CISA has ordered US federal agencies to patch an actively exploited remote code execution vulnerability in Ray within three days. The bug could be used in phishing and malvertising attacks targeting developers to gain access to private corporate networks.
US federal agencies have been given three days by CISA to patch an actively exploited remote code execution (RCE) vulnerability in Ray, a distributed computing framework.
According to The Register, the bug could be used in phishing and malvertising campaigns targeting developers, potentially allowing attackers to gain access to private corporate networks.
The directive applies to federal civilian agencies, which must remediate the flaw within the specified timeframe.
Why this matters: The active exploitation of the Ray RCE bug poses a direct threat to federal networks and could also affect private organisations using the framework.
What this means for you: Organisations using Ray should apply the available patch promptly to reduce the risk of compromise via phishing or malvertising.
Join thousands of readers getting the best of British news straight to their inbox.