CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a high-severity security flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability in question is CVE-2025-41244 (CVSS score: 7.