Gitea Code Injection, miniOrange Auth Bypass, and Shrinking Patch Windows - Blumira Briefings

Welcome to Blumira Briefings, your weekly download of the top headlines for your security practice!

In this week's edition:
- Critical Remote Code Execution Vulnerability in Gitea Actively Exploited, CISA Warns 
- Critical WordPress SAML Plugin Authentication Bypasses Actively Exploited While Unpatched 
- Microsoft Advises Network Controls as Vulnerability Patching Window Rapidly Shrinks

Sources: 
Hackers now exploit critical Gitea flaw in code injection attacks
https://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/
-- 
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html
-- 
Microsoft warns patch window is collapsing, urges shift to network-level containment
https://www.csoonline.com/article/4214135/microsoft-warns-patch-window-is-collapsing-urges-shift-to-network-level-containment.html
--