Talos

Talos Hires Ex-Fidelity Digital Assets Exec Kelly Ye as Head of Research

Image
Talos Hires Ex-Fidelity Digital Assets Exec Kelly Ye as Head of Research

NEW YORK – October 29, 2026 -- Talos, the institutional technology and data provider for digital asset trading and portfolio management, has hired Kelly Ye as Head of Research, putting a dedicated leader over a research program that follows liquidity, market structure and onchain finance.

Ye brings nearly two decades of finance experience, including 14 years in traditional markets

Ye will be based in New York. She held investment leadership roles in digital assets at Avenir Group and Decentral Park Capital. She also held research and product leadership roles at Fidelity Digital Asset Management and CoinDesk Indices. Most recently, she was building Coinbridge, a company focused on bridging the capital gap for tokenized real-world assets.

Ye holds a bachelor's degree in Applied Mathematics from Peking University and a master's degree in Operations Research from MIT. She is a CFA charterholder.

Stolen Session Tokens Let Attackers Bypass MFA for Weeks

Image
Stolen Session Tokens Let Attackers Bypass MFA for Weeks

Global – October 29, 2026 -- Security provider Wirespeed says reviews of new customers' previous 90 days of detections routinely uncover suspicious logins on MFA-enforced accounts that existing tools never surfaced, some dating back weeks.

The sessions go unflagged because the authentication evidence looks clean: valid credentials, a satisfied MFA prompt and a valid issued session. A stolen session token carries the authentication context that created it, so the assertion of strong authentication travels with the attacker.

Risk prompts can mark stolen sessions as resolved

When Entra ID Protection detects an unfamiliar location, new ASN or odd device, it emits a risk signal that triggers an MFA prompt. Once the prompt is satisfied, the sign-in risk is marked resolved, depending on configuration. An analyst scrolling a queue sees a challenge that passed, not a hijacked session.