New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

Multiple active threats and high-impact incidents reported: HollowGraph malware leverages Microsoft Graph (calendar entries in Microsoft 365 mailboxes) as a stealthy C2 and exfiltration channel; a critical ServiceNow AI Platform remote code execution vulnerability (CVE-2026-6875) is now being exploited in the wild; Hugging Face disclosed a breach via an autonomous AI agent leading to exfiltration of internal datasets and credentials. Additional coverage includes exploited and patched RCEs (7-Zip, WordPress “wp2shell”), a surge in ACR Stealer activity targeting enterprise credentials/tokens, an