Callback Phishing Resurges, Ransomware Hunts Backups & Linux, and AI Tools Ship Flaws

News

FBI Warns of 'Luna Moth' Callback Phishing Attacks

The FBI's latest advisory details 'Luna Moth' callback phishing, a campaign where attackers mimic IT support to extract credentials and deploy ransomware. It's a human-vector that bypasses traditional email filters entirely, targeting your help desk's weakest links.

Qilin Ransomware Expands to Attack Linux Environments

The Qilin ransomware group has added a Linux encryptor to its arsenal, expanding its attack surface to ESXi hypervisors and critical servers. If you're running mixed environments, this is a direct threat to your backup and recovery strategy.

Ransomware Campaigns Now Explicitly Target Cloud Backups

Attackers are now systematically targeting cloud backup services like Veeam, aiming to destroy the last line of defense before deploying ransomware. Your backup strategy's 'air-gap' might be a shared credential away from being useless.

Tools

New Nuclei Templates for Cloud and Vuln Scanning

Recent Nuclei template merges expand automated scanning for newly discovered vulnerabilities and misconfigurations. This is about leverage, automating the detection of misconfigured S3 buckets and critical RCE flaws before attackers do.