In April, VMware discovered vulnerabilities in its products and released the necessary remedies to customers. However, CISA emphasized that the vulnerabilities it is currently worried about are new, only revealed by VMware on May 18. The agency added that it "expects threat actors to quickly develop a capability to exploit these newly released vulnerabilities."