Established 2026Monday, 20 July 2026
presents

The CloudySec Digest

The wires, edited.
← Front PageVulnerabilities Desk
Vulnerabilities

From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day

UNC6201 exploits Dell RecoverPoint VM zero-day vulnerability, introducing BRICKSTORM to GRIMBOLT malware evolution

Summary written by editorial AI · Source link below

Filed by Mandiant Blog1 min readCVE-2026-22769Read at source ↗
CVSS10.0criticalCVE-2026-22769

Written by: Peter Ukhanov, Daniel Sislo, Nick Harbour, John Scarbrough, Fernando Tomlinson, Jr., Rich Reece Introduction Mandiant and Google Threat Intelligence Group (GTIG) have identified the zero-day exploitation of a high-risk vulnerability in Dell RecoverPoint for Virtual Machines , tracked as CVE-2026-22769 , with a CVSSv3.1 score of 10.0 . Analysis of incident response engagements revealed that UNC6201, a suspected PRC-nexus threat cluster, has exploited this flaw since at least mid-2024

Continue at the source
Read the full report at Mandiant Blog

External link — opens at Mandiant Blog in a new tab.

§
Continue with

More from the Vulnerabilities Desk