Backup Strategies Crack, Linux Gets Hunted, and Phishing Gets Personal

News

FBI Warns of 'Luna Moth' Callback Phishing Campaign

The FBI is flagging a callback phishing campaign where attackers pose as IT support, creating urgency to call a fake helpline. This social engineering tactic is highly effective because it bypasses traditional email filters by getting victims to initiate contact.

Qilin Ransomware Adds Linux Encryptor for Wider Impact

The Qilin ransomware gang now includes a Linux encryptor, expanding their attack surface to target hypervisors and critical infrastructure that runs on Linux. This is a direct threat to enterprises that assume Windows-centric threats don't apply to their servers.

Ransomware Gangs Now Target Cloud Backups First

Reports confirm ransomware operators are now systematically targeting and destroying cloud backups before encryption. Attackers understand that deleting recovery options forces payout, making backup immutability a non-negotiable defense.

Critical Vulnerability Discovered in AI Coding Assistant

A critical flaw found in a popular AI coding assistant highlights the security debt being shipped into production via AI tools. This is a wake-up call to audit the entire AI dev toolchain, as it's becoming a prime attack vector.

Tools

Nuclei Templates Add SAP Vulnerability Scanner

This community-driven contribution to nuclei-templates provides a ready-made scanner for a critical SAP vulnerability. For defenders, it's instant leverage to audit enterprise landscapes without waiting for vendor scans.