Vulnerability on IT News

Hackers Now Exploit Public Vulnerabilities in Under 2 Hours, Zero Day Clock Shows

Mon, 06 Jul 2026 00:00:00 +0800

The window between a vulnerability going public and attackers actively exploiting it has shrunk from weeks to hours. A new visualization project called Zero Day Clock is putting hard numbers on just how fast the threat landscape is accelerating.

'Bad Epoll' Linux Vulnerability Gives Attackers Root Access — Android Phones Are Affected Too

Sun, 05 Jul 2026 00:00:00 +0800

Jaeyoung Chung, a security researcher at Seoul National University, found something worrying in the Linux kernel earlier this year. The vulnerability, now tracked as CVE-2026-46242 and nicknamed “Bad Epoll,” lives in the epoll subsystem, a core piece of the Linux kernel that handles how applications respond to I/O events. It earned a CVSS score of 7.8, putting it in the high-severity bucket, and its reach extends well beyond desktop Linux.

New 'DirtyClone' Linux Vulnerability Lets Attackers Gain Root Access — CVSS 8.8

Sat, 27 Jun 2026 00:00:00 +0800

Another week, another Linux kernel bug with roots in how the system handles memory. This time it’s DirtyClone, tracked as CVE-2026-43503 and carrying a CVSS score of 8.8 — high severity, local privilege escalation, and potentially worse.

360 Unveils 'Heavenly Sword and Dragon Saber' AI Security Duo to Rival Anthropic's Mythos

Wed, 24 Jun 2026 21:00:00 +0800

At the ISC.AI 2026 conference in Beijing, 360 founder Zhou Hongyi unveiled the company’s two-pronged AI security strategy — an automated vulnerability discovery agent codenamed “Tulong Feng” and an autonomous defense system called “Yitian Array” — positioning them as China’s direct response to Anthropic’s restricted Mythos model.

Critical FFmpeg Vulnerability Lets Attackers Hijack Systems via Malicious Video Files

Tue, 23 Jun 2026 20:48:00 +0800

A critical security vulnerability has been discovered in FFmpeg, the world’s most widely deployed open-source multimedia framework, that allows attackers to hijack systems simply by getting them to process a maliciously crafted video file. The vulnerability, tracked as CVE-2026-8461 with a CVSS severity score of 8.8 out of 10, has already been patched in an emergency release.