CyberRisk Alliance

Senior Vice President, Audience Content Strategy

Headshot for Bill Brenner from PPWorks


<p>Timely threat detection is essential. Every second that a malicious actor lingers inside your network, the odds increase that your organization could be the victim of a major malware attack. Nation-state APT actors are especially adept at staying hidden – but if you know what TTPs and IOCs to look for and you have comprehensive visibility into the processes and packets flowing through your network, then you can take steps to root them out. This live democast will demonstrate how VMware&#8217;s network detection and response solution (NDR) can uncover the various clues that threat actors drop as they infiltrate your network and execute their attack chains.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2021/10/ChadSkipperPic.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Chad Skipper</p><p class="speaker-job">Global Security Technologist</p><p class="speaker-company">VMWare</p></div><div class="speaker-description"><p>Chad Skipper serves as Global Security Technologist in the Network and Security Business Unit at VMware. With more than 25 years in Information Security, Chad has served in many executive security technologist and strategist roles of endpoint, network, cloud, and hosted security services at Lastline, acquired by VMware, Cylance, acquired by Blackberry, Dell, Cisco, Symantec and is a USAF veteran.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2021/10/Ant_Ducker.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Ant Ducker</p><p class="speaker-job">Lead Cyber Security Solution Engineer</p><p class="speaker-company">VMWare</p></div><div class="speaker-description"><p>Ant Ducker, Lead Cyber Security Solution Engineer at VMware, has twenty+ years’ experience in engineering, deployment, operation and maintenance of network security platforms in the Provider, Financial &amp; Enterprise verticals.</p><p></p><p>Specializing in: proactive and reactive malware defence, manual and automated threat hunting workflows, breach detection and NDR solutions, security systems integration with direct or orchestrated API, workflow integration for enterprise network security, SOC and threat hunting platforms.</p></div></div></div></div>





<p><strong>Sponsored By:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="995" height="153" src="https://cdn.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png" alt="" class="wp-image-109472" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x46/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x118/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 768w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/860x132/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 860w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/156x24/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 156w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/312x48/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 312w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/640x98/smart/files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 640w, https://files.scmagazine.com/wp-content/uploads/2020/11/VMware-Logo-200x200-01-1024x1024-1.png 995w" sizes="(max-width: 995px) 100vw, 995px" /></figure>


Breach

Network Security

Democast

Archived: Part 2: Detection & Response Demo: Patrolling Every Packet & Process for Signs of Compromise


<p>As more organizations adopt multi-cloud strategies, security managers must develop a strategy to consistently protect web applications across hybrid environments, while preserving quality of security and operational efficiency. The traditional approach to application security no longer works in the multi-cloud, and anew approach is needed. Join us for this webinar to discuss the new challenges of multi-cloud security and how to overcome them. In this webinar you will learn:</p>



<ul><li>The security challenges of the multi-cloud</li><li>Why traditional approaches and tools no longer work</li><li>The requirements for multi-cloud security solutions</li><li>How Radware helps organizations protect their web applications in the multi-cloud</li></ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2022/05/Eyal-Arazi.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Eyal Arazi</p><p class="speaker-job">Solution Expert</p><p class="speaker-company">Radware</p></div><div class="speaker-description"><p>Eyal is a Solution Expert in Radware&#8217;s security group, responsible for the company’s line of cloud security products, including Cloud WAF, Cloud DDoS, and Cloud Malware Protection. Eyal has extensive background in security, having served in the Israel Defense Force (IDF) at an elite technological unit.</p></div></div></div></div>





<p><strong>Sponsored By:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="513" height="86" src="https://cdn.scmagazine.com/wp-content/uploads/2022/05/Radware-Logo.jpg" alt="" class="wp-image-260913" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x50/smart/files.scmagazine.com/wp-content/uploads/2022/05/Radware-Logo.jpg 300w, https://files.scmagazine.com/wp-content/uploads/2022/05/Radware-Logo.jpg 513w" sizes="(max-width: 513px) 100vw, 513px" /></figure>


Application security

Cloud Security

Cybercast

Archived: How to Protect Your Applications in the Multi-Cloud


<p>Tactics of adversaries to infiltrate the software supply chain have grown more sophisticated. Among them: co-opting the names of submissions in public code, with the ultimate goal being to use counterfeit code to compromise networks. How can organizations recognize pockets of risk that may exist within their own development efforts? What preventative measures can they take to ensure devops processes don’t provide avenues of access for bad actors?</p>



<p>Join Matt Austin, Director of Security Research, to hear details about Contrast Security’s own experience with a targeted attack against its own code: how the company responded to prevent exploitation, and best practices for secure development.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2022/08/mattresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Matt Austin</p><p class="speaker-job">Director of Security Research</p><p class="speaker-company">Contrast Security</p></div><div class="speaker-description"><p>Matt is an accomplished application security expert with over 11 years of experience focused on security research, development, and engineering.</p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2022/08/Contrast_Security_Logo-1.png" alt="" class="wp-image-443208" width="306" height="72" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x70/smart/files.scmagazine.com/wp-content/uploads/2022/08/Contrast_Security_Logo-1.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x180/smart/files.scmagazine.com/wp-content/uploads/2022/08/Contrast_Security_Logo-1.png 768w, https://files.scmagazine.com/wp-content/uploads/2022/08/Contrast_Security_Logo-1.png 954w" sizes="(max-width: 306px) 100vw, 306px" /></figure>


Threat Hunting

Data Security

Archived: How we did it: Detection and prevention of a dependency confusion attack


<p>New analysis from VMware delves deep into the most recent waves of the Emotet botnet, providing never-before-seen insights into the malware delivery mechanism’s malicious components and modules, its execution chains and its software development lifecycle. &nbsp;<br><br>This webcast will reveal key findings and takeaways from VMware’s researchers, who managed to bypass anti-analysis techniques in order to map Emotet’s dynamic infrastructure. This presentation will offer:&nbsp;</p>



<ul><li>A review of Emotet’s infection chain process, along with its TTPs and IOCs. Plus, similarity metrics that allow for the clustering of similar infection techniques.&nbsp;</li><li>An inside look at Emotet’s command-and-control network infrastructure, and its AGILE-like software development life cycle.&nbsp;</li><li>“How-tos” for creating Emotet sock puppets (for fetching modules) and extracting its recently updated configuration.&nbsp;</li><li>An analysis of two recently updated modules that differ from previous Emotet attacks – one that steals credit card info from users of Google Chrome and one that exploits the SMB protocol to proliferate.&nbsp;</li><li>Tips and recommendations for mounting a more ironclad defense.</li></ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2022/09/giovanni_vigna_resize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Giovanni Vigna</p><p class="speaker-job">Sr. Director of Threat Intelligence</p><p class="speaker-company">VMware</p></div><div class="speaker-description"><p>Giovanni Vigna is the Sr. Director of Threat Intelligence at VMware. He is also a Professor in the Department of Computer Science at the University of California in Santa Barbara (on leave). His research interests include malware analysis, vulnerability assessment, the underground economy, binary analysis, web security, and the applications of machine learning to security problems. Giovanni Vigna is also the founder of the Shellphish hacking group, who has participated in more DEF CON CTF competitions than any other group in history. He is an IEEE Fellow and an ACM Fellow.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cdn.scmagazine.com/wp-content/uploads/2022/09/stefano_ortolaniresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Stefano Ortolani</p><p class="speaker-job">Staff Engineer 2, Threat Research Lead at VMware</p><p class="speaker-company">VMware</p></div><div class="speaker-description"><p>Stefano Ortolani is Staff Engineer 2 / Threat Research Lead at VMware, formerly Director of Threat Research at Lastline, where he joined in 2015 as a Security Researcher. In his current role, Stefano focuses on finding novel approaches to investigate, classify, and detect unknown cyber tradecraft. Prior to Lastline, he was part of the Global Research and Analysis Team at Kaspersky Lab, in charge of fostering operations with CERTs, governments, universities, and law enforcement agencies, as well as conducting research of the global threat landscape. He received his Ph.D. in Computer Science from VU University Amsterdam.</p></div></div></div></div>





<p></p>


Malware

Archived: EMOTET Exposed: Inside the Cybercriminals’ Supply Chain


<p>Organizations have more security concerns than ever before (due to an increasingly volatile threat landscape, growing attack surfaces, and increased volume and complexity of security threats and alerts) and security operations will continue to be difficult for many organizations to effectively combat without the right combination of technology, intelligence, and expertise.&nbsp;</p>



<p>To compensate, security teams need high performing, modern capabilities to address the complexity creating slow and inefficient security operations.</p>



<p>InsightIDR &#8211; Rapid7’s cloud native SIEM and XDR &#8211; delivers accelerated detection and response via a lightweight deployment and intuitive SaaS interface, complete environment visibility, embedded threat intelligence, expertly vetted detections, and automated response. Security teams can feel confident in stopping threats earlier in the kill chain via three key benefits: cloud-centric incident response, accelerated time-of-value for a speedy return on investment, and a stacked library of detections intelligence that helps identify potential cyber incidents. &nbsp;Perhaps most significantly, InsightIDR is designed for SOC teams of all skill levels, from tenured veterans to up-and-coming go-getters. In this webcast, Rapid7 will take you through a demonstration of its XDR solution, and the myriad benefits it can deliver – from quick out-of-the-box wins for those just getting started, to advanced features for more experienced analysts looking to dig deeper into incoming threats.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2022/11/20220907_161914resize.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Stephen Davis</p><p class="speaker-job">Detection and Response Lead Sales Technical Advisor</p><p class="speaker-company">RAPID7</p></div><div class="speaker-description"><p>Stephen Davis is Rapid7’s Detection and Response Lead Sales Technical Advisor. Stephen has over 15 years of IT-related experience &#8211; from Small Computer Systems Specialist, Senior Systems Administrator, and also as a Lead Technical Customer Advisor for Rapid7’s very own MDR Service. Outside of work, Stephen is an avid beach bum who enjoys console gaming, artistry, tattoos, and being the worst golfer in his neighborhood (it&#8217;s so he can just have an excuse to drive the golf carts).</p></div></div></div></div>




Endpoint/Device Security

Security Program Controls/Technologies

Archived: Consolidating without compromise: An XDR democast for analysts of all tenure


<p>How IT risk translates into enterprise risk, and how we tie the two together.&nbsp;</p>



<ul><li>What is IT risk? How has the definition shifted over the years as it relates to overall enterprise risk?</li><li>What are key drivers of IT risk on a business today?</li><li>How do you quantify and communicate IT risk in a tangible way? Why IT should be seen as an enabler, rather than as a cost.</li><li>What is the best approach to manage IT investment and be successful when it comes to risk management.</li><li>How can technology play a role in identifying and measuring business risk and allowing companies to pivot and be more responsive?</li></ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2022/12/ErikGastonresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Erik Gaston</p><p class="speaker-job">VP Global Executive Engagement</p><p class="speaker-company">Tanium</p></div><div class="speaker-description"><p>Erik Gaston oversees all Global Executive Engagement in the Global Sales organization at Tanium. A CIO / CTO by trade, he has spent most of his career as a C-level executive leading enterprise technology organizations in the space of modernization, full stack observability and digital / cloud transformation across a host of industries including Financial Services, Global Trade/ Supply Chain, and e-Commerce. Erik joined Tanium in November of 2021 initially as the CIO for Financial Services, a position he still holds, and was soon after asked to lead the Global Executive Engagement Team. Erik partners with our global customers and prospect organizations to drive platform visibility, enterprise maturity and security solutions at scale&#8230;he is a passionate learner, coach and business partner for Tanium customers. Erik is bi-lingual German English, is a member of the NJ Society for Information Management (NJSIM) and is also on the Advisory Board at New Jersey Institute of Technology and is a guest lecturer at the University.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2023/01/SteveNeiersresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Steve Neiers</p><p class="speaker-job">CISO, Retired</p><p class="speaker-company">Chevron</p></div><div class="speaker-description"><p>teve recently retired as the CISO at Chevron where he spent 33 years, starting with a variety of technical geophysical roles, and then moving into leadership positions including managing Chevron’s global network, managing Chevron’s end user computing environment, and in 2014 assumed the role of CISO. He is a founding board member of the Oil and Natural Gas Information Sharing and Analysis Committee and has been an active participant with the CEB Information Risk Leadership Council and Information Risk Management Research Board. Steve was also co-chair of the Houston CISO Executive Summit and a member of the Engineering Advisory Board for Houston Baptist. He is a staunch supporter of cross-industry cybersecurity collaboration in an effort to stay ahead of threat actors.</p></div></div></div></div>




Compliance Management

Archived: How IT Risk Translates into Enterprise Risk


<p>Join this webcast to learn about the findings from the 2023 State of Passwordless Security report and how you can use it to improve your organization’s security posture.</p>



<p>CRA VP of Content Strategy Bill Brenner, Bojan Simic, HYPR&#8217;s Co-founder, CEO and CTO and &nbsp;Andrew Shikiar, Executive Director &amp; CMO, FIDO Alliance discuss key takeaways from HYPR’s 3rd annual edition, including:</p>



<ul>
<li>Current authentication practices, their security levels, and drivers/barriers to passwordless adoption</li>



<li>The top causes of breaches and strategies to close those vulnerabilities</li>



<li>The role of passkeys and their potential impact on the use of passwordless technologies</li>
</ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2023/03/Bojan-Simicresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bojan Simic</p><p class="speaker-job">Chief Executive Officer &amp; Chief Technology Officer</p><p class="speaker-company">HYPR</p></div><div class="speaker-description"><p>Bojan Simic is the Chief Executive Officer &amp; Chief Technology Officer of HYPR. Bojan&#8217;s vision for the elimination of shared secrets and his experience in authentication &amp; cryptography serves as the underlying foundation for HYPR technology and company strategy. Previously, he served as an information security consultant for Fortune 500 enterprises in the financial and insurance verticals conducting security architecture reviews, threat modeling, and penetration testing. Bojan has a passion for deploying applied cryptography implementations across security-critical software in both the public and private sectors. Bojan also serves as HYPR’s delegate to the FIDO Alliance board of directors, empowering the alliance’s mission to rid the world of passwords.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2023/03/Andrew-Shikiarresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Andrew Shikiar</p><p class="speaker-job">Executive Director and Chief Marketing Officer</p><p class="speaker-company">FIDO Alliance</p></div><div class="speaker-description"><p>Andrew Shikiar is Executive Director and Chief Marketing Officer at FIDO Alliance, a global consortium working to create open standards and an interoperable ecosystem for simpler, stronger user authentication. He has deep experience in multi-stakeholder organizations, having previously led market development efforts for Tizen Association, LiMo Foundation and Liberty Alliance Project – and also helped structure and launch groups such as the Smart TV Alliance and Open Visual Communications Consortia.</p></div></div></div></div>




Identity

Archived: Passwordless security: Where things stand, and What’s next?


<p>The Managed Detection and Response (MDR) market is heating up as lean security teams lacking the human and financial resources of larger organizations clamor for tools to uncover and stop cyber intrusions more quickly. They understand that when a bad actor penetrates their organization, every second counts. Many have learned this lesson the hard way. This cybercast explores some of the more notorious breaches to make headlines in recent months, where MDR would have made the difference &#8212; and how to use it to bolster incident response in the future.&nbsp;</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2023/04/Jeffrey-Gardner-Headshot-.png" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Jeffrey Gardner</p><p class="speaker-job">Practice Advisor &#8211; Detection &amp; Response</p><p class="speaker-company">Rapid7 </p></div><div class="speaker-description"><p>Jeffrey Gardner is Rapid7’s Detection &amp; Response Practice Advisor. Jeffrey has over 20 years of experience in the industry as an analyst up through CISO in the tech, healthcare, manufacturing, e-commerce, government and military verticals (among others). In addition to holding a library’s worth of C &amp; G certs (CISSP, CISM, CRISC, GDAT, GPEN, GCIH, etc.) and being an offensive security aficionado he is also a veteran, tattoo artist, avid gamer, comic book nerd, lover of all bad horror movies, and host of cybersecurity podcast &#8220;The Lost Bots&#8221;.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.scmagazine.com/wp-content/uploads/2023/04/Erick_headshot.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Erick Galinkin</p><p class="speaker-job">Principal Artificial Intelligence Researcher</p><p class="speaker-company">Rapid7</p></div><div class="speaker-description"><p>Erick Galinkin is a hacker and computer scientist working as principal researcher in Rapid7&#8217;s Office of the CTO. Presently, Erick leads R&amp;D suporting Rapid7&#8217;s Managed Detection and Response service. An alumnus of Johns Hopkins University, he has published many academic papers and given talks on security decision theory and artificial intelligence applications for security at conferences from AAAI and GameSec to DEF CON&#8217;s AI Village. He has spent his entire life in different parts of information security, ranging from threat intelligence and malware analysis to cloud security and security architecture.</p></div></div></div></div>




Incident Response

Incident Response War Stories: When MDR Would Have Made the Difference


<p>Even cybersecurity pros struggle to address the unique challenges of Kubernetes and container security. It can be disorienting to take a career full of knowledge in more traditional platforms and apply it to the leading edge of declarative infrastructure and microservices. This webcast is designed to help security teams get over the initial culture shock of operating within a heavily containerized environment. First, we will look at the unique challenges associated with container security and then we’ll examine how to overcome them by:</p>



<ul>
<li>Understanding how the characteristics of containers, such as immutability, and container runtimes affect our approaches to identifying risks and addressing issues</li>



<li>Gaining visibility into everything being deployed in your environment and understanding the risks of each asset</li>



<li>Embracing automation to extend your reach and accelerate your response</li>



<li>Shifting left such that your security policies and processes are embedded into your code development</li>
</ul>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="160" src="https://cms.scmagazine.com/wp-content/uploads/2023/04/orca_logo_color_digital.png" alt="" class="wp-image-482968" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x137/smart/files.scmagazine.com/wp-content/uploads/2023/04/orca_logo_color_digital.png 300w, https://files.scmagazine.com/wp-content/uploads/2023/04/orca_logo_color_digital.png 350w" sizes="(max-width: 350px) 100vw, 350px" /></figure>


DevSecOps

Tackling The Unique Challenges of Kubernetes & Container Security


<p>For developer and AppSec teams alike, securing critical components of the software supply chain, including open source libraries, container images, cloud infrastructure, and developer tools, is increasingly essential. But more often, tracking dependencies to fixing vulnerabilities can still be siloed because common tools and processes to create unified alignment have not been established.&nbsp;<br><br>To effectively manage and mitigate supply chain risk a more complete, holistic approach is needed. Join technical experts from Snyk and ServiceNow for a webinar where they will discuss:</p>



<ul>
<li>Why it’s critical to establish a workflow bridging developer and AppSec teams,</li>



<li>How to prioritize and action vulnerabilities quickly,&nbsp;</li>



<li>And create automated workflows to ensure timely remediation.</li>
</ul>


Supply chain

Vulnerability Management

Reducing silos between Developers and AppSec in your Software Supply Chain with Snyk and ServiceNow


<p>Cyber risk and business risk are increasingly one and the same, and it’s about time that business-minded executives understood that reality when managing their budgets and agendas. With cybercriminal activity showing no signs of slowing down, companies must understand that a commitment to mitigating cyber risk represents an investment in the business as well.<br>In this session we’ll look at two specific case studies in which organizations successfully addressed some of their biggest sources of business risk by prioritizing quicker detection and assessment of cyber threats through solutions such as XDR, cloud security platforms and managed security services.&nbsp;<br>Learn how one Trend Micro customer’s expanding roster of distributed and remote employees introduced unwanted endpoint security risk, and how cloud security and XDR addressed this issue by unifying enterprise-wide threat data visibility into a single-pane-of-glass solution.<br>And discover how managed XDR helped another customer simultaneously reduce business and security risks – not to mention costs – after acquisition activity resulted in a decentralized IT environment that hampered visibility, communication and control.</p>



<p></p>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="74" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/07/TM_Logo_Primary_2c_1200x255.png" alt="" class="wp-image-498086" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x63/smart/files.scmagazine.com/wp-content/uploads/2023/07/TM_Logo_Primary_2c_1200x255.png 300w, https://files.scmagazine.com/wp-content/uploads/2023/07/TM_Logo_Primary_2c_1200x255.png 350w" sizes="(max-width: 350px) 100vw, 350px" /></figure>


Leadership

Cyber risk is business risk: Walking the intersecting lines


<p>Open source code provides developers with the shortcuts they need to innovate and&nbsp;<br>iterate faster. But due to a host of open source vulnerabilities, some shortcuts are&nbsp;<br>safer than others. Metaphorically speaking, are your organization’s developers&nbsp;<br>taking a well-lit, mapped-out shortcut, or straying down a mysterious, risky, and foreboding&nbsp;<br>path?<br><br>Snyk&#8217;s &#8220;2023 State of Open Source Security Report&#8221; explores the adoption of&nbsp;<br>security tools, practices, and technologies, as well as the impact of automation and&nbsp;<br>AI in software development. Leveraging findings from both a survey of security practitioners from organizations across the United States and anonymized Snyk product usage data, the report reveals that the software supply chain is lagging in terms of the adoption of fundamental security measures and tools, such as software composition analysis and static application security testing.&nbsp;<br><br>Join this webcast to learn more about the report&#8217;s key takeaways, including:&nbsp;</p>



<ul>
<li>Why supply chain and open source security tools can’t keep up with the pace of development, and why organizations are failing to fully shift left</li>



<li>How organizations are responding to recent attacks by ramping up their code scanning and SBOM efforts, while adopting more formal software supply chain security programs&nbsp;</li>



<li>The mixed impact of AI, and how usage can reduce the burden on security-minded developers, but also potentially introduce additional vulnerabilities or create false alerts</li>
</ul>


AI/ML

Seeking safer shortcuts for devs: Snyk’s 2023 State of Open Source Security Report


<p>As bad actors look to blur the lines between real and fake, cybersecurity experts need to stay one step ahead of tech-savvy fraudsters. A simple, yet robust set of fraud prevention practices is often the best approach for stopping fraudsters at the gate.<br>In this impactful Q&amp;A webcast, you will see through the lens of two expert solution engineers who will dig deep into the vulnerabilities and dangers of AI-based fraud and account takeover (ATO) schemes. They will discuss how low-friction telephony insights, combined with multi-factor authentication (MFA) methods create a simple yet powerful firewall against fraudsters, and how businesses are equipping consumers with the necessary knowledge to stay vigilant ahead of a constant stream of cyber risks.</p>



<p>Join us to learn:<br>· How AI is changing the identity theft game and raising the stakes<br>· How MFA and mobile identity insights create a foundation that’s difficult to crack<br>· Ways to balance too many customer-facing safety protocols and the dangers of not enough<br>· Why it’s important for businesses to create ongoing education and awareness programs</p>



<p><strong>SPONSORED BY:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="72" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/06/telesignfinal.png" alt="" class="wp-image-491815" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x62/smart/files.scmagazine.com/wp-content/uploads/2023/06/telesignfinal.png 300w, https://files.scmagazine.com/wp-content/uploads/2023/06/telesignfinal.png 350w" sizes="(max-width: 350px) 100vw, 350px" /></figure>


Threat Management

Revolutionizing the essentials: Friction-minimizing approaches to overcoming advanced account takeover (ATO)


<p>Though red teaming is sometimes perceived as pen testing with the gloves off, in reality, the goal of these engagements isn’t to prove how much damage these skilled testers can do. Modern red teams must set out to provide learning opportunities for organizations and their blue teams, running attack simulations to help teach them how to better protect their infrastructure against real-world attacks. &nbsp;<br><br>To run effective engagements, red teams must not focus solely on capturing the proverbial flag, forgetting their roles as trainers. They should instead provide opportunities for blue teams to put their skills to work so that they are fully prepared for when a real-world attack hits. &nbsp;<br><br>In this webcast, learn more about how red teams can successfully run such engagements, including:&nbsp;</p>



<ul>
<li>Setting expectations with clients &nbsp;</li>



<li>Creating scenarios that strengthen Blue Team proficiency &nbsp;</li>



<li>Staying up to date with adversarial techniques&nbsp;</li>



<li>Having an evasive toolset to keep up with EDR and other detection solutions&nbsp;</li>
</ul>


Penetration Testing

Prioritizing Blue Team Success Over Red Team Wins


<p>Just because a business is mid-sized doesn’t mean the security risks it encounters are any smaller than those experienced by large enterprises. All organizations, regardless of size, face the same challenges around identity growth and management. A growth that places a greater burden on smaller organizations with limited resources that need to remain agile in how they approach their operations. And a proliferation that complicates implementing zero-trust/least privileged security programs that maintain continuous compliance and minimize third-party risk.&nbsp;<br><br>Mid-sized organizations who find themselves in this predicament can gain a leg up with a strong Identity Governance and Administration (IGA) program. Modern IGA solutions provide a portfolio of capabilities that help organizations manage increasingly complex human and machine identities, even as a business scales.&nbsp;</p>



<p>This webcast will reveal how solutions such as Saviynt’s modular SaaS-based IGA platform allow companies in varying stages of IAM maturity to build a robust and flexible identity program &#8211; without breaking the bank – by implementing modern techniques used for onboarding, provisioning, privileged access management, and much more.&nbsp;<br><br>Throughout our discussion we’ll also reveal how a strong IGA strategy improves productivity, streamlines tasks, and automates workflows in a manner that overcomes seven of the most universal challenges facing mid-sized IAM programs: manual processes, user access reviews, third-party identity management, maintaining compliance, lack of integration between systems, human error, and lack of resources.</p>



<p>Discussion Topics will include:</p>



<ol>
<li>An overview of today’s identity landscape</li>



<li>The common challenges your peers are looking to solve for</li>



<li>The benefits of modern IGA solutions</li>
</ol>


Privileged access management

Modern Identity Governance & Administration for Mid-sized Organizations


<p>The U.S. Securities and Exchange Commission’s highly-anticipated new cybersecurity rules are finally in force, and deadlines are approaching quickly. Organizations, both public and private, will now have to take quick action to either establish or transform their cybersecurity programs to come into compliance with these new regulations and prevent financial, legal, and reputational consequences.<br>Join us to learn:</p>



<ul>
<li>How you can ready your organization in 4 steps&nbsp;</li>



<li>What SEC regulations mean for both private and publicly traded companies</li>



<li>Tips for elevating your overall governance and risk management practices</li>
</ul>



<p><strong>Sponsored by</strong>:</p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="60" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/08/LogicGate_Logo_LogicGate-Color.png" alt="" class="wp-image-625077" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x51/smart/files.scmagazine.com/wp-content/uploads/2023/08/LogicGate_Logo_LogicGate-Color.png 300w, https://files.scmagazine.com/wp-content/uploads/2023/08/LogicGate_Logo_LogicGate-Color.png 350w" sizes="(max-width: 350px) 100vw, 350px" /></figure>



<p></p>


Governance, Risk and Compliance

SEC Cyber Compliance Readiness: 4 Steps Every Leader Should Take Now


<p>A company’s data is its lifeblood and must be protected at all costs. But the larger the data pile, the harder it is to manage. Attackers know this and are on a nonstop hunt for holes in your tech stack to exploit. To have a fighting chance, organizations need to approach security as a team sport.<br><br>In this SC webcast, host Bill Brenner sits down with Megan LaFlamme, Director of Product Marketing of data security and management company Cohesity for a discussion on how to assemble the team and help everyone in the organization make the right plays – and how to make the best use of all the security tools available, including threat intelligence, backup and recovery, data classification/isolation and response/recovery. Discussion points will include:<br></p>



<ul>
<li>The challenge of people and IT, including the lack of collaborative tools.</li>



<li>Data siloes across the enterprise and how they should be managed.</li>



<li>How to achieve greater interoperability of security tools.</li>
</ul>


Threat Intelligence

Using Centralized Data Security Management to Turn Cybersecurity into a Team Sport


<p>AppSec has long been considered a subset of IT security, but today’s threats make securing applications an imperative for the entire business. But how do you make it so?<br><br>In this SC Cybercast, Alex Babar, VP of Solutions for cybersecurity company Brinqa, has a discussion with SC’s Bill Brenner about how Brinqa helped one client on its journey to effective Application Security Posture Management (ASPM).<br><br>As Brinqa’s client grew their application security program to detect AppSec findings across their SDLC, they ran into a big problem: too many findings from too many sources. This made it impossible to understand, analyze, and report on SDLC security risks at scale. They needed a way to filter the results and ensure they remained on the path to more secure products, and found their solution in ASPM even before this trending market category had a name. Alex Babar will explain how the company unified its application security testing findings in one place, so they could take a business-first approach to analyzing and remediating their scan results.<br><br>By attending this session, you will learn how the company now uses ASPM to:</p>



<ul>
<li>Unify SAST, SCA, Pen Testing, and other AppSec findings into one graph database</li>



<li>Prioritize AppSec findings with correlated business context and threat intelligence</li>



<li>Collaborate effectively with remediation teams and accurately tracks their progress</li>



<li>Report on trends and progress with a business-first view of risk</li>
</ul>


Application Security Posture Management is essential to your business. Here’s how to get there.


<p>Applications and software supply chains are constantly changing. So is the threat landscape.</p>



<p>Vulnerabilities, misconfigurations, exposed secrets, design flaws, sensitive data exposure, etc., will always be inevitable. That’s why application security remains such a vibrant market and why application security teams have a host of tools (SAST, SCA, DAST, IaC security, etc.) and processes (security questionnaires, pen tests, threat models, etc.) at their disposal. But with today’s pace of change and the complexity of modern applications, those solutions are noisy, resource-intensive, and inefficient.</p>



<p>That’s where application security posture management (ASPM) comes into play, enabling application security teams minimize noisy alert backlogs, reduce remediation times, streamline processes, and proactively reduce application risk.</p>



<p>Join us for this expert-led session where we’ll dive deep into the emerging world of ASPM, including:<br>• The evolution of the ASPM market and the challenges it solves.<br>• How ASPM benefits different teams and functions.<br>• What core components to look for in an ASPM solution.<br>• How to build a risk-based AppSec program and operationalize ASPM.</p>



<p><strong>Sponsored by</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/10/Apiiro.jpg" alt="" class="wp-image-663931" style="width:307px;height:86px" width="307" height="86" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x84/smart/files.scmagazine.com/wp-content/uploads/2023/10/Apiiro.jpg 300w, https://files.scmagazine.com/wp-content/uploads/2023/10/Apiiro.jpg 600w" sizes="(max-width: 307px) 100vw, 307px" /></figure>


Optimizing AppSec: A Deep Dive into ASPM’s Risk-Based Approach


<p>A new breed of adversaries has emerged — hybrid attackers. These assailants have mastered the art of combining multiple attack vectors, exploiting vulnerabilities and leveraging identities to execute one of the most devastating cybercrimes of our time — ransomware. Ransomware is not just the end goal; hybrid attackers often use it as part of their arsenal to cripple organizations as their attacks progress. &nbsp;</p>



<p>During this discussion, our experts will dive deep into the heart of the matter, shining a light on the problem that plagues modern cybersecurity — hybrid attacks. We&#8217;ll explore why all contemporary cyberattacks are evolving into hybrid forms and how attackers skillfully manipulate identities as their weapon of choice. Understanding this crucial connection is the first step towards securing your digital assets and data.&nbsp;</p>



<p>Don&#8217;t miss this opportunity to learn more about the tactics, techniques and procedures employed by malicious actors to infiltrate and compromise organizations. You’ll walk away with practical insights on how to protect your organization from the grasp of ransomware and how to combat hybrid attackers with integrated signal, so you can find and stop identity-based attacks before they become breaches.</p>


Ransomware

Generative AI

Unveiling the Hidden Threat: Hybrid Attackers Leveraging Identities to Execute Ransomware


<p>HTTPS is the gold standard for encrypting and protecting data on the web—yet almost 86% of cyberthreats hide in encrypted traffic, too. It’s a double-edged sword: even as encryption protects sensitive data, it’s a key means for threat actors to bypass defenses. With the bulk of malware, ransomware, and phishing attacks hidden in TLS/SSL, how can enterprises keep encrypted traffic? </p>



<p>The Zscaler ThreatLabz research team analyzed more than 29 billion blocked threats from the world&#8217;s largest security cloud, which processes more than 360 billion transactions daily.</p>



<p>Join this webinar with ThreatLabz experts to learn the key findings from the Zscaler ThreatLabz 2023 State of Encrypted Attacks report, including:</p>



<ul>
<li>A breakdown of the encrypted threat landscape</li>



<li>Key malware families and threat categories driving 24.3% growth in attacks</li>



<li>Geographic and industry trends, including massive growth in attacks on education (276.4%) and government (185%)&nbsp;</li>



<li>Analysis of real-world phishing attacks</li>



<li>Actionable best practices to secure TLS/SSL traffic and stop encrypted threats</li>
</ul>



<p></p>


Encryption

New Encrypted Attack Insights: Findings from the Latest Zscaler Report


<p>In this webcast, we dissect the lessons derived from ransomware attacks involving MOVEit, Doubledrive, and the MGM/Caesars breach—to empower organizations in fortifying their cybersecurity defenses.</p>



<p>The session will commence with an in-depth analysis of the MOVEit ransomware attack, unraveling the tactics employed by threat actors to exploit vulnerabilities in file transfer systems. Drawing parallels, we’ll explore the Doubledrive incident, emphasizing the significance of robust backup strategies and the role they play in mitigating ransomware risks.</p>



<p>The MGM/Caesars breach will be examined as a case study to underscore the evolving sophistication of ransomware tactics, shedding light on the importance of proactive threat intelligence and incident response planning.</p>



<p>Attendees will gain insights into the commonalities among these attacks, enabling them to develop a comprehensive</p>


Ransomware attack lessons, from MOVEit and Doubledrive to MGM/Caesars


<p>There is often no better teacher than failure. Instead of waiting to learn from your own failures, why not learn from others? Find out what third party breaches can teach us about third party risk and vendor due diligence! This webcast with Bill Brenner and Enterprise Security Weekly host Adrian Sanabria will walk through:</p>



<ul>
<li>Improving the vendor due diligence process by focusing on outcomes and exploring automation opportunities</li>



<li>Evaluating products</li>



<li>How to secure third-party software and prepare for the risks they create</li>



<li>Real-world breach examples and what they can teach us</li>
</ul>


Third-party code

Understanding third party risk by studying third party breaches


<p>Balancing tight security budgets with growing threats is challenging for resource-limited IT teams. Taking the right approach, even organizations with 50 &#8211; 2,000 employees can build resilient and effective cybersecurity.</p>



<p>Learn proven methods for strengthening security from industry experts.</p>



<p>Moderated by Bill Brenner of CyberRisk Alliance, our panel includes:</p>



<ul>
<li>Amanda Berlin, Blumira’s Head of Detection Engineering, will share real-world tips from her Defensive Security Handbook on architecting foundational controls on a budget.</li>



<li>Tom Lawrence, 25+ year IT thought leader will offer candid, pragmatic security advice for small, mid-size, and growing companies.</li>



<li>Paul Asadoorian, founder of Paul’s Security Weekly, will discuss leveraging open source tools and community resources.</li>
</ul>



<p>Discover low-cost techniques for implementing robust security architectures and how to leverage automated detections and human expertise to bolster understaffed teams. Amanda will walk through real customer incidents highlighting best practices for complex threats.</p>



<p>Plan to leave empowered to immediately strengthen cybersecurity readiness within existing budgets. With guidance from the panel, even lean IT teams can achieve industry-leading vigilance.</p>



<p>Reserve your spot for practical insights and advice for maximizing security.</p>


The Security Experts Next Door: Enterprise Defense on a Lean Budget


<p>The technology world in 2030 promises a landscape radically transformed by unprecedented advancements. As the cloud engulfs everything, organizations will grapple with ephemeral technology, a surge in regulations, and an unrelenting need for speed that most organizations aren’t ready for. This webinar explores the future of compliance and risk in this dynamic environment, outlining the essential shifts organizations must make today to thrive in the hyperspeed era in the future. Join CISOs who will delve into the intricate challenges that lie ahead and strategies to ensure a seamless transition into the future.</p>



<p>Your takeaways from this session:</p>



<ul>
<li>The role of continuous controls monitoring and compliance as code</li>



<li>How your organization can generate on-demand, audit-ready documentation</li>



<li>How to achieve the ultimate goal: a unified security, risk, and compliance strategy</li>



<li>Learn from other organizations, reducing 60% in audit prep and response time</li>
</ul>


Cloud migration

The regulatory landscape in 2030: What you need to know


<p>The cybercrime economy is thriving, driven by financially motivated bad actors who have established lucrative “dark” businesses in the light of day. Bad actors prioritize efficiency to maximize their illicit earnings, using bots for everything from buying up coveted concert tickets to draining bank accounts to even more sinister endeavors to human trafficking. Bad bot attacks increased 167%, according to recent research conducted by Arkose Labs. This traffic, coupled with the shift to human fraud farms when bots are blocked, has created a massive problem that threatens digital businesses and the safety of online consumers.</p>



<p>The activities of Storm-1152 illustrate the role malicious bots play and the influence of cybercrime marketplaces. Arkose Labs helped Microsoft disrupt the activities of Storm-1152 after the group bilked enterprises and consumers globally out of millions of dollars.&nbsp;</p>



<p>This SC Panelcast will unpack the role of bad bot traffic and the damage it can inflict, while offering guidance to help security teams fight back.</p>



<p>Panelists include CyberRisk Alliance SVP of Content Bill Brenner, Kevin Gosschalk, founder and CEO of Arkose Labs, and a banking-sector CISO whose organization experienced the threat.</p>



<p>The panel will explore:<br>The current state of bad bots, including their evolution, prevalence, and distribution across various online platforms, and their impact on Internet traffic.<br>Bot abuse analysis from Arkose Labs&#8217; comprehensive Bot Abuse Analysis Report, highlighting notable trends, patterns, and case studies that demonstrate the diverse range of industries affected by bad bot attacks.<br>Detection and mitigation strategies to detect and mitigate the threat.</p>


Cybercrime Marketplaces: The ubiquity of bad bot traffic and how to fight back


<p>High-profile breaches continue to highlight the multiple risks to organizations from their supply chain. With increasingly interconnected third-party networks leading to even greater risk exposure, it is not surprising that supply chain security is a top priority for both regulators and organizations. It is undoubtedly time to evolve our approach to securing the supply chain and move beyond tick-box assessments to benchmarking evidence of capability, but how?</p>



<p>Join a panel of experts as they provide key insights and steps to take in securing supply chain networks, including:</p>



<ul>
<li>The latest threats targeting supply chain networks, and lessons learned from those incidents</li>



<li>Effective protocols and strategies for identifying security vulnerabilities in third-party vendors</li>



<li>Proactive measures for your organization to take in order to bolster your incident response plan</li>
</ul>




Critical Connection: Strategies for Strengthening Supply Chain Defense


<p>Picus Security recently analyzed over 600,000 malware samples to identify the ten most common techniques leveraged by attackers.</p>



<p>Attend this webinar to learn about the key findings of the research, including the rise of evasive ‘Hunter-killer’ malware that systematically targets and impairs security controls to achieve its objectives.</p>



<p>Register now and discover:<br>• The ten most widely used MITRE ATT&amp;CK techniques<br>• Why and how adversary behaviors are evolving<br>• Ways to validate your readiness against sophisticated attacks</p>


Top Ten ATT&CK Techniques: The Rise of ‘Hunter-Killer’ Malware


<p>Identity and Access Management (IAM) solutions are no longer just ways to provide easy workforce access to applications, but critical tools in security and zero trust network access, creating the first line of defense against malicious actors and insider threats.&nbsp;<br>In this panel discussion, experts from CyberRisk Alliance and CyberArk will share their insights into trends in this evolution, as well as the best practices to leverage IAM solutions as a strategic security asset to protect organizations from cyberattacks, data breaches, and other threats. They will discuss the challenges and opportunities of IAM in the era of cloud, mobile, and social technologies, as well as the emerging trends and innovations in the field. Discussion points:</p>



<ul>
<li>The new definition of privilege: How users traverse the risk spectrum throughout the day, depending on the tools they use and the actions they take. &nbsp;This makes everyone a possible privileged user at any time.&nbsp;</li>



<li>Complexities of securing a hybrid workforce: The benefits of applying controls once reserved for the most privileged users but doing it in a way that balances security with productivity.</li>



<li>Multifactor authentication (MFA) can be one of the strongest tools against malicious behavior. &nbsp;But it’s shocking how many organizations deploy the weakest possible utilization of this tool, or don’t use it across their environment. &nbsp;Explore how employing modern MFA, including passwordless, and incorporating user behavior analytics and adaptive MFA can be a game changer in shutting down bad actors.&nbsp;</li>



<li>Employees understandably look for the easy button. That means reusing passwords and adopting consumer-focused tools to manage those weak or repurposed passwords. &nbsp;This introduces unintended risk. &nbsp;How should IT and security leaders consider managing applications and tools that require a single username and password, thus brought under the umbrella of single sign-on (SSO) and MFA?&nbsp;</li>



<li>The third-party conundrum: We all need to provide access</li>
</ul>


IAM Technologies

Beyond IAM: Achieving true identity security


<p>In the digital age, identity serves as both a shield and a sword in the realm of cybersecurity. Statistics reveal that 74% of breaches stem from the human element, highlighting the paradoxical nature of identity in the cyber era. This panel explores the interplay between social engineering and technological sophistication to detect these Identity Trojan Horses. The challenge is the ubiquity of digital identities across multiple IdP’s that further complicates the landscape, blurring the lines between authentication and access. This is blur or blind spot is where the Trojan Horse take advantage knowing they CAN have access. This panel will also discuss why we need to adapt this mindset of CAN the user have access to SHOULD the user have access. Come hear how organizations can fortify their defenses against identity-based breaches and address the visibility gap between authenticated identities and trusted access by a data-driven and AI-first approach.</p>


Detecting the Identity Trojan Horse: The Human Element of Cyber Breaches and its Paradox with Cyber Identity


<p>It’s not rocket science, it’s network security. And yet for many organizations, the road to securing employees and information often results in trade-offs to performance, agility, scalable services, and user experience. While first-generation SASE solutions promised companies a way out of this complexity, those early deployments failed to resolve the root causes of these growth pains. In this roundtable discussion, we’ll break down how Unified SASE as a Service finally gets it right in integrating network services with secure Zero Trust as a foundation. Our panel of experts and users of Unified SASE will share case studies illustrating its impact, the lessons learned, and how this platform can even harness new technologies (like AI and advanced analytics) to provide organizations a seamless, frictionless interstate of secure network transactions.</p>


SASE

Common-sense security: The case for unified SASE as a service


<p>In this webcast, we unravel the insights and implications behind the latest global AI security guidelines, distilling complex recommendations into four key takeaways that every cybersecurity professional should know. As nations grapple with the rapid adoption of artificial intelligence, regulatory bodies worldwide have collaboratively devised comprehensive guidelines to address the unique security challenges posed by AI technologies. Join our experts as they break down these guidelines, offering practical interpretations and actionable strategies to fortify your organization against emerging AI-related threats. From risk assessment frameworks to ethical considerations, we will explore the pivotal facets that shape the future of AI security on a global scale.</p>


4 key takeaways from new global AI security guidelines


<p>Cybersecurity tools, especially those experienced by end users, are often seen as blockers &#8211; built to create friction. We have been trained to believe that there must be a trade–off between security and user experience. If we are too strict users go around or just complain! Too lenient and we leave gaps for attackers to exploit. What if we begin to envision identity security as a business enabler? Join us as we talk about how better user experiences can decrease risk, protect all your data and resources while saving your organization money!</p>




Identity security and user experience – there shouldn’t be a trade-off


<p>AI is fundamentally changing how software is written. Developers are increasingly relying on code generated by leveraging generative AI tools and application security experts are scrambling to understand and mitigate security risks. To counteract this emerging threat, the developer community must take proactive measures and foster a culture of continuous learning that is essential to stay ahead of the ongoing battle for application security.<br>This webcast explores the intersection of AI and application security, helping you understand the new security challenges while emphasizing proactive measures to identify and address vulnerabilities. It will highlight the importance of:</p>



<ul>
<li>Integrating security from the outset of development</li>



<li>Leveraging AI for efficient vulnerability detection</li>



<li>Fostering collaboration between developers, security experts, and AI researchers</li>



<li>Ethical considerations and responsible AI practices are emphasized to build resilient and trustworthy software systems in the face of evolving cyber threats.</li>
</ul>


AI and AppSec: How to avoid insecure AI-generated code


<p>In today&#8217;s rapidly evolving threat landscape, enterprises face a daunting challenge: phishing attacks empowered by artificial intelligence (AI) and readily available phishing toolkits. Join this webinar to learn about the latest phishing trends, tactics, and predictions revealed in the Zscaler ThreatLabz 2024 Phishing Report. Experts from ThreatLabz will delve into a year&#8217;s worth of phishing data from the world&#8217;s largest security cloud, offering invaluable insights and strategies to strengthen your defenses for the era of AI-enhanced phishing.Register now to learn about:</p>



<ul>
<li>Top phishing targets by country, industry, and more</li>



<li>Common phishing scams and emerging attack vectors</li>



<li>Best practices and zero trust strategies to protect your organization</li>



<li>Projections on phishing trends for 2024-2025</li>
</ul>


Phishing

Uncovering a year of phishing data: latest trends and tactics


<p>As cyber threats continue to evolve, security teams are constantly challenged with the task of fortifying their organization&#8217;s defenses against a myriad of potential vulnerabilities. In this SC Panelcast, Tia Hopkins, Chief Cyber Resilience Officer &amp; Field CTO at eSentire, and Nathan Wenzler, Chief Security Strategist at Tenable, will delve into the pivotal role of exposure management in bolstering cyber resilience. From identifying and prioritizing vulnerabilities to implementing effective mitigation strategies, the panelists will provide invaluable insights into how exposure management can empower security teams to safeguard their organizations against emerging threats. Moderated by Bill Brenner, Head of Content at CRA, this discussion promises to equip cybersecurity professionals with actionable strategies to navigate the complex landscape of cyber resilience. Discussion points include:&nbsp;</p>



<ul>
<li>Defining exposure management and its similarities/differences with vulnerability management&nbsp;</li>



<li>How exposure management fits into cyber resilience&nbsp;</li>



<li>How eSentire and Tenable’s are partnering on vulnerability management to enable customers’ Exposure Management strategy</li>
</ul>


Exposure management: How organizations can use it to build cyber resilience


<p>In the ever-evolving landscape of cyber threats, organizations are sitting on a goldmine of untapped potential within their existing security infrastructure. Our expert panel will guide you through innovative strategies to leverage your current tools for enhanced threat intelligence capabilities. Discover practical insights on optimizing SIEMs, leveraging endpoint protection data, and harnessing the power of network monitoring for a comprehensive threat intelligence approach.</p>


Supercharging your threat intelligence with the tools you already have


<p>Most conversations around Identity Resilience focus on the prevention of attacks. But as statistics increasingly show that a major breach is a matter of “when”, not “if”, CISOs are realizing that their Identity Resilience strategy is missing a critical piece: response.&nbsp;<br><br>In this conversation, we’ll explore Identity Resilience from the lens of Business Continuity:</p>



<ul>
<li>What is Identity Resilience and why is it trending with CISOs?&nbsp;</li>



<li>How to build a strong partnership between risk teams and security teams.</li>



<li>Myths vs. realities of Disaster Preparedness for IAM environments.</li>



<li>Why most IAM backup plans are woefully inadequate.</li>



<li>Why regulators and insurers are starting to pay attention.</li>
</ul>


Identity Resilience: The Missing Piece to Securing Your Identities


<p>Amid concerns about data privacy and its ties to the Chinese government, President Biden recently signed a law banning TikTok nationwide unless it is sold, leaving security practitioners with a multitude of questions around the future of mobile app security. This SC Panelcast will explore the ongoing concerns around TikTok, how the potential ban may or may not impact your mobile security processes, and what security teams should be doing to better manage this and similar threats. Spoiler Alert: The range of mobile security threats goes well beyond data piracy and well beyond just TikTok, so banning TikTok is not sufficient to protect mobile users.<br>The good news: While the potential TikTok ban has security practitioners wondering what it all means for them, the best practices around mobile app security remain constant. We’ll capture the latest technological advances using solutions from Quokka as the example of how to bolster your defenses, with specific considerations for security teams, app developers and MSSPs.</p>


Bill Brenner

3 Key Challenges Facing the Channel in 2023

MSPs Vs. MSSPs: Understanding the Differences