Archive

The report says a RondoDox botnet campaign was using a Ray-related flaw before it had an assigned CVE, which means defenders may have been exposed before normal tracking and patch workflows could catch up. The practical issue is not just the vulnerability itself but the lag between real-world exploitation and formal identification, which can leave asset owners and incident responders behind the threat curve.