Microsoft recently published their quarterly “Cyber Signals” report, in which they disclosed that 78% of organisations using Azure Active Directory (AD) do not use Multi-Factor Authentication (MFA).In 2021, over 25.6 billion attempts to brute-force user accounts were detected and blocked by Azure AD, with Microsoft CISO Bret Arsenault saying that they see about 580 to 600 password attacks attempted every second.A study done by software company Okta showed that organisations not running MFA are ten times more likely to be targeted than those that are. Arsenault commented on how this highlighted the importance of using MFA.