Ray RCE under active attack via your browser — patch to 2.52.0 now
CISA gave agencies three days to patch as crypto-mining botnets hijack exposed GPUs. Plus: Copilot's agent lands in Teams, Cursor agents go scheduled.
Copy markdown
Your browser is the attack surface
CVE-2025-62593 (CVSS 9.4) lets an attacker run code on your Ray cluster straight from a developer's browser: it chains DNS rebinding with Ray's unauthenticated Dashboard and Jobs API. Every version before 2.52.0 is exposed.
Botnets are already on unpatched clusters
The RondoDox DDoS botnet weaponized the flaw days before its November 2025 disclosure, and Oligo's “ShadowRay 2.0” campaign is hijacking exposed Ray instances with NVIDIA GPUs to mine crypto. CISA added it to the Known Exploited Vulnerabilities list on Aug 17 and gave federal agencies until Aug 20 to fix it.
Patch to 2.52.0 and lock the dashboard down
Upgrade to Ray 2.52.0 now, and never expose the Ray Dashboard or cluster ports (8265, 6379, 10001) to the internet — bind to localhost and put a VPN or auth proxy in front. Then audit for jobs you didn't submit and unexplained GPU load.
Copilot's agent lands in Microsoft Teams
Mention @GitHub in a Teams thread to spin up a shared coding-agent session teammates can watch and steer; anyone with repo write access can have it make changes and open a PR you can gate behind an extra approval. Public preview on paid Copilot plans, arriving alongside the Slack version.
Cursor's cloud agents go scheduled
Cursor's latest update lets cloud agents run as subscriptions — watching a PR or Slack thread, or firing on a schedule — adds a /goal command for long-lived objectives, and puts each subagent on its own VM. Its native Git host, Origin, is in early beta.