China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day

China-linked threat actors have demonstrated an alarming ability to rapidly exploit newly discovered vulnerabilities, with the critical React2Shell exploit being weaponized in under 24 hours. This swift exploitation highlights the diminishing window of opportunity for organizations to patch and protect themselves against emerging threats. Notably, a staggering 88% of exploited vulnerabilities in the first half of 2026 were compromised within a mere 48 hours of disclosure, underscoring the urgency of prompt remediation¹. The React2Shell exploit, in particular, has been leveraged by Chinese actors to gain unauthorized access to vulnerable systems, emphasizing the need for organizations to prioritize timely patch management and vulnerability assessment. As threat actors continue to accelerate their exploitation timelines, security teams must adapt and respond with equal haste to mitigate potential breaches. The ability of Chinese threat actors to quickly exploit vulnerabilities has significant implications for security practitioners, who must now assume that newly disclosed vulnerabilities will be exploited almost immediately.