dns tunneling

Group-IB says a newly identified Windows implant named HOLLOWGRAPH is using Microsoft 365 calendars as a covert command-and-control channel, turning ordinary Microsoft Graph API traffic into a mechanism for receiving attacker tasking and exfiltrating stolen files. The technique matters because...

Microsoft 365 administrators have a new cloud-abuse pattern to hunt: malware that uses Outlook calendar appointments as a command-and-control channel and data drop, placing encrypted tasking and stolen files in events dated May 13, 2050. The malware, dubbed HOLLOWGRAPH by Group-IB, communicates...

For Windows 11 WSL 2 users on corporate VPNs, first install KB5074109 if the failure began with the KB5067036 mirrored-networking regression, then enable DNS tunneling and approve the WSL networking mode that passes your organization’s internal DNS and service tests. The January update fixes a...

For years WSL made Linux on Windows feel like a magic trick — seamless file access, native tooling, and the ability to run servers, compilers, and development stacks without dual-booting — but networking has long been the weakest link; recent additions in Windows 11 (notably mirrored networking...