The FBI has put out a warning about Kali365 and the spike in device code phishing attacks earlier this week:
Through the Kali365 platform subscription, cyber threat actors can capture “OAuth” tokens and gain persistent access to targeted individuals/entities’ Microsoft 365 environments. Kali365 lowers the barrier of entry, providing less-technical attackers access to AI-generated phishing lures, automated campaign templates, real-time targeted individual/entity tracking dashboards, and OAuth token capture capabilities.
But the deeper story is why this class of attack is so hard to catch. There’s no malicious link, no spoofed login page — just a legitimate OAuth flow handing attackers a valid token, bypassing everything traditional security is trained to flag.
Gidi Cohen, CEO & Co-founder, Bonfy.AI had this comment:
“The FBI’s warning is well-placed, and the recommended mitigations — conditional access policies, blocking device code flows — are the right first response. But they address the front door.
The harder question is what happens once an attacker is already inside a legitimate session. When a token is stolen, the attacker isn’t a stranger to the system anymore. They’re operating with valid credentials through authorized pathways. Traditional controls see a clean session. They don’t see intent.
That gap gets wider as AI enters the picture. Copilots and agents connected to M365 mean a compromised session isn’t just access to stored data — it’s a potential entry point into ongoing AI workflows, retrieval pipelines, and generated outputs that can surface sensitive information in ways that are much harder to detect.
The industry conversation tends to stop at authentication. It needs to extend to the data layer — what’s actually moving through these systems, what it contains, who it’s about, and whether that movement aligns with policy intent. Because by the time data is in motion, the authentication question has already been answered. Correctly or not.”
As mentioned, this technique is particularly dangerous because it exploits legitimate authentication workflows, making detection more difficult. Thus the mitigations that are recommended are vital to keeping your organization safe.
Hisense Partners with FIFA for First-Ever Sensory-Inclusive FIFA World Cup
Posted in Commentary with tags Hisense on May 22, 2026 by itnerdHisense today announced a groundbreaking partnership with FIFA and KultureCity to support the first-ever Sensory Inclusive tournament at the FIFA World Cup 2026™.
Through this initiative, all 16 host stadiums across the United States, Canada and Mexico will feature dedicated sensory rooms equipped with Hisense display technology. Designed for fans who experience sensory overload — including individuals with autism, PTSD, dementia, anxiety and other conditions — these spaces will provide calming, supportive environments within the high-energy setting of match day.
Expanding Access to the Beautiful Game
Research indicates that an estimated five per cent to 16.5 per cent of people experience sensory processing challenges. For these fans, the intensity of live sporting events — the high energy of the crowd, sudden cheers and ongoing movement — can make attending feel overwhelming or inaccessible. This initiative looks to change that, ensuring that more fans can experience the beautiful game in person.
Sensory-Inclusive Infrastructure Across All 16 Stadiums
The initiative centers on two key components:
Stadiums will feature sensory rooms within the venue or in the Stadium Fan Experience area as part of the expanded stadium footprint. In eight stadiums, both options will be available to fans, and fans will have access to a space in every stadium during every minute of the game itself. These rooms extend access to calming spaces throughout the venue, recognizing that sensory needs can arise at any moment during the event experience.
Creating a More Inclusive Tournament
In addition, the sensory rooms complement FIFA’s broader accessibility efforts, including sensory bags and trained venue staff to support fans with diverse needs.
The FIFA World Cup 2026™ will feature 104 matches across 16 cities over 39 days. For the first time in tournament history, every host stadium will include dedicated sensory-inclusive and accessible spaces — marking an important evolution in how global sporting events serve diverse audiences.
For more information about ticket applications through KultureCity, visit Hisense × KultureCity at FIFA World Cup 2026™ – KultureCity .
Leave a comment »