Malicious actors are exploiting a two-year-old vulnerability in the Ray AI framework in a new campaign that has affected numerous clusters, according to Oligo. Ray, which is maintained by Anyscale, is an open-source framework for scaling AI and ML applications based on the Python language. Ray clusters can be deployed in the cloud to scale workloads and must be secure and isolated to prevent potential attacks.
See also: Operation WrtHug: Exploiting vulnerabilities to infect EoL ASUS routers
The vulnerability, discovered two years ago, allows attackers to gain access to sensitive data and execute malicious code on affected systems. The campaign has already impacted many organizations, raising concerns about data security and system integrity.
Anyscale has issued security updates to address the issue, but many users have yet to apply these updates, leaving their systems vulnerable to attacks. Security experts recommend that system administrators immediately check their systems and apply the necessary updates to protect their data.
See also: WhatsApp vulnerability exposed 3.5 billion phone numbers
This campaign highlights the importance of regularly updating systems and maintaining high levels of data security. Organizations must be prepared to face such threats and implement security strategies that will allow them to react quickly and effectively in the event of an attack.
The vulnerability in the Ray AI framework is a prime example of the risks posed by legacy vulnerabilities, which can be exploited by malicious actors to gain access to sensitive data and cause damage to systems. Organizations must invest in security solutions that will allow them to detect and address such threats before they cause serious problems.
See also: Google fixes zero-day vulnerability in Chrome
Anyscale continues to work to strengthen the security of the Ray AI framework and urges users to monitor security updates and implement necessary changes to ensure the protection of their data. Collaboration between developers and users is critical to addressing the security challenges posed by exploiting vulnerabilities in AI and ML frameworks.
