In a chilling demonstration of evolving cyber-adversary tactics, a sophisticated campaign recently targeted Microsoft 365 (M365) environments, successfully compromising 79 organizations without ever requiring a user’s password. By utilizing a technique researchers at Huntress have dubbed "token spraying," the attackers effectively weaponized the very session tokens designed to provide users with seamless access to their […]

