How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist RSS entries describe current cyber threats including adversary-in-the-middle phishing that bypasses MFA using legitimate cloud platforms, tailored espionage backdoors, ransomware and BitLocker extortion, malicious software-update delivery, covert C2 over Outlook and DNS, tunneling, credential theft, keylogging, and data exfiltration. The collection spans campaigns targeting Central Asia, the Middle East and Africa, Southeast Asia, Russia, and Brazilian educational institutions. No specific CVE identifiers are provided.