
MFA passed. The attacker still got in: What Huntress found in the EvilTokens phishing campaign
There is a line in Huntress’s latest research that should make anyone responsible for Microsoft 365 security pay attention: MFA = PASS. Token = ISSUED. That is








