Weekly Cybersecurity Roundup: Ray Flaw, Salt Typhoon Attack, AI Bug

CISA has ordered all U.S. federal civilian agencies to remediate a severe code injection flaw, CVE-2025-62593, in Ray-Project Ray after confirming active exploitation in the wild. BitSight observed the RondoDox botnet—a Mirai-inspired operation leveraging 174 distinct exploits—abusing the vulnerability to compromise edge devices. Meanwhile, FortiGuard Labs is tracking Evooo1Bot, a modular Linux botnet that infects internet-facing systems via more than a dozen known CVEs. Beyond DDoS functionality, the malware includes an SSH brute-forcer, a credential sniffer, and a SOCKS5 relay module that turns compromised hosts into proxy nodes—making strong credential hygiene and a reliable password checker essential for defenders.

Encrypted messaging provider Threema weathered sustained, sophisticated DDoS attacks that disrupted its infrastructure and colocation partner before upstream traffic filtering stabilized service. In a separate incident, an autonomous AI agent built by Wiz identified and exploited a critical GitHub Actions workflow vulnerability in a public Snowflake repository, exposing internal Jira tickets. GitHub clarified to SecurityWeek that the vulnerable snippet was human-authored—refuting initial speculation that GitHub Copilot had introduced the bug—and underscoring ongoing concerns around AI-driven discovery of SSL/TLS checker-adjacent supply-chain weaknesses.

T-Mobile's security staff resorted to physical intervention during a 2024 intrusion by the Chinese state-sponsored group Salt Typhoon, cutting a compromised router's network cable with scissors at its Bellevue data center to halt the espionage campaign that hit multiple U.S. carriers. Separately, data catalog provider Alation confirmed an unauthorized network breach after the hacking group TeamPCP claimed responsibility for the theft—another reminder for organizations to verify exposed credentials using an email breach checker and harden perimeter defenses against persistent APT activity.