Backups Are the New Front Line, and Nobody Patched the Router

News

Qilin Ransomware Adds Dedicated Linux Encryptor Targeting ESXi

Ransomware gangs keep expanding their platform coverage because most orgs still treat Linux and hypervisor hosts as an afterthought in their EDR rollout. If your ESXi hosts aren't covered by the same detection stack as your Windows fleet, you're basically leaving a side door open.

Critical Flaw Found in Popular AI Coding Assistant Extension

Turns out the tool everyone's using to ship code faster can also ship a vulnerability straight into your repo without anyone reviewing it. Teams leaning hard into AI-assisted dev need to treat these extensions like any other third-party dependency, not a trusted teammate.

New Golang-Based Malware Loader Spotted Evading EDR

Go keeps winning with malware authors because static binaries and cross-compilation make evasion and distribution dead simple. If your detection rules are still tuned mostly for .NET and C++ payloads, this is a gap worth closing now.

FBI Warns of Luna Moth's Callback Phishing Campaign Hitting Law Firms

No malware, no exploit, just a fake IT helpdesk call that gets an employee to install remote access software voluntarily. This is the kind of attack that no amount of patching stops, it's a training and process problem, full stop.

Tools

New Nuclei Templates for Recently Disclosed Router Firmware CVEs

Another batch of scanning templates lands right as botnet operators are actively hunting the same routers and NVRs, so this is a race against attackers who move faster than most patch cycles. Pull these into your CI scan pipeline today, not next sprint.