Microsoft Graph is a technology platform tracked across 11 threat clusters and 14 intelligence report mentions on ThreatCluster. First observed November 18, 2025; most recent activity July 21, 2026.
The Project CAV3RN cyberespionage framework has evolved with the introduction of a new communication module, AzureCommunication.dll, which replaces the previous HTTP/WebSocket component. This module utilizes Outlook…
Group-IB has identified HOLLOWGRAPH, a sophisticated Windows malware that abuses the Microsoft Graph API to covertly exfiltrate files and receive commands through compromised Microsoft 365 calendar events. The malware…
In March 2026, the EvilTokens phishing kit emerged as a significant threat, allowing cybercriminals to bypass multi-factor authentication (MFA) and compromise Microsoft 365 accounts. This Phishing-as-a-Service (PhaaS)…
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
In a recent cybersecurity incident, attackers exploited an exposed Spring Boot Actuator endpoint to harvest credentials from leaked configuration data. They utilized the OAuth2 Resource Owner Password Credentials (ROPC)…
In 2026, the API management market is projected to generate approximately $9.7 billion, making APIs a critical attack surface. A notable incident involved a legacy Stripe API endpoint that was exploited in a…
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
A security vulnerability in Microsoft's Copilot Cowork, part of Microsoft 365, allows attackers to exploit indirect prompt injection to exfiltrate sensitive files without user consent. The AI assistant has high-level…
Microsoft has announced the timeline for the shutdown of Exchange Web Services (EWS) in Microsoft 365 and Exchange Online. EWS will be disabled by default on October 1, 2026, with a complete shutdown scheduled for April…
Thunderbird has released version 145, which includes native support for Microsoft Exchange email through the Exchange Web Services (EWS) protocol. This update eliminates the need for third-party add-ons, allowing for…