Dell's Hard-Coded Flaw: A Nation-State Goldmine

Mandiant and Dell disclosed that China-linked UNC6201 has been exploiting CVE-2026-22769, a CVSS 10 hard-coded admin credential in Dell RecoverPoint for Virtual Machines, to authenticate to Tomcat Manager, upload malicious WAR files, achieve root-level persistence on appliances, pivot to VMware environments, and deploy malware families including Slaystyle, Brickstorm, and a novel AOT-compiled C# backdoor called Grimbolt; Dell urges immediate upgrade or remediation to mitigate the risk.