MFA's Weakest Link: Account Recovery Is the New Attack Path

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

Password spraying attacks surge 155x as hackers exploit MFA gaps

Microsoft admits SMS and voice MFA can’t stop AI attacks, mandates passkeys in Entra by February 2027