microsoft-365-security

Preview image for a blog post

Jalisco & OmegaLord: Deep Dive into Advanced Microsoft 365 Phishing Tactics via Device Code Flow and OAuth Abuse

Jalisco and OmegaLord phishing kits exploit Microsoft 365 device code flows and OAuth to bypass MFA, gain persistent access, and compromise accounts.
Preview image for a blog post

FBI Warns: Kali365 Phishing Kit Exploits M365 OAuth Tokens – Unpacking the Evolving PaaS Threat

FBI warns of Kali365 phishing kit hijacking Microsoft 365 OAuth tokens, enabling persistent access and bypassing MFA. Learn defensive strategies.
Preview image for a blog post

FBI Warns: Kali365 Phishing Kit Exploits Microsoft 365 OAuth for Persistent Access

FBI warns of Kali365, a fast-growing phishing kit abusing Microsoft 365 OAuth to gain persistent access, posing a severe threat.