Post #3425917
2026-06-26 12:46 UTC
@fifonetworks@infosec.exchange
I see this all of the time especially on Office 365. I thought MFA was supposed to stop this but obviously not. My open question is why does Microsoft push MFA so hard when it obviously does not work? Why are they not posting that people have bypassed this in real attacks?
Replies (1)
-
@ryanl@twit.social 2026-06-26 12:58
@kris@whereismysupersuit.com @fifonetworks@infosec.exchange It does in most situations. Which is true of almost any MFA solution. But there are always going to be some sort of vulnerability you need to watch out for. Microsoft is far from perfect but they are also one of the largest corporate email providers which makes them a natural target. AI certainly isn’t making it any easier.