Azure CLI Password Spray Attack Bypasses MFA in Microsoft 365

A password spray campaign targeting Azure CLI sign-ins exploited narrow Conditional Access policies, compromising Microsoft 365 accounts despite MFA being enabled. The attack highlights a gap where MFA is not enforced for CLI tools, leaving organizations exposed. Microsoft recommends broader MFA policies to cover all authentication methods.