critical Remote Code Execution (RCE) vulnerabilities tracked as CVE-2026-109618 (OOM memory corruption) and CVE-2026-109619 (stale global state). Both carry a CVSS score of 9.2…

### 3. Protecting AD with VCF（Day14）
- 归档：`archive/2026-10-23/vmware/protecting-active-directory-with-vcf-937fbb08.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/22/protecting-active-directory/
- 口径：厂商博（安全月）

> Most domain controllers run as virtual machines, so protecting Active Directory is partly a job for the virtualization platform… Your Hypervisor Admins Are Indirectly Domain Admins… The disk swap… The silent clone…

### 4. Zero Trust Versus Identity Providers（Day13）
- 归档：`archive/2026-10-23/vmware/zero-trust-versus-identity-providers-16d42d29.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/22/zero-trust-identity-providers/
- 口径：厂商博（安全月）

> …from more basic 2FA to things like passkeys… Local accounts still exist… Choose the single sign-on model with the blast radius in mind… an impact to a fleet-wide VCF Identity Broker affects the entire VCF fleet…

### 5. AppArmor on VKS
- 归档：`archive/2026-10-23/vmware/verifying-apparmor-enforcement-on-vmware-vsphere-kubernetes-service-8787a1ee.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/21/verify-apparmor-on-vks/
- 口径：厂商博

> The core strength of VKS is the AppArmorProfile Custom Resource, which allows platform teams to declaratively manage and distribute custom AppArmor policies across all worker nodes.

### 6. Breakroom Ep97 · Harness × VKS
- 归档：`archive/2026-10-23/vmware/vcf-breakroom-chats-ep-97-enabling-gitops-on-vmware-vsphere-kubernetes-4de021cb.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/22/vcf-breakroom-chats-ep-97-enabling-gitops-on-vmware-vsphere-kubernetes-service-with-harness/
- 口径：厂商播客

> With the recent validation of Harness Continuous Integration and Delivery (CI/CD) on VMware vSphere Kubernetes Service (VKS)…

## 对基础档案的影响
- **轻量更新** `profiles/vmware.md`「最近动态」：KubeVM Service + 安全月 Day13/14 + PHP2Shell 虚拟补丁叙事。