Cybercriminals see new opportunities to attack agencies by exploiting unsecured cloud-based services that were deployed as part of the shift to remote-work.