Back to Feed
Threat IntelligenceAug 21, 2026

In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug

Multiple cyber threats emerge: Ray vulnerability exploited, GitHub AI bug denial, T-Mobile cuts cable to stop hackers.

This week's security news roundup covers several significant incidents. CISA warns of active exploitation of the Ray vulnerability (CVE-2025-62593), with the RondoDox botnet leveraging it. GitHub clarified that an AI tool found a vulnerability in human-authored code, not AI-generated code. Threema faced DDoS attacks, while the Evooo1Bot Linux botnet targets internet-facing devices. T-Mobile physically cut a router cable to thwart Chinese state-sponsored hackers Salt Typhoon, and Medusa ransomware is exploiting GoAnywhere and BeyondTrust vulnerabilities.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Ray-Project Ray?

Get an email when a new story names Ray-Project Ray, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

This week's incidents share a common thread: attackers are aggressively targeting known, unpatched vulnerabilities in widely-used platforms such as Ray (CVE-2025-62593), GoAnywhere, and BeyondTrust, while botnets continue to sweep the internet for exposed devices. T-Mobile's drastic step of physically cutting a router cable to stop Salt Typhoon underscores how severe the consequences of unmitigated intrusions can be — and how organizations may be forced into disruptive remediation when earlier controls fail. The Medusa ransomware group's exploitation of multiple CVEs simultaneously illustrates that threat actors chain vulnerabilities quickly once they are publicly disclosed. Without rapid patch cycles and continuous exposure monitoring, organizations remain sitting targets for both state-sponsored actors and opportunistic criminal groups.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • cve — CVE-2025-62593
  • malware — RondoDox
  • malware — Evooo1Bot
  • malware — Medusa ransomware

Entities

Ray-Project Ray (product)GitHub Actions (product)GitHub Copilot (product)Threema (product)GoAnywhere (product)BeyondTrust (product)