July 19, 2026
- APT41's "Calendarwalk" uses Google Calendar events as its C2 channel, reading operator commands from calendar entries to blend in with legitimate cloud traffic (via @0xpwnie). · Threat Activity
in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation