Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

This collection of headlines highlights a surge of high-impact threats and disclosed vulnerabilities: an exposed delivery server revealed an AI-assisted phishing toolkit delivering WebDAV-based infostealers; HollowGraph espionage malware is abusing Microsoft 365 calendar events (dated 2050) for C2 and data exfiltration; multiple critical product flaws were disclosed (including nginx and 7‑Zip code-execution/overflow bugs and a high‑severity SharePoint RCE added to CISA KEV); OpenSSL denial-of-service (HollowByte) and SonicWall SMA zero-days were observed in the wild. It also documents growing,