IT News Roundup: Ray and MLflow Exploitation, GitLab Critical Patch, RingCentral Breach - August 19, 2026

The past day in IT news was dominated by actively exploited vulnerabilities in open-source AI and machine learning tooling, alongside a critical out-of-cycle patch for self-managed GitLab deployments. CISA added a browser-based remote code execution flaw in the Ray distributed computing framework to its Known Exploited Vulnerabilities catalog, while researchers documented live exploitation of an MLflow SSRF bug used to harvest cloud credentials. Elsewhere, ShinyHunters claimed a RingCentral breach affecting 1.6 million accounts, Clop was linked to a purpose-built web shell for PTC Windchill data theft, and Google Cloud published a post-quantum cryptography roadmap with its first major milestone set for the end of 2027.

CISA Adds Actively Exploited Ray Flaw to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical vulnerability in Ray, an open-source Python-native distributed computing framework used to scale AI and machine learning workloads, to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation.

The flaw, tracked as CVE-2025-62593 with a CVSS score of 9.4, allows remote code execution through browsers such as Mozilla Firefox and Apple Safari via a DNS rebinding attack. Ray maintainers have previously warned that the project's decision not to implement authentication on critical endpoints like /api/jobs has repeatedly led to severe vulnerabilities.

The addition to KEV is a signal for organizations running self-hosted ML infrastructure: unauthenticated Ray dashboards exposed to the internet should be treated as compromised until verified otherwise. Source: The Hacker News

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials

Two critical vulnerabilities in open-source tooling are under active scanning and exploitation, according to independent reports from watchTowr and VulnCheck. The more significant affects MLflow, an open-source AI platform: CVE-2026-64849 lets attackers abuse a flaw in the model-registry webhooks to proxy requests through affected systems and reach internal services.

"Attackers are exploiting [CVE-2026-64849] to reach cloud metadata services directly, and exfiltrating cloud credentials and secrets," watchTowr said, noting it detected bad actors indiscriminately scanning for exposed MLflow instances within hours of the CVE being assigned on August 17. A second flaw in FUXA, an open-source web-based SCADA/HMI package for operational technology environments, is also seeing exploitation attempts.

The incident underscores a recurring risk pattern: developer and ML tooling left publicly exposed with default configurations becomes a direct path to cloud credential theft. Source: The Hacker News

GitLab Ships Critical Out-of-Cycle Patch for GraphQL Flaw

GitLab released security updates addressing a critical vulnerability in its Community Edition and Enterprise Edition software that could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, carries a CVSS score of 9.4.

The patch release arrived on August 17 outside GitLab's usual twice-monthly schedule, five days after a routine update that contained no critical issues. Fixes are available in versions 19.2.4, 19.1.6, 19.0.8, and 18.11.11.

Only self-managed installations need to act; GitLab.com SaaS customers are already covered. Homelab and on-premises operators running older versions should prioritize the upgrade. Source: The Hacker News

ShinyHunters Claims 1.6 Million Account RingCentral Breach

The ShinyHunters extortion group has claimed to have stolen personal information from 1.6 million RingCentral accounts, according to the Have I Been Pwned breach notification service. RingCentral is a cloud-based collaboration and communication platform used by more than 600,000 businesses for calling, messaging, and voicemail.

The company disclosed the incident on July 28, attributing the compromise to what it described as a "sophisticated social engineering campaign." RingCentral said no new unauthorized activity has been observed since remediation efforts were completed and that affected customers are being contacted directly. Source: BleepingComputer

Clop Linked to Custom Web Shell for PTC Windchill Data Theft

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files. Cybersecurity firm ReliaQuest analyzed the implant after it is believed to have been deployed in recent data theft attacks exploiting CVE-2026-12569, a critical remote code execution vulnerability affecting PTC Windchill.

ReliaQuest says the implant was not a generic web shell repurposed for the attacks but was built with detailed knowledge of Windchill's internal APIs, database schema, keystore, and file-vault structure. "This appears to be an application-specific evolution of Clop's established mass-exploitation playbook," the company said.

Separately, Philips and GE are investigating Clop ransomware data theft claims against their operations. Source: BleepingComputer

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wiz disclosed a workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials.

The flaw lived in the jira_issue.yml workflow, which ran when a public issue was opened and exposed JIRA_BASE_URL, JIRA_USER_EMAIL, and JIRA_API_TOKEN to the same step. The workflow inserted attacker-controlled issue title and body values directly into a shell run block; a guard check referenced a pull request property that does not exist on issue events, so it evaluated to an empty string and failed to stop ordinary issues from reaching the job.

The weakness was confined to the repository's CI/CD automation, with no affected Snowflake Connector for .NET release identified. Source: The Hacker News

Google Cloud Sets 2027 Post-Quantum Milestone

Google Cloud has published a post-quantum cryptography roadmap dividing its migration work into three risk domains drawn from the company's own quantum threat model, with interim deadlines for each.

Mitigating store-now-decrypt-later (SNDL) risk, where data harvested today could be decrypted by a future quantum computer, is targeted for completion by the end of 2027. Hardening digital signatures against forgery and rebuilding key management for cryptographic agility both run to the end of 2028, ahead of the 2029 date Google set alongside Cloudflare and Microsoft. Source: Infosecurity Magazine

Windows Server 2022 Reaches End of Mainstream Support in October

Microsoft has reminded IT administrators that Windows Server 2022 reaches end of mainstream support on October 13, 2026. The October 2026 security update will be the last mainstream support update for the version.

After that date, Windows Server 2022 transitions to extended support, which includes security updates at no additional cost and continues through October 14, 2031. Organizations still planning upgrades from older server releases have roughly six weeks of mainstream coverage remaining before the transition. Source: BleepingComputer