News MFA Bypass Phishing: What the Kratos Takedown Teaches Every Microsoft 365 User by Rebecca Sutton July 23, 2026 by Rebecca Sutton July 23, 2026 The Kratos phishing kit stole Microsoft 365 session cookies to bypass MFA entirely. Here’s exactly how that attack works, and the practical steps that actually reduce the risk. FacebookTwitterLinkedinEmail