Cloud Wipers, Linux Encryptors, and the AI Attack Surface

News

Ransomware Actors Now Erase Cloud Backups

This is a massive shift. Attackers are automating the deletion of cloud backups, making recovery from ransomware nearly impossible. If you're not testing your backup restore process, you're flying blind.

Qilin Ransomware Adds Linux ESXi Encryptor

Qilin's new encryptor specifically targets Linux ESXi servers, the backbone of many virtualized environments. This puts pressure on ops teams to segment and harden their hypervisor infrastructure.

SSRF Flaw Found in AI Service

A server-side request forgery flaw in an AI service highlights a new class of attack surface. Builders shipping AI endpoints need to treat them like any other web app and audit for SSRF.

FBI Warns of Luna Moth Callback Phishing

Callback phishing is making a comeback, using fake invoices to trick victims into calling scammers. This social engineering bypasses many email filters, so user awareness is your last line of defense.

PumaBot Malware Targets Linux Systems via SSH

A new botnet is aggressively brute-forcing weak SSH credentials on Linux. It's a reminder to disable password auth and use keys, or better yet, a bastion host with MFA.

Tools

New Nuclei Templates for PumaBot Campaigns

The community is adding detection templates for the PumaBot malware that targets Linux SSH. If you're running Nuclei, this is a quick way to audit your exposed services.