The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ray, an open-source Python-native distributed computing framework, to…
ShadowRay 2.0 is a campaign that exploits unpatched Ray instances to turn clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet.…
Oligo, a security company, discovered the fetch bypass in Ray that led to CVE-2025-62593. Researcher Avi Lumelsky is credited with the discovery.…
Ray is a Python-native distributed computing framework for scaling AI and ML workloads. It is affected by CVE-2025-62593, a critical RCE vulnerability…
Ray-Project Ray Code Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…