How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist RSS items describe active and emerging cyber threats, including adversary-in-the-middle phishing that bypasses MFA through legitimate cloud platforms, espionage backdoors and tunneling tools targeting Central Asia, the Middle East, Africa, Russia, and Southeast Asia, ransomware and BitLocker extortion, malicious software-update abuse, and covert C2 using Outlook Calendar and DNS AAAA records. The collection also covers network anomaly detection, incident response in Brazilian educational institutions, and defensive recommendations. No specific CVE identifiers are provided.