New Microsoft 365 Attack Can Break 2FA A new phishing attack can access Microsoft 365 accounts, even if the target has 2FA enabled.