4 Major US-First Attacks Put SOC Resilience to the Test
Brief
US companies are facing very different campaigns, threats, and techniques. But beneath rotating infrastructure and changing attack methods, what do these attacks have in common? What gaps do they expose in SOC operations?
And how can security teams close them to strengthen business resilience?
Recent US Attacks Revealed These SOC Gaps
- Limited Visibility into Evolving Identity Attacks
A recent Mirage2FA campaign targeted over 4,000 US organizations. The phishing-as-a-service toolkit hijacked Microsoft 365 sessions using adversary-in-the-middle techniques to intercept credentials, 2FA codes, and authenticated session cookies.
The campaign highlighted a growing visibility gap: credential-focused defenses aren’t always enough when attackers can steal authenticated sessions. SOCs need broader visibility into active phishing threats and their associated infrastructure.