60
55
60
Hackers Actively Exploiting Gitea n-day RCE Vulnerability in the Wild to Hijack Instances
Chinese-speaking Red Heron actors mass-exploit Gitea n-day RCE CVE-2026-60004 to steal source code, credentials, and pivot into victim networks.
Acronis Threat Research Unit reports active in-the-wild exploitation of Gitea RCE CVE-2026-60004 (CVSS 9.8, versions 1.17-1.27.0, fixed in 1.27.1) by a Chinese-speaking actor dubbed Red Heron. The actor scanned 1,386 Gitea servers across seven countries, held a separate list of 477 Taiwan-based targets, and confirmed victims in Canada, Argentina, Taiwan, the US, and Sri Lanka. Intrusions deployed the JITTERLY Linux implant with the SIXZUT LD_PRELOAD rootkit, stole password hashes and SSH keys, and in one case gained root admin access to a three-node Proxmox cluster.
80
60
60
60
55
Chrome is now shipping updates every 2 weeks as AI changes the security landscape
Google switches Chrome to two-week release cycles starting with Chrome 153, shrinking the N-day patch gap as AI-driven threats accelerate.
Chrome officially moved from a four-week to a two-week release schedule with Tuesday's launch of Chrome 153 on desktop, iOS, and Android. Google ties the change to its evolving security strategy, saying faster releases shrink the N-day patch gap as AI tools and community bug reports increase patch volume. Mozilla, Microsoft, and Brave have already adopted the two-week cadence, and Google is also racing AI-native browsers like Brave, Dia, Opera Neon, and Perplexity's Comet while experimenting with AI features in Chrome.
42
60
60
Russian Hackers Exploit Safari and Chrome Flaws in High
60
60
60
60
60
Time Exploit Plummets Nday Flaws
Analysis shows time-to-exploit for n-day vulnerabilities has plummeted, shrinking defender patch windows as known flaws are exploited faster.
Infosecurity Magazine reports on analysis finding that the time between a vulnerability's disclosure and its exploitation in the wild has dropped sharply for n-day flaws. Faster exploitation compresses defenders' patching windows and raises the urgency of rapid patch deployment. The specific flaw families and metrics were not detailed in the available information.
40
60
60
60
60
CLOP targets Gladinet CentreStack servers in large
60
60
60
60
60
60
Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa
60
60
35
45
55
Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762)
60
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation
60
60
60
60
60
In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issues
60
60