TrickBot Ditches HTTP for DNS Tunneling in Latest Variant

A broad set of active threats and systemic risks were reported: a new TrickBot variant moved C2 to DNS tunneling, HollowGraph abused Microsoft 365 calendars/Graph API for covert C2, and multiple malware campaigns (ransomware, crypters, macOS stealers, trojans) continue to evolve evasion techniques. Privilege/escalation issues were highlighted by an Ubuntu snap‑confine race condition allowing local root, and eleven Microsoft‑signed UEFI shims that can bypass Secure Boot. Governments and vendors are responding: CISA issued urgent patching for actively exploited Fortinet flaws and Microsoft fixed