> TritonInfoSec News
Home / Jul 21, 2026 / Story
0
#10 BleepingComputer general July 20, 2026 at 17:43 UTC

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

By Bill Toulas

AI Summary

Group-IB researchers identified HollowGraph, an espionage implant that abuses the Microsoft Graph API to use compromised Microsoft 365 calendar events — dated to year 2050 — as a covert C2 channel, smuggling commands and exfiltrated files as calendar attachments to blend into legitimate M365 traffic. The technique evades network detection tools that whitelist Microsoft Graph API communications, posing a detection challenge for enterprise defenders.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 75.0/100

# More from July 21

  1. 1
    SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access The Hacker News
  2. 2
    Critical ServiceNow code execution flaw now exploited in attacks BleepingComputer
  3. 3
    'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover Dark Reading
  4. 4
    Hugging Face discloses breach linked to autonomous AI agent BleepingComputer
  5. 5
    Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine The Hacker News
  6. 6
    UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware The Hacker News
  7. 7
    FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware The Hacker News
  8. 8
    SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines The Hacker News
  9. 9
    Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution The Hacker News