Chinese hackers exploiting VMware zero-day since October 2024

Broadcom has patched CVE-2025-41244 in its VMware Aria Operations and VMware Tools software, which has been exploited in zero-day attacks since October 2024. European security company linked the attacks to the UNC5174.