Frequency
3
occurrences
First Seen
December 4, 2025
Last Seen
July 29, 2026
Related Threat Clusters
-
Critical Remote Code Execution Vulnerability Exploited by China-Nexus Actor
On April 3, 2025, Ivanti disclosed CVE-2025-22457, a critical buffer overflow vulnerability affecting Ivanti Connect Secure and other products. The vulnerability allows unauthenticated remote code execution, and…
2 articles · Updated June 17, 2026 -
Chinese Hackers Exploit Dell Zero-Day Flaw CVE-2026-22769 Since Mid-2024
A Chinese state-backed hacking group, UNC6201, has been exploiting a critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines since at least mid-2024. The flaw, tracked as CVE-2026-22769, features a…
40 articles · Updated February 17, 2026 -
CISA Alerts on Chinese BrickStorm Malware Targeting VMware Servers
CISA, in collaboration with the NSA and Canada's Cyber Security Centre, has issued a warning about Chinese hackers using BrickStorm malware to backdoor VMware vSphere servers. The attacks primarily affect government and…
3 articles · Updated December 4, 2025
Recent Intelligence Reports
- Mandiant and Google's Threat Intelligence Group documented — cloud.google.com · July 29, 2026
- Chinese hackers exploiting Dell zero-day flaw since mid — Bleepingcomputer · February 17, 2026
- CISA warns of Chinese "BrickStorm" malware attacks on VMware servers — Bleepingcomputer · December 4, 2025