This article from The Daily Swing about CISA ordering U.S. federal agencies to implement patches ASAP references recent Barracuda research about attacks attempting to exploit these vulnerabilities.
Get the details: https://portswigger.net/daily-swig/active-attacks-against-vmware-flaws-prompts-emergency-update-directive