Russian hackers are using a VMWare bug to plant web shells inside hacked networks and pivot to Microsoft ADFS servers from where they steal sensitive data.
Article Link: https://www.zdnet.com/article/nsa-warns-of-russian-state-sponsored-hackers-exploiting-vmware-vulnerability/#ftag=RSSbaffb68