FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

Multiple active and high-impact security incidents reported: the FBI warns of Kali365 phishing-as-a-service abusing OAuth device code flow to steal Microsoft 365 session tokens and bypass MFA; Ghost CMS is being exploited via a critical SQL injection (CVE-2026-26980) to deliver ClickFix attack chains; Laravel Lang Composer packages were hijacked to distribute credential-stealing malware; Trend Micro disclosed an Apex One zero-day being exploited in the wild and Drupal is seeing active targeting of a critical SQL injection. Other notable items include Ubiquiti patches for maximum-severity UniFi