Critical Dell Zero-Day Exploited by Chinese Spies; Massive Data Breaches Strike French Government and Dutch Telecom

This cybersecurity brief for February 19, 2026, is dominated by the discovery of a critical 10.0 CVSS zero-day in Dell RecoverPoint, actively exploited by a Chinese espionage group since mid-2024. The period also saw two massive data breaches: France's national bank registry (FICOBA) was compromised, exposing 1.2 million accounts, while Dutch telecom giant Odido suffered a breach affecting over 6 million customers. Other significant events include a vishing attack on fintech firm Figure claimed by ShinyHunters, a supply chain incident at an Adidas partner, and a critical vulnerability allowing eavesdropping on Grandstream VoIP phones. Regulatory bodies like the FCC and CISA issued urgent warnings, highlighting the escalating ransomware and exploitation risks.