Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations

Part of the Red Heron story · since 14 Sep

Quiet for 5 weekslast report 22 Sep3 articles2 outlets
14 Sep · The Hacker News first9 Oct17 OctNowThis article1st of 3
  • Mon 14 Sep, 17:37 UTC. The Hacker News, first report. Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations. This article, 1st of 3.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline, its first report on the story. Chinese-Linked Hackers Exploit Critical Gitea Flaw to Steal Data. Cites a CVE in CISA KEV.
  • Tue 22 Sep, 04:23 UTC. SecurityOnline. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign. Cites a CVE in CISA KEV.

The article discusses the exploitation of a remote code execution (RCE) vulnerability in Gitea by a group known as 'Red Heron'. This cyber espionage campaign has targeted 13 organizations across six countries. The campaign highlights the risks associated with unpatched vulnerabilities in popular software tools, and the need for organizations to enhance their cybersecurity measures to prevent such attacks. It emphasizes the importance of timely patch management and continuous monitoring to mitigate potential threats.

How the story developed

All 3 articles
Quiet for 5 weekslast report 22 Sep3 articles2 outlets

3 articles from 2 outlets since 14 Sep. Quiet since 22 Sep. This was the first report.

Now14 Sep16171819202122First reportThe Hacker News · 14 Sep, 17:37Exploited CVESecurityOnline · 15 SepPicked up againafter 7 days quiet
  • Mon 14 Sep, 17:37 UTC. The Hacker News, first report. Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations. This article, 1st of 3.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline, its first report on the story. Chinese-Linked Hackers Exploit Critical Gitea Flaw to Steal Data. Cites a CVE in CISA KEV.
  • Tue 22 Sep, 04:23 UTC. SecurityOnline. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Mon 14 SepDay 01
    1. Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations17:37 · The Hacker News · First report · This article, 1st of 3
  2. Tue 15 SepDay 11
    1. Chinese-Linked Hackers Exploit Critical Gitea Flaw to Steal Data04:41 · SecurityOnline · Exploited CVE · Known exploited CVE

  3. Quiet for 7 days

    Tue 22 SepDay 81
    1. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign04:23 · SecurityOnline · Picked up again · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in