New vulnerabilities allow hackers to bypass MFA for Microsoft 365

Critical flaws in MFA implementation in cloud environments where WS-Trust is enabled could allow attackers to bypass MFA and access cloud applications such as Microsoft 365, according to Proofpoint.