Why stolen credentials continue to work even where MFA is in place

How stolen credentials and cookies can bypass MFA protections.