A worrying Dell zero-day flaw has reportedly gone unpatched for nearly two years - and Chinese hackers are taking advantage

A group of 7 hackers, 6 slightly blurred in the background and one in the foreground, all wearing black with hoods pulled up over their heads. You cannot see their faces. The hacker in the foreground sits with an open laptop in front of them. The background, behind the hackers, is a Chinese flag.

---

• Dell patched critical flaw in RecoverPoint for Virtual Machines caused by hardcoded credentials
• Exploited as a zero-day since mid-2024 by Chinese state-sponsored group UNC6201
• Attackers deployed new Grimbolt backdoor and used novel “Ghost NICs” technique for stealth and lateral movement