How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky reporting covers active and emerging cyber threats, including adversary-in-the-middle phishing hosted on legitimate cloud platforms to bypass MFA; tailored espionage backdoors targeting Central Asia, the Middle East, Africa, and Southeast Asia; ransomware and BitLocker extortion; abuse of Outlook, DNS, software-update systems, and network tunneling for command and control; and detection guidance for Kerberoasting and DNS tunneling. The collection also includes incident response findings from Brazilian educational institutions. No specific CVE identifiers are provided.