#8
BleepingComputer
general
February 17, 2026 at 23:15 UTC
Chinese hackers exploiting Dell zero-day flaw since mid-2024
By Sergiu Gatlan
AI Summary
Chinese state-backed group UNC6201 has been exploiting CVE-2026-22769, a critical Dell RecoverPoint for VMs zero-day with hard-coded credentials, since mid-2024 in attacks that remained undetected for over 18 months. The maximum severity vulnerability (CVSS 10.0) affects Dell's virtual machine recovery platform used in enterprise backup infrastructure. This demonstrates the extended dwell time advanced persistent threats can achieve when exploiting zero-day vulnerabilities in critical infrastructure.
Relevance score: 89.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →