According to ThreatPost, cybercriminals are able to bypass multi-factor authentication to attack cloud services across the U.S. 

The Feds are warning that cybercriminals are bypassing multi-factor authentication (MFA) and successfully attacking cloud services at various U.S. organizations.