Minister Van Weel (Justitie en Veiligheid) en minister Heerma (Binnenlandse Zaken en Koninkrijksrelaties) hebben vandaag twee wetsvoorstellen naar de Tweede Kamer gestuurd. De voorstellen herzien de regels voor opsporing, vervolging en berechting van ambtsdelicten door Kamerleden, ministers en staatssecretarissen en sluiten waar mogelijk aan bij de reguliere strafrechtelijke procedure.

The FBI has issued a public service announcement warning about a new phishing kit that's stealing Microsoft OAuth tokens at an alarming rate. OAuth token theft is a serious headache for organizations because stolen tokens can bypass multi-factor authentication (MFA) and grant access to privileged accounts within an organization without needing to know their credentials. Think corporate espionage, data theft, maybe even ransomware. The main culprit is Kali365, described as a phishing-as-a-service platform that's being peddled on Telegram, first spotted by crimefighters in April 2026. "Kali365 lowers the barrier of entry, providing less-technical attackers access to AI-generated phishing lures, automated campaign templates, real-time targeted individual/entity tracking dashboards, and OAuth token capture capabilities," the FBI said in its announcement. Phishing kits aren't new. Different flavors are always in development, but the good ones can be especially problematic for organizations. Kali365 lets attackers send convincing phishing emails that impersonate "trusted cloud productivity and document-sharing services," - Adobe Acrobat Sign, DocuSign, and SharePoint - according to security shop Arctic Wolf. That email contains a device code and instructions for the target to enter the code into a legitimate Microsoft page, a hyperlink for which is included in the email. Entering that code registers the attacker's device to the unwitting target's M365 account, effectively surrendering access to emails, Teams, and all the rest of it. No MFA required. Arctic Wolf published a deep dive on Kali365 back in April, noting that it also offers adversary-in-the-middle (AitM) capabilities that are distinct from the device code phishing described by the FBI. The second attack Kali365 enables leads to the same outcome, accessing Microsoft accounts while bypassing MFA, just through slightly different mechanics. Victims are sent an initial phishing email containing a cookie-based lure, which transparently proxies their browser via attacker-controlled infrastructure, Arctic Wolf said. Requests are then forwarded to a real Microsoft login page, and responses are beamed back to the victim, who authenticates the typical way using their valid credentials, passing Microsoft MFA. Session cookies, related artifacts, and other session information are scooped up during this process and stored in the Kali365 attacker panel. From there, attackers can generate scripts to replay those sessions in their own environment, effectively borrowing the genuine user's session. The researchers' analysis of Kali365 revealed three distinct tiers for subscribers. The lowest Client Tier is for individual attackers, who can change the branding on the panels to give each a bespoke look while sporting the same underlying powers. The Agent Tier is for resellers who can provision and manage their own branded Kali365 panels and Client Tiers. The Admin Tier is reserved for Kali365's developers. Kali365 has a simple pricing structure: $250 per month per tenant, or $2,000 for a year. It supports an array of languages: Arabic, Chinese, Dutch, English, French, German, Italian, Japanese, Korean, Polish, Portuguese, Russian, Spanish, and Turkish. Since emerging in April, Kali365 has often been mentioned in the same breath as EvilTokens, another device code phishing platform that hit headlines weeks earlier after Microsoft confirmed hundreds of compromises each day. "Each campaign is distributed at scale, targeting hundreds of organizations with highly varied and unique payloads, making pattern-based detection more challenging," Tanmay Ganacharya, VP of security research at Microsoft, told The Register. "We continue to observe high-volume activity, with hundreds of compromises occurring daily across affected environments." Both Arctic Wolf and the FBI suggested organizations at risk should use conditional access policies to block device code flow where not required. Defenders should also consider blocking authentication transfer policies, which let users move authentication between devices such as PCs and phones. ®

AMSTERDAM (ANP) - De jongen die wordt verdacht van een telefonische bedreiging tegen de joodse school Cheider in Amsterdam blijft drie dagen langer vastzitten. Wat de bedreiging precies inhield, wil de politie niet zeggen. Het onderzoek is nog niet afgerond.

De orthodox-joodse school in de Amsterdamse wijk Buitenveldert heeft 150 leerlingen in basis- en voortgezet onderwijs. In maart ontplofte er bij de school een explosief en moesten de leerlingen een dag thuisblijven. De daders zijn gefilmd, maar nog niet opgepakt.

Dat incident vond vrijwel gelijktijdig plaats met een explosie bij de synagoge in Rotterdam en het voorbereiden van een explosie bij een synagoge in Heemstede. Voor die twee incidenten zijn drie mensen opgepakt.

AMSTERDAM (ANP) - Bij extreemrechtse protesten tegen asielzoekerscentra en immigratie, zowel online als op straat, duiken steeds vaker christelijk-nationalistische symbolen op. Dat constateert onderzoeksplatform Justice for Prosperity (JfP).

Tekens zoals christelijke of kruisvaarderskruizen worden volgens JfP gebruikt om een respectabel imago te creëren. Protestgroepen, waaronder verschillende Defend-bewegingen, doen zich voor als beschermers van vrouwen, kinderen en het traditionele gezin: heteroseksueel, christelijk, anti-lhbtiq+, anti-abortus en tegen religieuze minderheden. Hun ideeën worden overgoten met een christelijk sausje en worden op deze manier steeds 'normaler', betoogt JfP.

Het platform wijst bijvoorbeeld naar de uit de hand gelopen demonstratie op het Malieveld van organisator 'Els Rechts'. "Zij opende de demonstratie met een Bijbeltekst. Er was een groot houten kruis te zien met de tekst 'God is goed, Geert is groot'."

ajpscs has added a photo to the pool:

the SQUARE
INTERACTIVE
© ajpscs

ajpscs posted a photo:

the SQUARE
INTERACTIVE
© ajpscs

British army is 80-90% short of drones as military exercise aims to build on European defence strategy

Deep in Charing Cross underground station, in the disused terminus of the Jubilee line, a secret Nato command bunker has this week been discreetly at work. Dozens of mostly British soldiers were engaged in a war game defending Estonia from a Russian invasion in 2030, unbeknownst to commuters and tourists bustling above.

The secret chambers are behind two sets of normally locked, metal double doors. A red glow at the bottom of the escalator beyond is the first sign of troops below; next are mocked up newspaper covers pasted over ageing adverts. A British Nato force has deployed to Estonia they blare, in response to a Russian massing of troops on the border.

Continue reading...

Het laatste competitieduel, zondag op Anfield tegen Brentford, is een belangrijk moment voor de toekomst van coach Arne Slot bij Liverpool FC. Wat ging er mis na zijn bijna perfecte debuutseizoen?