Cybercriminals are brute-forcing into Azure AD accounts with no MFA

Source: Hackers have found a new way into your Microsoft 365 account