Re: Welcome to the Industrial Internet ...
Some really fat brush usage going on here.
Windows and Linux have thousands of known vulnerabilities (plus a unknown number of unknown vulnerabilities) and hence do not qualify for critical environments.
You are confusing application-level vulnerabilities with OS-level vulnerabilies.
Running Linux may not be the perfect idea for a critical environment (this depends on the requirements), but "unknown vulnerabilities" is only one of them in the most demanding settings, as long as you keep it minimal and do not run random network-using applications (including sundry browsers) on top. Sure, there may be a packet-of-instant-p0wnage out there, but how high is that probability really?
VMware does have hundreds of known vulnerabilities, same goes for the major Unixes.
Break out of the sandbox, will you?