SSRF Flaw in AI Service, Ransomware's Backup Hunt, and Phishing's Evolution

News

Critical SSRF Flaw Found in Popular AI Service

Server-side request forgery in an AI service is a huge attack surface multiplier. If you're building with or integrating these services, patch immediately or risk having your internal network exposed through your AI stack.

FBI Warns of Sophisticated 'Luna Moth' Callback Phishing Campaign

Callback phishing is evolving beyond simple tech support scams. The Luna Moth group uses it to deploy remote access tools, making initial access for ransomware much more interactive and harder to filter.

Qilin Ransomware Deploys New, More Efficient Linux Encryptor

Ransomware crews keep optimizing their cross-platform tooling. This new Linux encryptor is faster and more targeted, meaning your server estate, especially cloud VMs, needs direct scrutiny.

PumaBot: New Malware Campaign Specifically Targets Linux SSH Servers

This botnet is brute-forcing SSH keys to build a persistent proxy network. It's a direct reminder that basic credential hygiene and key-based authentication are non-negotiable for internet-facing Linux hosts.

Analysis

Ransomware Actors Now Systematically Wiping Cloud Backups

This confirms the playbook: backups are a primary target. Air-gapped or immutable storage isn't optional anymore; it's the baseline for any serious recovery plan.

Tools

Nuclei Templates Add New Scan for Critical SSRF Vulnerability

This is the automation lever. The community is already building detection for the AI SSRF flaw, so you can integrate this scan into your pipeline today to hunt vulnerable instances before attackers do.