FBI: Kali365 Phishing Kit is Targeting Microsoft 365 Accounts

The US Federal Bureau of Investigation (FBI) has warned that a new phishing-as-a-service (PhaaS) platform called “Kali365” is targeting OAuth tokens to gain direct access to users’ Microsoft 365 accounts without stealing credentials or multifactor authentication codes. “Through the Kali365 platform subscription, cyber threat actors can capture ‘OAuth’ tokens and gain persistent access to targeted individuals/entities' Microsoft 365 environments,” the Bureau says.

Salt Cloud Connect for Github

Your developers are shipping agents, MCP servers, and APIs faster than security can see them. GitHub Connect changes that. Salt scans your repositories and surfaces every agent, MCP server, and API hiding in your codebase, then maps them into the Agentic Security Graph. You see the agentic infrastructure forming in code, before it ever reaches production. No more waiting for runtime to find out what shipped. No more blind spots between dev and prod. Govern what's being built from day one.

How AI Just Killed Expensive Enterprise Software

AI is disrupting the enterprise software market. James Rees built a fully-functional GRC tool in just two weeks using Codex. No development team needed. No million-pound licensing fee, just AI and subject matter expertise. If a CISO can build what competitors charge hundreds of thousands for in a couple of weeks, what happens to the vendor market? As large language models like Daybreak and Mythos evolve, this problem gets worse for SaaS companies.

OWASP Top 10 2025: What's Changed?

For years, the OWASP Top 10 has operated as the gold standard for highlighting the most critical web application security risks. The 2025 edition arrives at a time when application environments are becoming increasingly complex. Cloud-native architectures, software supply chain risks, APIs and AI-assisted development are all changing the way applications are built and secured.

Is platform engineering just DevOps with a new name, or is something operationally different happening?

Platform engineering is the practice of building and maintaining a centralized internal developer platform (IDP), a curated set of tools, workflows, and self-service capabilities that application teams consume rather than configure on their own. It's a structural response to how DevOps practices evolve at scale, particularly when "you build it, you run it" introduces more cognitive load than individual development teams can sustainably manage.

3 Principles to Safely Scale Agentic AI

AI is moving from experimentation to execution. What started as copilots is quickly evolving into autonomous AI agents that can make decisions, execute tasks, and operate across enterprise environments. As organizations accelerate adoption of agentic AI, they’re expanding their attack surface in ways traditional security models weren’t built to handle.

How Modern DLP Enables AI Adoption Without Slowing Down the Business

Organizations are not choosing between AI adoption and data security. Rather, they are discovering, often after the fact, that these two priorities are pulling in opposite directions. The engineering team has been using GitHub Copilot for six months. Finance is running variance analysis through ChatGPT. Legal is pasting contract language into Gemini for redlining. According to Cyberhaven Labs research, 39.7% of the data employees share with AI tools is sensitive.