Welcome to Blumira Briefings, your top headlines and trends for your security practice!

In this week's episode:

- FBI Alert: New Kali365 Phishing Kit Bypasses Multi-Factor Authentication for Microsoft 365
- Critical Remote Code Execution Flaw in Microsoft SharePoint Requires Immediate Patching
- Automated Attacks Target Over 30,000 Exposed Databases Globally with Ransom Demands

Have a security topic you want us to cover? Let us know in the comments!
--

Sources:

FBI warns of Kali365 phishing kit targeting Microsoft 365 account
https://cyberinsider.com/fbi-warns-of-kali365-phishing-kit-targeting-microsoft-365-accounts/
--
Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.
https://securityaffairs.com/192730/security/microsoft-sharepoint-has-a-new-rce-flaw-if-you-havent-patched-yet-go-do-that.html
--
The Hidden Ransomware Economy Running on Exposed Databases
https://securityaffairs.com/192711/cyber-crime/the-hidden-ransomware-economy-running-on-exposed-databases.html