Red Heron Exploits Gitea RCE Vulnerability in International Campaign

The Chinese threat group Red Heron is actively exploiting a recently disclosed security flaw in Gitea to compromise internet-facing instances globally. Researchers observed extensive scanning and successful breaches across multiple organizations. Administrators are urged to patch vulnerable Gitea deployments immediately to prevent unauthorized system access.