Kali365 Warning: How This Microsoft 365 Phishing Kit Bypasses MFA and How To Protect Your Business
The FBI warned about Kali365, a phishing-as-a-service kit that abuses Microsoft 365 device-code sign-ins to steal OAuth tokens. Here is what Outlook and Microsoft 365 users should watch for and what businesses should lock down first.