Microsoft 365 users need to be aware of a critical security vulnerability in Microsoft 365's multi-factor authentication (MFA).