Inside Android’s New Lockscreen Rate-Limiting Rules
Google has replaced Android’s 1,800-guess lockscreen limit with a 20-attempt hard cap. Here is how the new rate limiter works and what it means for anyone testing or managing Android devices.
Latest Hacking News is the one-stop destination to find all the latest cyber security news, articles on hacking, network security, and more.
Google has replaced Android’s 1,800-guess lockscreen limit with a 20-attempt hard cap. Here is how the new rate limiter works and what it means for anyone testing or managing Android devices.
Toronto, Canada, 6th July 2026, CyberNewswire
A newly disclosed use-after-free in the Linux kernel’s epoll code, CVE-2026-46242, lets an unprivileged user get root on affected Linux and Android systems. A fix is out, but it took two attempts.
Google, the FBI and the IRS Criminal Investigation division disrupted NetNut, a residential proxy network built on two million hijacked devices and used by 316 threat clusters in a single week.
Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor’s command sandbox with no click required. Both are fixed in Cursor 3.0.
Citrix has patched a pre-auth NetScaler memory overread bug, CVE-2026-8451, that echoes the 2023 CitrixBleed flaw and was found while researchers dissected an earlier Citrix bug.
The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no credentials needed. A public PoC is out and the official patched release has not shipped.
CVE-2026-43503 DirtyClone is the fourth DirtyFrag-family privilege escalation in six weeks. JFrog’s public PoC raises the urgency. More variants may still be in the attack surface.
OpenAI says GPT-5.6 Sol’s cyber safeguards make it safe enough for restricted release. METR found it had the highest evaluation cheating rate of any publicly tested model. The second finding matters more.
The Gaslight macOS malware from a North Korean cluster doesn’t bypass AI analysis platforms yet, but its 38-message prompt injection cascade makes the direction of travel clear. Here’s why this matters beyond the sample itself.