ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

This week's threats include issues where trusted elements are used against defenses, such as signed drivers and legitimate apps being exploited by malware. A weak header check has also been found to allow for code execution. Exposed systems and old bugs are also being targeted, with attackers using unusual hiding tactics to cause damage. Additionally, AI-assisted exploit research is making it easier for attackers to launch successful exploits. Overall, the effort required to cause damage is being lowered through various means. Various vulnerabilities and exploits are being reported, including a remote code execution issue in Gogs and a workflow-to-RCE vulnerability in n8n.