Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Rogue external MFA providers can steal passwords during logins

MFA's Weakest Link: Account Recovery Is the New Attack Path

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations