New ShadowRay Exploit Targets Vulnerability in Ray AI Framework to Attack AI Systems

Gbhackers •Mayura Kathir • November 19, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShadowRay 2.0 Campaign Exploits Ray Clusters for Crypto Mining A global campaign named ShadowRay 2.0 is targeting exposed Ray clusters, exploiting the unpatched CVE-2023-48022 vulnerability. The attacks, attributed to a threat actor known as IronErn440, have been active since at least September 2024, converting compromised systems into a self-replicating botnet for cryptocurrency mining and data theft. 8 sources 42

New ShadowRay Exploit Targets Vulnerability in Ray AI Framework to Attack AI Systems

The full story

Extracted Entities

Attack Types (2)

Platforms (1)