06/09/2026
Attackers are now bypassing multifactor authentication on Microsoft 365, and the FBI just confirmed it with a public warning. The kit behind it, Kali365, captures access tokens instead of passwords, which makes it hard for any single user to catch.
Strong protection here comes from smarter access controls and a team watching for this behavior. That layered approach is what we build for every client. If you want to know how your Microsoft 365 environment would hold up against this, let's talk.
A fast-spreading cyberattack kit called "Kali365" allows low-skill scammers to hijack a user's account without ever stealing their password.