A zero-day vulnerability affects a variety of virtualization platforms and cloud services. The vulnerability is in the virtual floppy disk controller of Quick Emulator (QEMU), a free, open-source hypervisor. Hundreds or thousands of products that use virtualization technology are vulnerable to VENOM. CrowdStrike CTO and co-founder Dmitri Alperovitch stresses that organizations should check with their cloud providers to ensure they have already issued the patch, and patch their own on-premise applications and appliances immediately.”]

