Why Multi-Factor Authentication is not enough to combat Russian state-sponsored cyber actors

The Cybersecurity and Infrastructure Security Agency (CISA) and FBI Cyber Division recently released a joint Cybersecurity Advisory (CSA) warning organisations that Russian state-sponsored cyber actors have gained network access through the exploitation of default multi-factor authentication (MFA) protocols, a known vulnerability.