THE SecurityWeek news roundup covers significant developments in cybersecurity, focusing on various vulnerabilities and incidents:
1. **CISA and Ray Vulnerability**: CISA alerts federal agencies about a critical code injection vulnerability in Ray-Project Ray, actively exploited by threat actors.
2. **GitHub Vulnerability**: A bug found by Wiz's AI tool was confirmed as a human error, not AI-generated, leading to unauthorized access.
3. **Threema DDoS Attack**: Encrypted messaging service Threema faced severe disruptions due to DDoS attacks, prompting immediate defensive measures.
4. **Evooo1Bot**: A new multi-functional Linux botnet that exploits several vulnerabilities to attack internet-facing devices.
5. **T-Mobile Incident**: T-Mobile cut a router cable to halt a Chinese hacking group's ongoing intrusion.
6. **Alation Data Theft**: The hacking group TeamPCP claimed a breach resulting in the theft of 73 GB of sensitive data from Alation.
7. **Sakura Internet Breach**: A severe data breach at Sakura Internet affected over 1 million user records.
8. **Medusa Ransomware**: Targets vulnerabilities in Fortra GoAnywhere and BeyondTrust, impacting over 500 organizations.
9. **Zombie Card Attack**: Researchers demonstrated an attack that allows expired Visa cards to be used for payments by exploiting communication weaknesses.
10. **Crypto4A Certification**: First company globally to achieve FIPS 140-3 Level 3 validation for post-quantum hardware.