> TritonInfoSec News
Home / Sep 15, 2026 / Story
0
#5 The Hacker News general September 14, 2026 at 16:56 UTC

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

By [email protected] (The Hacker News)

AI Summary

Chinese threat actor Red Heron exploited a recently disclosed Gitea RCE vulnerability to scan 1,386 Gitea instances across seven countries, successfully compromising 13 organizations across six countries, with a separate dataset of 477 Taiwan-based systems maintained. Acronis Threat Research Unit attributed the multi-national campaign, underscoring the rapid weaponization of self-hosted Git platform vulnerabilities by state-aligned actors.

Read full article → https://thehackernews.com/2026/09/red-heron-exploi…

Relevance score: 85.0/100

# More from September 15

  1. 1
    Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation SecurityWeek
  2. 2
    Maximum Severity GitLab Flaw Puts Supply Chains at Risk Dark Reading
  3. 3
    CISA: Hackers now exploit max severity GitLab flaw in attacks BleepingComputer
  4. 4
    'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink Dark Reading
  5. 6
    Three JFrog Artifactory Flaws Exploited for Backdoor Deployment SecurityWeek
  6. 7
    ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks SecurityWeek
  7. 8
    Revolut discloses data breach exposing financial info, passports BleepingComputer
  8. 9
    New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing The Hacker News
  9. 10
    Microsoft’s Patching Schneier on Security