Skip to content
September 2026 Page 42

September 2026

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Ravie LakshmananSep 14, 2026Cyber Espionage / Vulnerability A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances… 

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

Ravie LakshmananSep 14, 2026Web Security / Vulnerability WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed through the WordPress.org update API so as to analyze it…