Cybersecurity · 19 Aug 2026
CISA orders federal agencies to patch a critical flaw in the Ray AI framework
The code-injection vulnerability, actively exploited via a browser-based attack, carries a 9.4 CVSS score and a three-day federal remediation deadline.