Ransomware Hunts Backups, Callback Phishing Endures, and Scanning Automation Expands

News

FBI Flags Callback Phishing Escalation

Callback phishing is hard to detect because it relies on human trust rather than malicious links. The FBI flagging this at scale means it's hitting real targets, so if your org uses support phone flows, audit the handoff chain now.

Qilin Ransomware Adds Linux Encryptor

Qilin adding a Linux encryptor means the blast radius just got wider for shops running cloud workloads or containerized backups on Linux. If your backup server is Linux, verify offline isolation today.

Ransomware Now Targets Cloud Backups First

The playbook is evolving from hit production to hit backups first, then demand ransom from a position of leverage. Immutable backups aren't optional anymore; they're the only floor.

Tools

ProjectDiscovery Nuclei Templates Update

New Nuclei templates for scanning go live, making it easier to automate checks for known misconfigurations and vulnerabilities. If you have a CI pipeline for health checks, you can now spin these up cheaply.

Nuclei Templates Merge Adds New Scanning Coverage

These templates make sense for ops teams validating cloud environments and endpoints. It lowers the cost of staying current on scanning without rolling your own scripts.