# VMware / Broadcom 日跟踪 · 2026-10-30
> 日期：2026-10-30（Asia/Shanghai，周五）。窗口：2026-10-29（周四）早报之后 → 2026-10-30（周五）早。上一成功早报 **2026-10-29**。抓取全库：Saved 279 / skipped 29 / errors 43；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.globenewswire.com、www.reddit.com、www.sangfor.com（Reddit **本日 host_blocked**，无可用帖）。相对全部历史归档真正新增 URL **18** 条（industry 9、vmware 3、redhat 2、nutanix 1、smartx 1、scalecomputing 1、vates 1）。 原料：archive/2026-10-30/vmware/。

## 摘要
- **中 NEW · Not About Backups, It's About Restores：** 勒索场景下强调可恢复副本与恢复基础设施与生产管理面隔离；3-2-1 起点 +「攻击者能否一并删掉恢复副本」——**厂商安全月相邻/云基础博，非版本 GA**。
- **中 NEW · Security Features Inside the Virtual Machine（安全月 Day18/22）：** UEFI/Secure Boot、vTPM、VBS、VM 加密；依赖虚拟硬件 ≥13；转换 BIOS→UEFI 需谨慎——**厂商安全月系列博，非新版本号 GA**。
- **中–强 NEW · The 13-Hour Collapse（Tanzu）：** 称关键漏洞野外利用常在 24h 内；LMDeploy CVE-2026-33626 武器化约 **13** 小时；PHP2Shell / Node2Shell 叙事；主张周期补丁窗失效、需持续自动化平台响应——**厂商 Tanzu 观点博；CVE 时间线为文内自称/转述，非独立复测**。无 VCF/Tanzu **新版本号 GA**。
- **续档：** Tanzu Platform 11.0 GA / VCF9 多租户 Private AI 白皮书 / AgentMinder Part4——本日无推翻。

## 原文摘录

### 1. Restores
- 归档：`archive/2026-10-30/vmware/not-about-backups-it-s-about-restores-f67119d4.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/28/not-about-backups-its-about-restores/
- 口径：厂商博；非版本 GA

> Modern, coordinated encryption and destruction of data by advanced ransomware operators have changed that threat landscape… Part of assessing your ransomware response posture is making sure you have fast, reliable recovery from backups that are protected and separated from production… Ransomware adds another question: can someone who compromises production also delete your recovery copies?

### 2. VM security features（Day 18）
- 归档：`archive/2026-10-30/vmware/security-features-inside-the-virtual-machine-88b1f4ae.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/29/vm-security-features/
- 口径：安全月系列；非新版本号 GA

> Day 18 of 22 in our Cybersecurity Awareness Month series… VMware Cloud Foundation (VCF) gives every virtual machine the same kinds of protections that modern physical servers have: UEFI firmware, Secure Boot, a TPM, virtualization-based security, and encryption… Secure Boot… needs EFI firmware, virtual hardware version 13 or later…

### 3. 13-Hour Collapse
- 归档：`archive/2026-10-30/vmware/the-13-hour-collapse-why-frontier-ai-demands-the-end-of-periodic-patch-4d6027a5.txt`
- URL：https://blogs.vmware.com/tanzu/the-13-hour-collapse-why-frontier-ai-demands-the-end-of-periodic-patching/
- 口径：Tanzu 观点博；时间线文内自称/转述

> Critical vulnerabilities are routinely exploited in the wild within 24 hours; in notable cases like LMDeploy (CVE-2026-33626), weaponization took a mere 13 hours… PHP2Shell… Node2Shell (CVE-2026-111497)… To survive the era of Frontier AI, patching can no longer be an ad-hoc calendar event. It must become a continuous, automated platform response.

## 对基础档案的影响
- **轻量更新** `profiles/vmware.md`「最近动态」：Restores + VM 安全特性 Day18 + 13-Hour Collapse。