Chinese threat actor exploits maximum-severity Dell zero-day.

This news roundup highlights several high-risk developments: a PRC-nexus APT (UNC6201) exploiting a Dell RecoverPoint zero-day (CVE-2026-22769) for root access and persistence; an infostealer discovered extracting OpenClaw AI assistant configuration and secrets; the CRESCENTHARVEST campaign targeting Iranian protesters via malicious LNK lures; the Starkiller phishing framework that proxies live login pages to bypass detections; and a sharp rise in ransomware against industrial organizations (3,300 affected, 119 groups active in 2025).