How Lapsus$ exploited the failings of multifactor authentication

How Lapsus$ exploited the failings of multifactor authentication