New ShadowRay Attack Exploits Vulnerability in Ray AI Framework to Target AI Systems

Cyberpress • November 19, 2025

Security researchers at Oligo Security have confirmed a significant evolution in the campaign, now harnessing AI-generated payloads to accelerate and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShadowRay 2.0 Campaign Exploits Ray Clusters for Crypto Mining A global campaign named ShadowRay 2.0 is targeting exposed Ray clusters, exploiting the unpatched CVE-2023-48022 vulnerability. The attacks, attributed to a threat actor known as IronErn440, have been active since at least September 2024, converting compromised systems into a self-replicating botnet for cryptocurrency mining and data theft. 8 sources 42

New ShadowRay Attack Exploits Vulnerability in Ray AI Framework to Target AI Systems

The full story

Extracted Entities

Campaigns (1)

Platforms (1)