Two-Year Exploitation of Dell Zero-Day by Chinese APT Group (infosecurity-magazine.com)

• Exploitation of a maximum-severity CVSS 10.0 zero-day vulnerability.
• Uninterrupted access maintained by state actors for 24 months.
• Critical impact on virtualized infrastructure and data redundancy systems.

"A Mandiant investigation reveals that a Chinese state-sponsored APT group successfully exploited a critical CVSS 10.0 vulnerability in Dell RecoverPoint for Virtual Machines for two years before detection. This campaign highlights the persistent threat to enterprise virtualization and the strategic vulnerability created by reliance on proprietary infrastructure. The long-term nature of the breach suggests a high-level focus on persistent access to critical data nodes within global supply chains and government networks."