CISA tells organizations running VMware servers without Log4Shell mitigations to assume compromise.Source