How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist reporting covering active and emerging cyber threats, including adversary-in-the-middle phishing that bypasses MFA through legitimate cloud platforms, espionage backdoors and tunneling tools targeting Central Asia, the Middle East, Africa, Russia, and Southeast Asia, ransomware and BitLocker extortion, supply-chain abuse of the ViPNet update system, and covert C2 using Outlook calendar events and DNS AAAA records. The collection also includes defensive analysis of Kerberoasting and DNS tunneling detection and incident-response findings from Brazilian educational संस्थitці.