The FBI warned in May 2026 that Kali365, a phishing-as-a-service platform first seen in April, is being used to compromise Microsoft 365 accounts by abusing OAuth device-code authentication and stealing access tokens for Outlook, Teams, OneDrive, and related cloud services.
That sentence is the...