Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.
Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...