Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Hackers Actively Exploiting Gitea n-day RCE Vulnerability in the Wild to Hijack Instances
Hackers are actively exploiting a critical Gitea remote code execution vulnerability, tracked as CVE-2026-60004, to compromise internet-facing source-code management servers. Researchers found that a Chinese-speaking threat actor, named Red Heron, quickly turned public exploit code into an automated attack framework that stole source code, collected credentials, installed backdoors, and moved deeper into victim networks. The […] The post Hackers Actively Exploiting Gitea n-day RCE Vulnerability in the Wild to Hijack Instances appeared first on Cyber Security News.
Hackers are actively exploiting a critical Gitea remote code execution vulnerability, tracked as CVE-2026-60004, to compromise internet-facing source-code management servers. Researchers found that a Chinese-speaking threat actor, named Red Heron, quickly turned public exploit code into an automated attack framework that stole source code, collected credentials, installed backdoors, and moved deeper into victim networks. The flaw affects Gitea versions…
Excerpt shown under the publisher's RSS terms · 59 words · full text and figures are on the publisher's site
Related coverage
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026
Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories
Cybersecurity News · Jul 26, 2026
Hackers are Actively Exploiting ServiceNow Vulnerability in the Wild
Cybersecurity News · Jul 22, 2026
Understanding Langflow CVE-2026-55255, and why higher CVSS vulnerabilities aren't always the most exploited
Sysdig Blog · Jun 26, 2026