This week’s roundup covers active exploitation of the Ray vulnerability, a GitHub Actions flaw discovered by a Wiz autonomous agent, sustained DDoS pressure on Threema, and new botnet activity from Evooo1Bot. It also highlights major incidents involving Salt Typhoon, TeamPCP, Sakura Internet, and Medusa ransomware, alongside a notable post-quantum hardware certification from Crypto4A. #Ray-Project #RondoDox #GitHub #Wiz #Threema #Evooo1Bot #SaltTyphoon #TeamPCP #SakuraInternet #Medusa #Crypto4A
Keypoints
- CISA ordered federal agencies to fix the actively exploited Ray vulnerability.
- Wiz’s autonomous agent found a GitHub Actions flaw, but GitHub said the code was human-written.
- Threema faced sustained DDoS attacks and used upstream filtering to restore stability.
- FortiGuard Labs identified Evooo1Bot, a modular Linux botnet with proxy, brute-force, and credential-sniffing tools.
- Medusa ransomware affiliates are exploiting GoAnywhere and BeyondTrust flaws against critical infrastructure.