In a chilling demonstration of evolving cyber-adversary tactics, a sophisticated campaign recently targeted Microsoft 365 (M365) environments, successfully compromising 79 organizations without ever requiring a user’s password. By utilizing a technique researchers at Huntress have dubbed "token spraying," the attackers effectively weaponized the very session tokens designed to provide users with seamless access to their […]
A Different Prescription: Why The Eye Foundation Bypassed Healthcare Private Equity for a Consumer-Brand Playbook
By Sudeshna Ray Edited by Neha Mehrotra Lede illustration by Kavipriya OG Introduction: Breaking the Private Equity Mold For the better part of the last decade, India’s healthcare sector has been locked in a familiar financial choreography. Private equity heavyweights—such as Temasek, Blackstone, TPG, and KKR—have flooded the market with capital, injecting over $15.5 billion […]
The 0ktapus Campaign: How a Sophisticated Phishing Ring Bypassed MFA to Breach 130+ Organizations
In the ever-evolving theater of cyber warfare, the "0ktapus" campaign stands as a chilling reminder that no security protocol is infallible. Researchers at the cybersecurity firm Group-IB have uncovered a sprawling, highly sophisticated phishing operation that has successfully compromised nearly 10,000 accounts across more than 130 organizations. By specifically targeting the identity and access management […]