AIThe Hacker Newsabout 2 hours ago
CISA Adds Actively Exploited Ray Flaw to KEV Catalog
1 min read
CISA added CVE-2025-62593 (CVSS 9.4) to its KEV catalog, citing active exploitation. The Ray flaw enables browser-based remote code execution via DNS rebinding in Firefox and Safari. Fixed in version 2.52.0, it also powers the RondoDox botnet and ShadowRay 2.0 crypto-mining campaign.
Level
Hype check
Tap to vote and see what everyone thinks.
