IoT Botnets Swarm, Cloud Backups Get Ghosted, and SIEM Gets Unbundled

Tools

ClickHouse Acquires ChistaDATA to Push Cybersecurity Capabilities

ClickHouse pivots from data warehousing into a detection and response stack with its acquisition of ChistaDATA. This is a signal that the SIEM market is being unbundled; builders are shipping faster detection pipelines on top of commodity data lakes. If you're optimizing SecOps costs, watch how this architecture impacts your data retention bills.

Nuclei Community Drops New Scanning Templates for Web Vectors

Projectdiscovery just dropped a new set of Nuclei templates targeting active web exposures. If you are looking for high-leverage continuous scanning without writing custom regex, downloading these community updates is the lowest hanging fruit for validating fixes immediately after cutting a release.

News

PumaBot Malware Targets Linux IoT and Enterprise Systems

The IoT attack surface just got weaponized by legacy flaws. Seeing malware like PumaBot specifically learning how to brute force SSH on IoT devices means you can't just set it and forget it on headless Linux boxes. Treat IoT infrastructure as directly exposed to the public internet because botnets definitely are.

Microsoft Azure Security Flaw Allowed SSRF Attacks on Internal Services

Another SSRF vulnerability hits a major cloud provider's tenant infrastructure, proving that metadata services remain a high-value target. Security teams need to stop leaving cloud defaults enabled; blocking local metadata (like 169.254.169.254) should be a hard requirement in your baseline build configurations.

Analysis

Ransomware Campaigns Now Actively Wiping Cloud Backup Infrastructures

Just when defenders tightened up endpoint backups, attackers moved to the source of truth. Abusing API keys or OAuth tokens to trash cloud backups at the identity layer is having a massive blast radius. Stop relying on recycling bins for recovery; actual air-gapped isolation is emerging as the only real safety net.