logo

New ShadowRay Campaign Targets Ray AI Framework in Global Attack

ID: 80273945-dab7-5e7e-ad67-da7b5e4c5d29

STIX ID: report--80273945-dab7-5e7e-ad67-da7b5e4c5d29

Feed Name: HackRead

Threat Score
78/100

Date Published: 2024-03-26

Date Updated: 2026-04-22

Author: Waqas

...
...

**ShadowRay (CVE-2023-48022) — Executive summary:** Oligo Security reports an active campaign exploiting a critical, reportedly unpatched vulnerability in the Ray AI framework (CVE-2023-48022) that has compromised hundreds of clusters over seven months, enabling attackers to hijack GPU resources for crypto-mining and potentially steal sensitive data from affected AI workloads; major organizations using Ray are at risk and urgent patching and review are advised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.