OPS INTEL

CRITICAL 95% confidence outage

Dell RecoverPoint for VMs Zero-Day Exploit Report

["Google Mandiant and GTIG report exploitation of Dell RecoverPoint for Virtual Machines' CVE-2026-22769 since mid-2024 by UNC6201 threat cluster.", "Severe.

['This incident highlights the importance of continuous security monitoring and prompt patching for enterprise solutions like Dell RecoverPoint for VMs.', 'Operators need to assess their exposure and take necessary steps

Dell RecoverPoint UsersEnterprise Backup Solutions

action items (2)

• Immediately review system configurations for any use of default or hardcoded credentials.
• Implement additional monitoring on virtual machine environments and log activity related to the affected software.

The Hacker News · 2026-02-22T11:31

HIGH 95% confidence advisory

Critical Flaws in Four VS Code Extensions Affecting Over 125M Users

Four widely used VS Code extensions are vulnerable to critical flaws that could allow attackers to steal local files and execute code remotely. Includes severit

['Potential loss of sensitive data', 'Risk of unauthorized system access']

VS Code usersSoftware developers using VS Code extensions

action items (2)

• Scan for installed vulnerable extension versions
• Deploy security patches and updates

The Hacker News · 2026-02-22T11:01

CRITICAL 95% confidence cve

Grandstream GXP1600 VoIP Phones Exposed to RCE Vulnerability

Critical security flaw CVE-2026-2329 in Grandstream GXP1600 series of VoIP phones allows unauthenticated remote code execution. CVSS score: 9.3. Includes severi

['Allows attackers to gain full control of affected devices remotely', 'Potentially leads to data theft and disruption of communication services']

Enterprise environments using Grandstream GXP1600 series VoIP phones

action items (3)

• Update all Grandstream GXP1600 VoIP phones with latest firmware
• Monitor network for signs of compromised devices
• Contact Grandstream support for further guidance on securing devices

The Hacker News · 2026-02-22T10:31

HIGH 95% confidence outage

UK Council Data Breach Exposes Transgender Complaint Details

['A UK council mishandles transgender complaint data, breaching confidentiality and exposing personal details.', 'Personal information of complainants was.

['Mishandling of sensitive data during public discourse led to unauthorized disclosure.', 'Lack of proper security measures for handling confidential complaints in a public setting caused this incident.']

Local GovernmentData Protection Compliance

action items (2)

• Review and update policies regarding the confidentiality of personal information in public settings.
• Enhance technical safeguards to prevent unauthorized disclosures during public engagements.

The Register · 2026-02-22T10:01

HIGH 85% confidence cve

ZDI-26-122: PDF-XChange Editor Vulnerability

Local attackers can exploit this vulnerability to escalate privileges on PDF-XChange Editor installations. Requires low-privileged code execution. Includes seve

['Lack of proper validation for search path elements allows privilege escalation', 'Exploitation requires specific conditions but poses serious security risks once achieved']

WindowsMac OS X

action items (3)

• Apply available updates immediately
• Review system configurations and user privileges
• Monitor logs for suspicious activity related to privilege escalation attempts

Zero Day Initiative · 2026-02-22T09:31