Backups Under Attack, SAP RCE Drops, and Qilin Hits Linux

Threat Intel

Ransomware Crews Now Hunt and Destroy Cloud Backups First

Okay, so ransomware crews are no longer playing around with just encryption. They're now actively hunting and destroying your cloud backups before they even bother locking your live data. This is the biggest leverage move we've seen in a while, forcing teams to rethink their 'just restore from backup' playbook entirely.

Vulnerability

SAP NetWeaver RCE Patched, Exploitation Already Underway

A critical RCE flaw in SAP NetWeaver (CVE-2025-31324) was just patched and it's already seeing active exploitation. If you're running SAP, this isn't a 'schedule for next sprint' situation; scan your attack surface with the new Nuclei templates and patch immediately.

Tool

New Nuclei Templates Drop for Critical SAP Vulnerability Scanning

New Nuclei templates just dropped to scan for that critical SAP flaw. This is pure leverage for defenders. If you're not automating your vuln scans against ...

Social Engineering

FBI Warns of Sophisticated 'Luna Moth' Callback Phishing Campaigns

FBI is warning of 'Luna Moth' callback phishing campaigns, which proves that brute force attacks aren't the only game in town. ... the phone, you need to train your people and your filters to catch this stuff.

Malware

Qilin Ransomware Expands Reach with New Linux Encryptor

The Qilin ransomware group just added a Linux encryptor to their arsenal, which is a clear signal that their target list is expanding beyond Windows shops. ... hybrid environments and containers are on the menu now.