The long road to root.
ID: 33018412-53cb-5c47-8661-38c05a74551d
STIX ID: report--33018412-53cb-5c47-8661-38c05a74551d
Feed Name: The CyberWire
Threat Score
Acronis researchers report that the PRC-linked actor Red Heron rapidly weaponized a critical Gitea RCE (CVE-2026-60004) soon after disclosure to conduct a multinational campaign. The intrusions compromised organizations in five countries, exfiltrated source code, credentials, and infrastructure information, and deployed persistent backdoors plus a novel Linux implant (JITTERLY) containing an undocumented rootkit (SIXZUT) that hides files, processes, and network connections.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.