The HollowGraph malware abuses Microsoft Graph API and a compromised 365 account’s calendar for C&C communication.

The targeted espionage tool hides commands and stolen files inside calendar events while using legitimate Microsoft cloud traffic to evade detection.

Microsoft 365 calendars have become the latest hiding place for espionage malware, with attackers stashing commands and ...

HollowGraph uses Microsoft 365 calendar events dated to 2050 to receive commands and exfiltrate encrypted files through ...

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a ...

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and ...

Key TakeawaysExporting Exchange mailboxes to PST files is useful for backing up emails, legal audits, and when employees leave a company, but it should be well-planned to avoid issues like incomplete ...

Project CAV3RN has adopted a new communication module that hides command-and-control traffic inside Outlook calendar events, marking a significant upgrade to the cyberespionage framework’s efforts to ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Investigators seek a woman with arm tattoos accused of mailbox break-ins and using a stolen bank card at two San Antonio ...

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a CVE, a verify command, and a fix.

WASHINGTON, D.C. — The U.S. Postal Service is making changes to how Americans use its iconic blue mailboxes, from altering how mail is processed after it’s dropped off to reconfiguring where ...