Hacking group Cozy Bear, apparently backed by Russian government agencies, hacked 18,000 US companies and parts of the US government using vulnerabilities in Microsoft, SolarWinds and VMWare.