⚡ Weekly Recap: Double-Tap Skimmers, Prompt Spy AI, 30Tbps DDoS, Docker Malware & More

Summary: A maximum-severity hard-coded credential flaw in Dell RecoverPoint for Virtual Machines, CVE-2026-22769 with a CVSS score of 10.0, has been exploited as a zero-day since mid-2024 by a suspected China-nexus cluster tracked as UNC6201. Attackers used an "admin" credential for the Apache Tomcat Manager instance to upload a web shell named SLAYSTYLE via the "/manager/text/deploy" endpoint and run commands as root to drop the BRICKSTORM backdoor and its newer version GRIMBOLT, affecting versions prior to 6.0.3.1 HF1.
Key Takeaway: A 10.0 flaw sitting in a backup and recovery appliance, exploited quietly for roughly two years before disclosure, means the system you rely on to restore operations after an incident may itself have been the entry point.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-11730 CVE-2025-13818 CVE-2025-29969 CVE-2025-32355 CVE-2025-59793 CVE-2025-61928 CVE-2025-64127 CVE-2025-64128 CVE-2025-64129 CVE-2025-64130 CVE-2025-65717 CVE-2025-67303 CVE-2025-7740 CVE-2025-9501 CVE-2026-1357 CVE-2026-1358 CVE-2026-1670 CVE-2026-20140 CVE-2026-22769 CVE-2026-2329 CVE-2026-24733 CVE-2026-24789 CVE-2026-25084 CVE-2026-25108 CVE-2026-2577 CVE-2026-25903 CVE-2026-25926 CVE-2026-26019 CVE-2026-26119 CVE-2026-2648 CVE-2026-2649 CVE-2026-2650 CVE-2026-27099 CVE-2026-27100 CVE-2026-27118
Related: ⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, Last Pass Fines, .NET RCE, OAuth Scams & More Cyber Risks ·
CVE-2026-25108: Soliton Systems K.K File Zen OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 24, 2026
CVE-2026-22769: Dell Recover Point for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Known Exploited Vulnerabilities · Feb 18, 2026