MEDIUMPhishing
Global

FBI warns of Kali365 phishing kit that breaks into Microsoft 365 accounts – no password required

·Source: Graham Cluley

Updated:

Executive Summary

So, you've enabled multi-factor authentication. You've taught your staff never to type their passwords into dodgy-looking login pages. Surely your Microsoft 365 accounts are safe now? Well, think again. Read more in my article on the Hot for Security blog.

Analysis

So, you've enabled multi-factor authentication. You've taught your staff never to type their passwords into dodgy-looking login pages. Surely your Microsoft 365 accounts are safe now? Well, think again. Read more in my article on the Hot for Security blog.
Source Attribution

Originally published by Graham Cluley on May 26, 2026.

Related Threats

MEDIUMPhishing

Chinese Phishing Service Scams Thousands of FIFA World Cup Fans

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/nist-rebrands-ai-consortium-ditches-safety-from-name-image_small-8-a-31815.jpg" align=right hspace=4><b>Researchers estimate losses ranging from hundreds of millions to billions</b><br>A Chinese-language phishing-as-a-service platform scammed between $470 million to $1 billion from soccer fans ahead of the 2026 FIFA World Cup star

Bank Info Security
MEDIUMPhishing

MokN Raises $15 Million for Phish-Back Platform

MokN's platform deploys realistic decoy access points to lure attackers into revealing compromised credentials, enabling organizations to respond before abuse occurs. The post MokN Raises $15 Million for Phish-Back Platform appeared first on SecurityWeek .

SecurityWeek
CRITICALPhishing

XCharge C6

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-08.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device.</strong></p> <p>The following versions of XCharge C6 are affected:</p> <ul> <li>C6</li> </ul

CVE-2026-9037CVE-2026-9038
CISA Advisories