Dick O'Brien from Symantec Threat Hunter team is discussing their research on “Graph: Growing number of threats leveraging Microsoft API.” The team observed an increasing number of threats that have begun to leverage the Microsoft Graph API, usually to facilitate communications with command-and-control (C&C) infrastructure hosted on Microsoft cloud services.
The research states "the technique was most recently used in an attack against an organization in Ukraine, where a previously undocumented piece of malware used the Graph API to leverage Microsoft OneDrive for C&C purposes."
The research can be found here:
FBI initiates router revolution.
An AI arms race.
It’s always DNS, but that may just be FUD.
Phishing threats unleashed.
DOJ strikes justice.
Encore: Graham Cluley: Have to be able to communicate to everybody. [Media] [Career Notes]
Ransomware is coming. [Research Saturday]
Imitation game: LastPass vs LassPass.
Volt Typhoon’s stealthy threat to US critical infrastructure.
Taking a bite out of Apple.
Cracking down on spyware.
A serious breach showdown.
Encore: Bilyana Lilly: Turn challenges into opportunities. [Policy] [Career Notes]
Weathering the internet storm. [Research Saturday]
A digital leaker gets 40 years behind bars.
Defending America against China's ominous onslaught.
VPN compromise causes concerns.
A Typhoon counter.
Seeking dismissal of SEC allegations.
Rashmi Bharathan: Connecting is important. [Auditor] [Career Notes]
Create your
podcast in
minutes
It is Free
The WAN Show
Cyber Security Headlines
gm! crypto
Cybersecurity Today
Techmeme Ride Home