CISA gives feds 3 days to fix actively exploited Ray RCE bug

Security news digest covering actively exploited vulnerabilities, supply-chain compromise, ransomware, data breaches, credential exposure, espionage, AI-enabled attacks, critical-infrastructure threats, privacy issues, and major defensive updates. Highest-priority items include an actively exploited Ray remote-code-execution vulnerability subject to CISA’s three-day remediation directive, a compromised npm supply chain affecting 444 packages, large-scale Azure tenant data theft claims, extensive Microsoft Patch Tuesday vulnerabilities including one exploited by North Korean actors, and attacks