The Era of the Wipe-Proof Backup is Here: AI Exploits, Linux Bots, and Deepfake Vishing

[Action]

Ransomware Actors Are Now Wiping Cloud Backups at Scale

This is the nastiest tactical shift. If ransomware hits now, the off-site, immutable backup is the only real recovery path, not the cloud snapshots.

[Offense]

New Nuclei Template Drops for AI Service SSRF Flaw

A new Nuclei template for detecting a specific SSRF vulnerability in Langflow went live. For the blue team, it's a quick scan; for the attacker, it's a ready-made exploit.

Researchers Pinpoint SSRF Vulnerability in AI Service Architecture

Patching AI deployment tools is critical. This flaw allows attackers to pivot into internal services, which is often more valuable than the initial server.

[Threat Intel]

Qilin Ransomware Builds a Linux Encryptor to Target ESXi VMs

Defense-in-depth for Linux is no longer optional. Expect the encryption speed and feature set to close the gap with Windows payloads very soon.

[Malware]

Pumabot Malware: A Resilient SSH Botnet Targets Linux Infrastructure

SSH-based botnets are proving difficult to dismantle. Developers should enforce key-based auth and rate-limit port 22 as a baseline.