Contribute to AllwaysHyPe/graph-automation development by creating an account on GitHub.

GraphAPIをJavaScriptから呼び出そうとした際に色々と手間取ったので、そのメモです今回はNodeJSのEx ...

前回、ExpressとMSALを使用してGraphAPIを呼び出しましたが、今回はSDKを使用してGraphAPIを呼び ...

前回、ExpressとMSALを使用してGraphAPIを呼び出しましたが、今回はSDKを使用してGraphAPIを呼び ...

前回、ExpressとMSALを使用してGraphAPIを呼び出しましたが、今回はSDKを使用してGraphAPIを呼び ...

A newly identified malware family abuses the Outlook mail service for communication, via the Microsoft Graph API.

以前、MicroSoftGraphAPIをアプリケーション認証で実施する方法を記載しましたが、場合によってはセキュリティ ...

HollowGraph is a newly discovered malware that abuses Microsoft 365 calendar events and the Microsoft Graph API for covert command-and-control communication. Group-IB says it may be linked to Cavern Manticore and shows signs of targeted activity against Israeli entities, using encrypted calendar attachments, DNS tunneling, and Microsoft Entra ID credentials. #HollowGraph...

The threat actor known as Harvester has been attributed to a new Linux version of its GoGra backdoor deployed as part of attacks likely targeting entities in South Asia. "The malware uses the legitimate Microsoft Graph API and Outlook mailboxes as a covert command-and-control (C2) channel, allowing it to bypass traditional perimeter network defenses," the Symantec and Carbon Black Threat Hunter

以前、MicroSoftGraphAPIをアプリケーション認証で実施する方法を記載しましたが、場合によってはセキュリティ ...

Microsoft has extended Windows Server 2022 hotpatching support through October 2027 for Windows Server 2022 Datacenter: Azure Edition systems enrolled in hotpatch updates. This allows monthly security updates without restarts while regular Windows Update, .NET, and other non-Hotpatch updates may still require rebooting, and Microsoft plans broader hotpatch enablement through Microsoft Graph API and Microsoft Intune in May 2026. #WindowsServer2022 #AzureEdition #MicrosoftIntune #MicrosoftGraphAPI

ESET researchers tracked Webworm, a China-aligned APT group that shifted from Asia to Europe in 2025 and expanded its toolkit with Discord-based EchoCreep and Microsoft Graph API-based GraphWorm backdoors. The group also relied on GitHub staging, custom proxy tools, and compromised cloud infrastructure such as an Amazon S3 bucket to support spying, exfiltration, and multi-hop proxying. #Webworm #EchoCreep #GraphWorm #SoftEtherVPN #MicrosoftGraphAPI #Discord #GitHub #AmazonS3

Storm-2949 is stealing sensitive data from Microsoft 365 and Azure production environments by abusing legitimate administration features and social engineering privileged users. Microsoft says the group used compromised Entra ID accounts, Azure RBAC permissions, and cloud management tools to extract secrets, files, and credentials from victim organizations. #Storm-2949 #Microsoft365 #Azure #MicrosoftEntraID #MicrosoftGraphAPI #AzureKeyVault #MicrosoftDefender #ScreenConnect

CL-CRI-1116 campaigns combine SSO-style phishing pages with antidetect browsers and residential proxies to harvest credentials. Attackers use vishing from spoofed VoIP/CNAM to capture credentials and TOTPs, bypass MFA, abuse Microsoft Graph API and SaaS search to collect sensitive files, exfiltrate data via APIs or file-sharing services, and pressure victims with seven-figure ransom demands and SWATting. #CL-CRI-1116 #MicrosoftGraphAPI

Discover how FinalDraft malware exploits Outlook drafts and Microsoft Graph API to evade detection and pose advanced cyber threats.