{"id":8461,"date":"2025-12-11T14:10:27","date_gmt":"2025-12-11T18:10:27","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=8461"},"modified":"2025-12-11T11:35:41","modified_gmt":"2025-12-11T15:35:41","slug":"gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/","title":{"rendered":"Gogs zero-day exploit sweeps across servers as attacks escalate"},"content":{"rendered":"<p data-start=\"279\" data-end=\"764\">Researchers at Wiz uncovered a <a href=\"https:\/\/hostingdiscussion.com\/news\/sonicwall-vpns-under-siege-as-suspected-zero-day-exploit-fuels-ransomware-surge\/\">zero-day<\/a> flaw in <a href=\"https:\/\/gogs.io\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Gogs<\/a> after they traced unusual malware activity back to the platform. Attackers now exploit the bug to overwrite files and run malicious commands, and they\u2019ve already hit more than 700 exposed servers. The activity began in July, marked by strange auto-generated repositories. Wiz urges administrators to shut off open registration and restrict internet access before the intrusions spread further.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers at Wiz uncovered a zero-day flaw in Gogs after they traced unusual malware activity back to the platform. Attackers now exploit the bug to overwrite files and run malicious commands, and they\u2019ve already hit more than 700 exposed servers. The activity began in July, marked by strange auto-generated repositories. Wiz urges administrators to shut [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[5184,5185,5183,5182,4044],"class_list":["post-8461","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2025-8110","tag-devops-security-breach","tag-git-server-security","tag-gogs","tag-zero-day-exploit"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"Researchers at Wiz uncovered a zero-day flaw in Gogs after they traced unusual malware activity back to the platform. Attackers now exploit the bug to overwrite files and run malicious commands, and they\u2019ve already hit more than 700 exposed servers. The activity began in July, marked by strange auto-generated repositories. Wiz urges administrators to shut [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-11T18:10:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-11T15:35:41+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/\",\"name\":\"Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2025-12-11T18:10:27+00:00\",\"dateModified\":\"2025-12-11T15:35:41+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Gogs zero-day exploit sweeps across servers as attacks escalate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/","og_locale":"en_US","og_type":"article","og_title":"Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News","og_description":"Researchers at Wiz uncovered a zero-day flaw in Gogs after they traced unusual malware activity back to the platform. Attackers now exploit the bug to overwrite files and run malicious commands, and they\u2019ve already hit more than 700 exposed servers. The activity began in July, marked by strange auto-generated repositories. Wiz urges administrators to shut [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/","og_site_name":"Web Hosting News","article_published_time":"2025-12-11T18:10:27+00:00","article_modified_time":"2025-12-11T15:35:41+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/","url":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/","name":"Gogs zero-day exploit sweeps across servers as attacks escalate - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2025-12-11T18:10:27+00:00","dateModified":"2025-12-11T15:35:41+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/gogs-zero-day-exploit-sweeps-across-servers-as-attacks-escalate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"Gogs zero-day exploit sweeps across servers as attacks escalate"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":116,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/8461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=8461"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/8461\/revisions"}],"predecessor-version":[{"id":8462,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/8461\/revisions\/8462"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=8461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=8461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=8461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}