The Disruption Playbook: Offense Tooling Outpaces Defense

Threat Intel

Ransomware Now Targets Cloud Backups as Primary Objective

Cloud storage buckets with misconfigurations that left backups exposed are getting hit with ransomware specifically designed to wipe your recovery options. This isn't a side effect; it's the main play to neutralize your disaster recovery plan.

Tools & Templates

Nuclei Template Merge: SAP NetWeaver Visual Composer Flaw

This Nuclei template PR adds detection for the critical SAP NetWeaver remote code execution vulnerability. If you're running SAP in prod and haven't patched, running this scan is the fastest way to gauge your actual risk.

Botnet Activity

InfectedSlinder Botnet Growth Expands to Routers and NVRs

A new strain of the 'InfectedSlinder' botnet is rapidly commoditizing known router and NVR exploits to spin up brute force DDoS capacity. It's a reminder that if your edge devices are unpatched, they are likely already working for someone else.

Vulnerability

IBM AIX Systems Hit with Under-Exploited RCE Vulnerability

IBM AIX systems are getting hit with a remote code execution flaw that many orgs might have deprioritized because they think their mainframes are air-gapped. If it's networked, check your CVE list.