Cloud Backups Under Siege & AI Dev Tools Get Owned

News

Ransomware Targeting Cloud Backups Systematically

The advisory details how ransomware groups are now systematically targeting and corrupting cloud backups before encrypting primary data. This forces a complete rethink of recovery strategies; air-gapped or immutable storage is now a baseline requirement.

FBI Issues Guidance on Luna Moth Callback Phishing

The FBI's warning highlights the continued evolution of social engineering, with attackers using legitimate-looking emails to trigger callback requests and gain initial access. This technique bypasses traditional email filtering, requiring updated user awareness training and verification protocols.

Qilin Ransomware Develops New Linux Encryptor

This is a direct signal that ransomware-as-a-service operations are aggressively pursuing hybrid and Linux-based server environments. Defenders running workloads on Linux or VMware must assume they are now primary targets and harden configurations and monitoring accordingly.

Critical Command Injection Flaw Found in AI Coding Assistant

The flaw in the AI assistant allows for potential command injection through crafted code prompts, showing how AI development tools create a new, powerful attack surface. This is a critical lesson for any organization integrating LLMs into their dev toolchains without establishing strict security guardrails.

Novel Golang-Based Malware Loader Emerges in the Wild

The rapid weaponization of this Go-based loader highlights the continued shift toward using modern, performant languages to evade detection. Security tooling must adapt to parse memory-resident, fileless execution patterns common in this class of malware.

Tools

Nuclei Template for Critical SAP NetWeaver Vulnerability Merged

The merge of this new template into the main Nuclei repository automates detection for a critical recently disclosed vulnerability. This is a force multiplier for blue teams, allowing them to scan their entire attack surface for this SAP flaw within minutes of deployment.