Backups Are Dead Without Isolation & AI Tools Are the New Wild West

News

FBI warns of large-scale Luna Moth callback phishing campaign

The FBI is warning about a callback phishing campaign by Luna Moth that's now targeting corporations. It's a classic social engineering play that bypasses email filters by having victims call the attackers, and it's scaling fast.

Qilin ransomware expands playbook with new Linux encryptor

Ransomware group Qilin has added a Linux encryptor to its toolkit, expanding its attack surface to servers and hypervisors. This is a direct move to cripple backups and critical infrastructure that most orgs assume are safe.

Ransomware crews now hunting cloud backups before encryption

Ransomware operators are now actively targeting cloud backup services before encrypting primary systems. This confirms the playbook: isolated, immutable backups are no longer optional; they're the only real recovery plan.

Critical vulnerability discovered in AI coding assistant

A critical flaw has been found in an AI coding assistant, creating a new attack vector in the software supply chain. This is the noise we expected: AI dev tools are shipping security debt as fast as features.

Tools

Nuclei template for SAP RECON vulnerability scanning added

A new nuclei template for SAP RECON vulnerability scanning has been merged, giving defenders a quick way to check their exposure. Automation wins again: if you run SAP, you need to scan this yesterday.

Nuclei templates update with improved web app detection logic

Another nuclei template update brings improved detection logic for a range of web app vulnerabilities. The community-driven scanning automation engine keeps getting sharper, making it harder for small teams to ignore.