A China-linked cyberespionage group has exploited a zero-day vulnerability in Dell’s RecoverPoint for Virtual Machines since at least mid-2024, according to Google’s Threat Intelligence Group and Mandiant. GTIG and Mandiant attributed the exploitation of CVE-2026-22769 to a group called UNC6201, who used the vulnerability for lateral movement, persistence, and deploying …

Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage. Attackers can use a “dangling pointer” to insert …

PentestAgent, an open-source AI framework by Masic (GH05TCREW), now offers improved features like prebuilt attack playbooks and easy HexStrike integration. A researcher known as GH05TCREW released a tool on GitHub that uses large language models (LLMs) like Claude Sonnet or GPT-5 through LiteLLM for advanced black-box security evaluations. PentestAgent uses …