Zoom CISO: AI as Security Enabler, Not Role-Replacer

The feed highlights multiple high-impact active threats and broad systemic risks: the FBI‑flagged Kali365 phishing‑as‑a‑service has expanded from Microsoft 365 to AWS, Okta and Russian platforms using device‑code phishing; DriveSurge’s malicious TDS is hijacking thousands of trusted sites to deliver ClickFix/FakeUpdate malware; an active exploit against Palo Alto PAN‑OS GlobalProtect (auth bypass) is being used in the wild and requires immediate patching. Other major incidents include the Megalodon campaign that injected malicious commits into thousands of GitHub repos and a confirmed GitHub/4