Bleepingcomputer ShadowRay 2.0 Campaign Targets Vulnerable Ray Clusters for Cryptomining
Article Content
Browse articles 
The ShadowRay 2.0 campaign exploits a critical vulnerability (CVE-2023-48022) in the Ray open-source framework, allowing attackers to hijack exposed Ray clusters for cryptomining, data theft, and DDoS attacks. Oligo Security researchers identified this ongoing global threat, which has been active since at least September 2024, and discovered that attackers are using AI-generated payloads to compromise vulnerable systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 188d ago How this analysis works
More articles in this cluster (6)
Following this threat?
Track IronErn440, ShadowRay 2.0 and Princeton University in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed… 
Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…