FirstVDS: Customer Data Accessed via Virtualization Panel Vulnerability

⚡ The gist in 5 seconds - FirstVDS has confirmed: attackers gained access to part of the company's network infrastructure and to the data of some customers. - The attack vector was a vulnerability in the virtualization management system (a publication names it in truncated form: "VMm…"). - The exact list of compromised data, the number of affected customers, and the date of the incident are not disclosed in the statement. ### 🔍 What was found Hosting provider FirstVDS reported that attackers gained access to part of the company's network infrastructure, as well as to the data of some customers. The cause was cited as a vulnerability in the virtualization management system — the publication truncates its name to "VMm…". No other details — the scale of the compromise, categories of data, or timeframes — are provided in the statement. As described by the company, the mechanics boil down to a single link: the virtualization control panel served as the entry point through which the attackers reached the network segment and customer data. How exactly the vulnerability was exploited, whether it has been patched, and whether customers were notified — the source does not specify. ### 💡 Why it matters Virtualization control panels are a single point of administration for hundreds of virtual machines, so compromising such a node automatically affects all customer environments at once, not just one account. For VPS users, this is a reason not to wait for details from the provider: rotate passwords and access keys for your servers, check login logs and SSH keys, and reconsider what data is stored on rented machines in the first place — FirstVDS has not yet clarified the nature of the leaked information.