Ransomware Hunts Linux Backups, AI Dev Tool Supply Chains Attack, SAP Scans Drop

News

FBI Warns of Luna Moth Callback Phishing Campaign

The FBI warns of a sophisticated callback phishing campaign where attackers impersonate help desks to steal credentials and deploy ransomware. The multi-step social engineering makes it harder for traditional email filters to catch and easier for employees to fall for. This is a direct threat to initial access for any business with a help desk or support line.

Qilin Ransomware Adds Linux Encryptor

Qilin ransomware now has a working Linux encryptor, meaning hybrid environments with ESXi, NAS, or Linux servers are in the crosshairs. Attackers are explicitly targeting the backup and recovery layer before going after production systems. This move signals a shift from just encrypting to strategically disabling business continuity.

Critical RCE Flaw Found in AI Coding Assistant

A critical flaw in a popular AI coding assistant allows attackers to execute malicious code through poisoned repository context. The vulnerability highlights how AI tools can become a direct pipeline for supply chain attacks when they process untrusted data. It's a warning to audit the security of every tool in your development chain.

Ransomware Crews Now Target Cloud Backups as Priority

Ransomware groups are systematically targeting cloud backups before launching the main encryption payload. This is a fundamental change in the playbook: they're no longer just locking you out, they're ensuring you have no clean recovery path. Defending the backup infrastructure is now a primary security objective, not an afterthought.

Tools

Nuclei Template for SAP NetWeaver Zero-Day (CVE-2025-31324)

Projectdiscovery merged a new Nuclei template to automatically detect the critical SAP NetWeaver zero-day (CVE-2025-31324). If you run SAP in your environment, running this scan is a must-do before attackers weaponize it further. This is the fastest way to shift from awareness to action.

Automated Scanning for SAP NetWeaver Zero-Day

Projectdiscovery added a new Nuclei template to scan for the critical SAP NetWeaver flaw (CVE-2025-31324). This gives defenders a direct, automated way to check exposure without waiting for vendor patches. It's about moving from 'aware of the bug' to 'knows our status' in minutes.