Chinese threat actor exploits maximum-severity Dell zero-day.

This briefing highlights four items: a suspected Chinese APT (UNC6201) actively exploiting a critical Dell RecoverPoint zero-day to gain root access and persistence; a Microsoft 365 Copilot bug that could bypass DLP and summarize confidential emails (now being fixed); a targeted espionage malware campaign named CRESCENTHARVEST delivering malicious .LNK files to Farsi-speaking protesters and dissidents; and a Spanish court order compelling VPN providers to block IPs tied to illegal football streams.