Ransomware Wants Your Backups, Qilin Wants Your Linux Boxes, and AI Tools Ship Flaws

News

FBI warns Ransomware Groups are Actively Hunting Cloud Backups

The FBI's warning is a direct signal that attackers are shifting strategies to go after the things we assume are safe. If you treat your offline backups as incident response, you're now a target.

Luna Moth Callback Phishing Campaign Gains FBI Attention

This is pure scalable social engineering: shout loud enough and the CEO will rush to give you access. The callback method bypasses email filters entirely because the conversation happens over the phone.

Qilin Ransomware Deploys New Linux Encryptor

Ransomware gangs aren't leaving money on the table just because you run a heterogeneous environment. Linux builds are clearly the new primary target for these crews.

Critical Supply Chain Flaw Discovered in AI Coding Assistant

AI coding tools are becoming critical infrastructure, making their supply chains a high-leverage target for attackers. If you're relying on AI-generated code, the flaw isn't just in the output--it's in the tooling itself.

Tools

Nuclei Adds New SAP Scanning Templates via PR #10145

If you're running Nuclei for asset discovery, you know that what isn't scanned isn't secured. The added SAP templates mean better visibility into legacy systems that often get ignored until they burn you.

Nuclei Adds AI Coding Assistant Flaw Check via PR #10123

Automating the detection of these third-party tool flaws saves massive amounts of time for engineering teams. This template ensures you can throw the scanner at your environment and know if you're exposed immediately.