Ransomware Wipers, Linux Bots, and AI Flaws

News

FBI warns of Luna Moth callback phishing

Luna Moth's callback phishing is a direct threat to help desk workflows. If your org relies on phone verification, this FBI warning is a must-read.

Ransomware actors now erase cloud backups

Ransomware groups are now deleting cloud backups during attacks, forcing a move to immutable, air-gapped solutions. Expect backup vendors to get more attention.

Qilin ransomware adds Linux ESXi encryptor

Qilin's new ESXi encryptor targets Linux virtualization at scale. If you're running VMware or similar, patch and isolate management planes immediately.

Pumabot malware campaign targets Linux via SSH

Pumabot is a new SSH-based malware targeting Linux servers. It underscores the need for strict SSH key management and network segmentation.

Tools

Nuclei templates expand with new SSRF detections

This update expands detection for SSRF and web vulnerabilities in cloud and API services. Useful for builders automating security scans.

Analysis

Researchers identify SSRF flaw in AI service

A critical SSRF flaw was found in a popular AI service, showing how machine learning infrastructure remains a soft target. Audit your AI proxies and gateways.