Name: Security Operations in the Age of AI
Start: 2025-06-04T20:00:00Z
End: 2025-06-04T20:00:25.000Z
Location: BrightTALK
Rating: 4.8

Palo Alto Networks is the next-generation security company, leading a new era in cybersecurity by safely enabling applications and preventing cyber breaches for tens of thousands of organizations worldwide. Built with an innovative approach and highly differentiated cyberthreat prevention capabilities, our game-changing security platform delivers security far superior to legacy or point products, safely enables daily business operations, and protects an organization's most valuable assets. Find out more at www.paloaltonetworks.com or call us at 1-877-524-1031.

AI agents powered by the Model Context Protocol (MCP) are reshaping how enterprises work — coordinating tasks, integrating with tools and making autonomous decisions at scale. But the very power that makes MCP so transformative also makes it dangerous. Attackers don’t need to break your infrastructure; they just need to trick your AI. From prompt injections and impersonated services to excessive privilege and compromised “trusted” tools, MCP introduces a new class of vulnerabilities that can quietly erode revenue, trust and compliance.

Traditional security controls aren’t designed for this environment. AI agents move fast, interpret loosely and can be manipulated in ways legacy defenses can’t detect. The question isn’t whether MCP-enabled agents can be exploited — it’s how quickly adversaries will take advantage.

In this session, we’ll demystify MCP, expose the top security gaps it creates and share a practical security playbook for containing AI risk. Whether you’re an executive asking “what’s the business impact?” or a practitioner asking “how do I defend it?”, you’ll walk away with a clear roadmap for securing your agentic future.

You’ll learn:

● How MCP works — and why it’s becoming the backbone of agentic AI.
● The most common and dangerous ways AI agents can be tricked.
● Security strategies to control agent “agency” and prevent rogue behavior.
● What leaders must do now to protect AI-powered systems before attackers strike.

Join us to uncover the hidden risks in MCP — and how to defend your AI before it makes a decision you can’t take back.

Can your AI Be Tricked? Exposing the Security Gaps in MCP

AI systems are no longer theoretical targets — they’re already being exploited. From jailbreaks and prompt injections to data leaks and agent manipulation, attackers are using simple language to probe and break systems once thought secure. Traditional pentesting can’t keep pace with this reality. AI behaves unpredictably, its vulnerabilities change with context and every new update or integration introduces fresh risk.

In this session, we’ll explore why AI needs an entirely new red teaming playbook. You’ll hear real-world evidence of how even the most advanced models fail under adversarial testing, and why continuous red teaming — across models, applications and agents — is now essential. We’ll break down how red teaming works in practice, from simulating guardrail bypasses and data exfiltration to uncovering context-driven flaws that only appear in deployment.

You’ll learn:

● Why AI’s nondeterministic nature breaks the old red-teaming model.
● The most common attack vectors enterprises face today.
● How vulnerabilities differ in models, applications and agents.
● How continuous red teaming builds confidence for developers, executives and customers alike.

Join us to see how AI red teaming turns hidden flaws into actionable insights — helping you protect your business before attackers exploit the gaps.

Red Teaming Your AI Systems Before Attackers Do

Generative AI is transforming how businesses innovate — but it also opens the door to risks that only surface once systems go live. Even rigorously trained models can harbor hidden flaws that attackers exploit through prompt injection, jailbreaks, tool misuse or data exfiltration. These aren’t rare edge cases — organizations have already suffered financial loss, compliance penalties and reputational damage from AI failures.

In this webinar, we’ll show why static testing and traditional tools can’t keep pace with adaptive AI systems. You’ll learn:

• How vulnerabilities emerge when chatbots and agents interact with real users.
• Real-world cases where runtime attacks disrupted operations and eroded trust.
• Why legacy security methods fail to block AI-specific threats.
• A practical framework for runtime protection using inspection, monitoring and adaptive defenses.
• How Prisma AIRS™ AI Runtime Security delivers broad detection and low-latency safeguards without slowing innovation.

Join us to see how runtime protection transforms AI from an unpredictable risk into a trusted, resilient business enabler.

When Hidden Flaws Surface: Securing AI at Runtime

AI is a powerful driver of innovation, but it can introduce an invisible risk: unintentional data leaks. These leaks are often self-inflicted when employees, customers or partners unintentionally expose sensitive data through AI tools. Systems can remember, replicate and resurface confidential information in unexpected ways, leaving organizations vulnerable without a clear forensic trail. The ultimate risk isn’t just fines or a breach notification, but a profound loss of trust from customers, regulators and boards.

In this webinar, we'll shift the conversation from a technical problem to a trust-driven business imperative. You'll learn:

● Why traditional security models fail.
● The most common ways sensitive data slips into and out of AI systems.
● How to build a proactive AI governance strategy with real-time visibility and automated guardrails.
● How to accelerate AI adoption safely. 

Join us to move beyond reactive security and create a responsible AI framework that lets you innovate confidently.

When AI Leaks: Containing and Preventing Sensitive Data Leaks

AI is redefining what’s possible, with over 78% of global enterprises having integrated it into their operations. However, only 6% have an advanced AI security strategy framework. To compensate, many organizations are putting AI guardrails in place, hoping to seal security gaps without slowing innovation.

In this webinar, we'll expose the "guardrail trap" — the reason why these traditional mechanisms often fail under real-world pressure. Drawing on recent examples, we'll show you how adversaries exploit fragmented standards and risky design decisions, turning a "lethal trifecta" of external data, permissive tools and broad access rights into a major liability. 

You’ll leave with a clear framework for avoiding the guardrail trap — and a view into how Prisma AIRS™ can help your organization build AI systems that aren’t just functional, but resilient, compliant and trustworthy.

The Guardrail Trap: Why Existing AI Security Strategies Aren't Enough

Organizations face pressure as AI adoption accelerates and cloud environments expand, yet most lack full visibility into their security posture. With 79% of organizations reporting visibility gaps leading to three times more security incidents, the stakes are high. As AI spending surges across 96% of enterprises, identifying vulnerabilities in cloud networks and AI systems is critical.

This webinar explores three approaches to address security blind spots that put your organization at risk. Gain insights to protect cloud infrastructure and AI deployments before incidents occur.

· Techniques for assessing network risk in public cloud environments
· Strategies to test cloud firewalls against advanced threats
· Methods to identify exposures in AI applications, models, and data

Learn how complimentary tools can uncover security gaps and AI vulnerabilities missed by traditional methods. Watch to shift from reactive response to proactive security management.

3 Ways to Identify Your AI & Cloud Network Security Blind Spots

Cryptographically relevant quantum computers threaten traditional key exchange methods, leaving encrypted data vulnerable to harvest-now-decrypt-later attacks. Adversaries collect encrypted communications today, intending to decrypt them once quantum computers advance. Organizations must explore protection strategies beyond standard encryption.

This webinar examines quantum key distribution (QKD), an out-of-band key exchange technology using quantum mechanics instead of mathematical formulas. Unlike conventional methods, QKD generates encryption keys through a separate appliance, ensuring harvested data stays secure as attackers never access the key material. Topics include:

· How QKD integrates with VPN infrastructure
· Real-world use cases securing financial and government communications
· QKD’s advantages, limitations, and distance constraints

Learn how early adopters deploy QKD to protect sensitive data against future quantum threats.

What is Quantum Key Distribution?

Traditional random number generators may leave cryptographic keys vulnerable to attacks, including quantum computing threats. As organizations transition to quantum-resistant security, entropy quality for encryption keys is critical yet often overlooked.

This session explores quantum random number generators (QRNGs) and their role in enhancing data security. Palo Alto Networks experts discuss the differences between pseudo-random, true random, and quantum random number generators, highlighting why entropy quality is as vital as key length for protecting sensitive data. The session includes evidence of vulnerabilities from weak entropy and guidance on implementing QRNG technology.

· Types of random number generators and their security implications
· How weak entropy has compromised SSL/TLS servers and IoT devices
· Current QRNG options, from embedded chips to cloud-based services

Watch this webinar to learn how QRNGs can strengthen your cryptographic foundation.

What is Quantum Random Number Generator QRNG?

Quantum computing threatens encryption standards, making the shift to postquantum cryptography (PQC) essential. Traditional algorithms protecting sensitive data today will become vulnerable as quantum computers emerge.

This session provides security leaders a roadmap for PQC migration. Experts from Palo Alto Networks cover technical fundamentals, standardization efforts, and strategies for quantum readiness. Key topics include:

· NIST-approved PQC algorithms for lattice-based, hash-based, and code-based approaches
· Hybrid cipher strategies combining classical and postquantum keys for compatibility and security
· Crypto agility frameworks enabling rapid algorithm transitions
· Migration scope and timeline for VPNs, TLS, certificate authorities, and endpoints

Cryptographic transitions take time—TLS 1.1 remains widely supported despite deprecation. With PQC adoption likely taking 8-10 years, organizations must start planning now to protect against quantum threats.

What is Post-Quantum Cryptography?

The threat of quantum computing to cryptography is imminent, making quantum readiness essential. Delaying initiatives risks exposing sensitive data to harvesting attacks, where encrypted information is collected now and decrypted later when quantum computers advance.

This session provides a framework for transitioning to a quantum-resistant network. Experts from Palo Alto Networks outline steps to assess cryptographic posture, prioritize migration based on business impact, and implement interim protections. Topics include:

· Conducting a cryptographic inventory to identify vulnerabilities
· Categorizing data by sensitivity and business impact to guide priorities
· Strengthening VPN and TLS security against quantum threats
· Using labs to evaluate post-quantum cryptography

Quantum migration is a multi-year initiative requiring careful planning. Start now to protect data needing long-term confidentiality. Watch to build a tailored quantum readiness roadmap.

Kickstarting Your Quantum Readiness Plan

Quantum computing threatens enterprise security as traditional encryption like RSA and elliptic curve cryptography nears obsolescence. Cryptographically relevant quantum computers enable harvesting attacks, where adversaries collect encrypted data now to decrypt later, leaving organizations vulnerable.

This session examines quantum algorithms like Shor's and Grover's that compromise encryption, focusing on risks to VPNs, SSL/TLS, digital signatures, and software signing. Learn why nation-states are harvesting encrypted communications and why immediate action is critical. Topics include quantum-resistant upgrades for key applications, the urgency of addressing harvesting attacks, and challenges with early post-quantum cryptography implementations.

Watch this webinar to understand the quantum threat landscape and why transitioning to quantum-resistant infrastructure must be prioritized before adversaries exploit vulnerabilities at scale.

Quantum Threats: What Every CISO Should Know

The encryption securing digital communications faces a major threat from quantum computers, which could break cryptographic algorithms protecting financial transactions and government secrets. With rapid advancements and investments, a cryptographically relevant quantum computer may arrive sooner than expected.

This webinar explores the quantum computing threat and offers a roadmap for transitioning to quantum-resistant security. Experts Phil Quan and Ru Chesa from Palo Alto Networks discuss how quantum algorithms like Shor's and Grover's threaten encryption, vulnerabilities in current PKI infrastructure, and implications for security. Topics include:

· How quantum computing enables faster cryptographic attacks
· When quantum computers might break encryption
· Government mandates driving post-quantum cryptography
· Steps to inventory cryptographic assets and prioritize migration

Act now to build quantum-resistant defenses before encryption becomes obsolete.

Quantum Computing: Closer than you think–but not as difficult as you expect

Modern data centers face an unprecedented series of security challenges - an increasingly intense threat environment, new threat vectors and risks from every AI app, and the "East-West blind spot," where threats move laterally between servers, completely invisible to traditional perimeter firewalls. This problem grows exponentially in distributed, multi-site environments, where maintaining a consistent security posture often seems impossible.

Join experts from Arista and Palo Alto Networks to understand a unified solution that solves these challenges without requiring a complex network redesign. Learn how the Arista data center fabric intelligently steers traffic to the Palo Alto Networks Next-Generation Firewall for deep, Layer 7 inspection, with policy then enforced at wire speed directly in the network.

This session will demonstrate how this integrated solution:
● Eliminates the East-West blind spot in a single data center.
● Extends to provide a single, consistent security policy across a multi-site environment using a single, seamless management experience
● Avoids common multi-site issues like asymmetric routing and inefficient traffic "tromboning."

Discover how to build a scalable, consistent, and automated Zero Trust strategy for your entire data center infrastructure.

Comprehensive Data Center Security for the Age of AI

Attackers are fully focused on utilizing the identity when infiltrating organizations through their endpoints. Most security teams are still fighting these threats with disconnected tools, creating dangerous blind spots that let threats slip through undetected.

Don’t let siloed security create blind spots. Join us for this webinar where our speakers, Niels van Bennekom from CyberArk, and Nadav Shai Kanon from Palo Alto Networks, will walk through the importance of breaking down silos in your organization’s security to protect the identity at the endpoint.

What you’ll learn:
● The risks organizations face through approaching endpoint protection and security in a siloed manner.
● What a defense-in-depth strategy looks like when protecting endpoints.
● How to transform your organization’s endpoint security from reactive to proactive with solution integrations.

Bridging security gaps with defense-in-depth: Tackling vulnerabilities of siloed security

According to Unit 42®, 80% of security exposures occur in the cloud, with attacks increasing almost 2x in the past three years. To stay ahead, modern organizations are adopting cloud detection and response (CDR) approaches in record numbers.

Join Forrester VP and Principal Analyst Andras Cser and Palo Alto Networks Technical Evangelist Ory Segal in a candid discussion on the state of CDR. They'll dive deep into cloud security trends, discuss real customer challenges and provide actionable recommendations to help your organization build a resilient CDR program.

What you'll learn:

- The state of cloud security: Understand why traditional security strategies are failing and how attackers are exploiting new cloud vulnerabilities faster than ever.
- Proactive vs. reactive approaches: Discover how a prevention-first approach is crucial to stopping attacks before they escalate.
- A strategic roadmap: Walk away with concrete, actionable steps for building a resilient CDR program, including how to improve threat detection and automate response.

This is a must-attend session for security leaders looking to move beyond reactive defense and stop cloud attacks in real time.

The State of Cloud Detection & Response, Featuring Forrester

Digital transformation is changing how we do business, creating incredible opportunities for growth and innovation. But as we embrace new technologies and workflows, we also open the door to new cyber risks. 

Don't let these challenges slow your progress. Join us to learn how to stop being a gatekeeper and start turning your security operations into an enabler of business growth.

In this session, you'll discover:  
● Discover the latest social engineering trends from Unit 42 research.
● Empower your security teams with automation and machine-learning tools to focus on the most critical threats.
● Strengthen your organization's defenses by leveraging AI to respond faster and more effectively.
● See how the Cortex XSIAM, the AI-Driven SOC Platform makes all of this possible.

Register today and take the first step toward a more secure digital future.

Secure Your Innovations, Outsmart Cyber Risks

Phantom Taurus isn't just another advanced persistent threat (APT), it's an evolution of cyber espionage itself. This highly sophisticated Chinese APT group identified by Unit 42 uses custom-built, evasive malware to bypass traditional defenses and breach high-value targets.

In this live briefing, our Unit 42 experts will share exclusive, actionable intelligence from our investigation conducted over the past two and a half years. You will learn how to:

● Unmask the Adversary: Go behind the scenes of the investigation that began with a single activity cluster and resulted in a newly attributed threat actor.
● Dissect the Novel Malware: Understand the details of the NET-STAR malware suite, including its fileless components and sophisticated evasion techniques.
● Harden Your Defenses: Learn the TTPs of Phantom Taurus to better protect yourself, and see how Palo Alto Networks provides a comprehensive defense against this new threat.

Get the insights you need to stop Phantom Taurus in your organization.

To learn more, check out the threat research: http://unit42.paloaltonetworks.com/phantom-taurus

UNMASKED: Inside a New Chinese Nexus APT

The truth? Upgrading from QRadar to Cortex XSIAM is easier than you think. Join Palo Alto Networks and IBM as we separate fact from fiction when it comes to modernizing your SOC. 

In this fast-paced myth-busting session, we’ll tackle the top concerns about moving to a cloud-native, AI-powered SOC, from fears of time-consuming deployments to worries about cost, complexity, and security. Hear directly from security leaders who’ve made the switch—and haven’t looked back.

Featuring Chris Meenan, formerly the VP of Security Product Management, Threat Management at IBM, now Security Operations Transformation Leader at Palo Alto Networks, Bill Crawford, VP of Sales at IBM, and Danny Milrad, Principal Product Marketing Manager for Unit 42 at Palo Alto Networks, this session delivers expert insights, real customer stories, and practical tips to simplify your journey from QRadar to the future of security operations.

What you’ll learn:
● Why QRadar customers are making the move now.
● What real customers say about migration timelines and outcomes.
● How IBM and Palo Alto Networks can help you upgrade seamlessly.

Don’t let outdated assumptions hold your SOC back. It’s time to debunk the myths and move forward with confidence.

5 QRadar Migration Myths Debunked: Why You Should Move to a Cloud-Native, AI-Driven SOC

In today’s threat landscape, a cyber attack is no longer a question of if—but when. The real test is how quickly and confidently an organization can bounce back. Unfortunately, traditional tools often leave teams scrambling with delayed insights, noisy alerts, and outdated assumptions—especially when AI workloads and modern cloud environments are in play.
 
During this fireside chat, you’ll witness an expert deep dive into what happens after a security breach—and how to turn a moment of crisis into a catalyst for security maturity. By watching, you’ll learn how to:
 
• Detect, contain, and mitigate threats in real time
• Prevent AI-specific risks
• Build lasting resilience through continuous visibility and intelligent automation
• And more
 
Tune in now to equip your organization with the strategies needed to bounce back stronger than ever in 2025 and beyond.

Best Practices for Bouncing Back Stronger after a Cyber Attack

The growth of open-source AI in the enterprise has been nothing short of phenomenal. Enterprise Strategy Group (ESG) research found that 99% of organizations are actively using, exploring or experimenting with AI in their environments.

As organizations accelerate their AI initiatives, the adoption of open-source tools has become essential. But there isn’t a commonly known playbook for how to leverage open-source AI, and rapid changes in AI models, tools, and frameworks means there is currently a steep learning curve. 

In this exclusive webinar, open-source visionary and co-founder of Anaconda, Peter Wang, shares insights about the growth and challenges of the open-source AI phenomena with Mark Beccue, ESG Principal Analyst. Tune in as the pair unpack:
• How open-source tools provide unparalleled flexibility, cost-effectiveness and access to cutting-edge tech
• Best practices for operationalizing AI with open-source tools
• How to overcome the AI readiness gap 
• Where & how Anaconda assists customers in their AI journeys

Understanding the State of Enterprise Open-Source AI & Adoption Challenges

Every minute of business disruption costs organizations millions – and cyber attackers know it. As threat actors weaponize AI and exploit zero-day vulnerabilities with unprecedented speed, the difference between survival and failure often comes down to how quickly you can recover from an attack.

Modern cyber resilience demands a paradigm shift – moving beyond traditional security measures to create business-aligned defense strategies. By identifying and protecting mission-critical assets through the Minimum Viable Company (MVC) framework, security leaders can ensure business continuity even in the face of sophisticated attacks while optimizing resource allocation and demonstrating clear ROI to the board.

Join Roselle Safran, CEO & Founder of KeyCaliber, as she shares battle-tested strategies for building and implementing a cyber resilience program that directly supports business objectives and ensures operational continuity.

Key Takeaways:

- Learn how to identify and define your organization's Minimum Viable Company (MVC) components to prioritize protection of business-critical assets
- Discover methodologies for aligning cyber resilience strategies with business objectives and risk appetite
- Master techniques for testing resilience capabilities against real-world scenarios without disrupting operations
- Gain practical insights into implementing and measuring the effectiveness of your cyber resilience program through business-focused metrics

Business-Centric Cyber Resilience: Protect What Matters Most

In today’s threat landscape, a cyber attack is no longer a question of if—but when. The real test is how quickly and confidently an organization can bounce back. Traditional tools often leave teams scrambling with delayed insights, noisy alerts, and outdated assumptions—especially when AI workloads and modern cloud environments are in play.

Join CSO & Board Member Rinki Sethi and Upwind CPO Joshua Burgin for a deep dive into what happens after the breach—and how to turn a moment of crisis into a catalyst for security maturity. We’ll explore the critical capabilities security teams need to contain threats, prioritize risk, and rebuild trust—with speed and precision.

You’ll learn how to:
• Use live runtime signals to reconstruct what happened—across cloud and GenAI workloads
• Cut through the noise and focus
• Detect, contain, and mitigate threats in real time, not post-mortem
• Prevent AI-specific risks
• Align security and engineering for a faster, more coordinated response
• Build lasting resilience through continuous visibility and intelligent automation

Whether you’re responding to your first major breach or refining your playbook, this session will equip you with the strategies—and tech stack—to bounce back stronger than ever in 2025 and beyond.

Respond Smarter, Recover Faster, and Build Resilience with Runtime and GenAI-Aware Security

The emergence of quantum computing presents a unique challenge to the cybersecurity landscape. This transformative technology poses significant risks to current encryption methods, particularly for asymmetric cryptography systems like RSA and Diffie-Hellman, which secure most network communications today.
Organizations face a critical challenge: their existing cryptographic infrastructure may soon become obsolete against quantum computing capabilities. 
 
This presentation offers vital strategies for preparing for this transition, similar in scope to the Y2K challenge. The solutions presented are particularly valuable because they follow NIST guidelines rather than vendor-specific approaches, providing a standardized framework for organizations to assess their risk exposure and implement quantum-resistant algorithms systematically.
 
Join John Bruggeman (Virtual CISO, CBTS) to get a roadmap to transition from current encryption methods to quantum-resistant alternatives, ensuring long-term data security.

Key takeaways:
- Quantum Risk Assessment: Learn how quantum computing threatens current encryption algorithms and data privacy
- Strategic Implementation: Discover the essential steps for identifying at-risk data, conducting thorough data inventories, and documenting current cryptography usage across your organization's systems and tools.
- Industry Impact Assessment: Understand how to quantify and document quantum computing risks specific to your industry
- Transition Planning: Master the approach to implementing NIST-guided quantum-resistant solutions through a systematic, long-term project framework

Post Quantum Cryptography: Securing the Future

From data breaches to ransomware attacks, the cost of cybercrime is skyrocketing, demanding a new approach to security. Playing defense is no longer enough. Organizations need to anticipate threats and build resilience into their systems.  

CISOs and security leaders face immense pressure to stay ahead of the curve and build resilient organizations capable of withstanding and recovering quickly from security breaches. A product-led approach offers a proactive, data-driven solution for incident response, transforming security events into opportunities for continuous improvement. 

In this session, Oksana Denesiuk, product lead for billing and payments at Kaiser Permanente and ISSA Advisory Board Member, explores how cybersecurity teams can adopt a product mindset to enhance incident response, leveraging agile methodologies, iterative learning, and customer-centric thinking. 

Key Takeaways
- Embrace a product-centric approach to incident response, treating security incidents as valuable data points for continuous improvement.
- Integrate automated threat detection, secure coding practices, and incident learnings into the product roadmap.
- Use post-incident analytics, telemetry, and threat intelligence to refine security controls, enhance detection capabilities, and reduce the attack surface.
- Implement AI-driven detection, automated remediation workflows, and security orchestration (SOAR) to improve MTTR and MTTD.

Turning Incidents into Insights: A Product-Led Approach to Incident Response

Are you updating or reassessing your email security system to stay ahead in the ever-evolving threat landscape?

To help you make informed decisions to protect your organisation, our cybersecurity experts discuss:

• The findings of the 2024 Gartner® Magic Quadrant™ for Email Security Platforms report
• The current email threat landscape, the rise of AI and other emerging trends for 2025
• How to evaluate the strengths and weaknesses of your email security solutions
• Best practice strategies to mitigate email threats and protect your organisation’s sensitive data

Email Security in 2025: analyst insights, the rise of AI and strategic defences

The way employees communicate and collaborate is constantly evolving, and so too are the security threats they face. The rise of generative AI adds a new layer of complexity, requiring CISOs to proactively address the risks of data loss and potential harm to the organization.

Traditional security approaches often fall short in addressing the unique challenges posed by modern collaboration tools and the integration of GenAI. Understanding and mitigating these risks is critical for maintaining data privacy, preventing leakage, and ensuring compliance. We'll share Metrigy's latest research data to reveal actionable strategies for a comprehensive, business-aligned security strategy.

Join Irwin Lazar (President and Principal Analyst at Metrigy)  to discover the key components of a modern security approach, including how to:

- Establish alignment between IT, collaboration, and security teams to address evolving threats.
- Identify emerging threats stemming from new applications and out-of-band communications.
- Understand how generative AI creates new risks for data privacy, leakage, and effective data management.
- Develop a comprehensive security strategy tailored for collaborative environments and the GenAI landscape.
- Evaluate the benefits of third-party platforms optimized for collaboration and GenAI security to enhance your security posture.

Secure Collaboration in the Age of GenAI: A CISO's Guide to Risk Mitigation

Join us for an engaging fireside chat as we explore the evolving cyber threat landscape targeting the financial sector. We'll discuss key insights into the rise in DDoS attacks, AI-driven bot traffic, and sophisticated phishing campaigns.

Learn how attackers are leveraging AI to bypass defenses and execute deepfake phishing, and understand the impact of prolonged DDoS-as-a-Service and hacktivist campaigns. We'll also dive into the credential stuffing economy, revealing the vulnerabilities exploited by attackers.

Discover actionable defenses to stay ahead, such as integrating AI into SOC operations, enhancing authentication and API security, and adopting proactive threat intelligence. This session will emphasize the importance of AI-driven, intelligence-led security approaches to protect your financial institution in an increasingly complex digital landscape.

Don't miss this opportunity to stay informed and prepared for the next wave of cyber threats.

Other topics to be discussed include:

1. 2025 Cyber Threat Snapshot: Key Trends Shaping Financial Security
2. Key Takeaways from FS-ISAC 2024
3. Deep Dive: Credential Stuffing Economy & Emerging Attack Vectors
4. Actionable Defenses: How FSIs Can Stay Ahead

Securing Financial Institutions: Navigating the Next Wave of Cyber Threats

In the ever-evolving landscape of DevOps, the paradigm is now shifting - where security is taking the central stage. With vast surface areas including containers, cloud, repositories and third-party components, cyber threats became more prominent than ever before in DevOps.

This presentation will delve into the evolution from traditional DevOps to the advanced usage of artificial intelligence (AI) technologies to automate and optimize the software development and delivery processes. This includes automating code scanning, testing and deployment processes while eliminating the threats in each possible way in the cycle.

In this session, join Jyotirmayee Pradeep Kumar (Vice President - Cloud DevOps at a well-known global bank) as she unravels the stages of integration of AI at each phase of DevOps. Topics for discussion include:
- Types of AI used in DevOps.
- Benefits of using AI in DevOps.
- Implementation of AI in DevOps.
- Best practices for using AI in DevOps.
- Eliminating security threats using AI in DevOps.

Security Risks to Consider with AI Integration: AI in DevOps

Traditional penetration tests often miss the mark, failing to replicate the real-world tactics of today's sophisticated threat actors. In this session, Alex Holden, CISO of Hold Security, cuts through the noise and reveals how to transform your pen testing program with actionable threat intelligence.

You'll discover the latest attack trends and learn practical methods to simulate realistic cyber threats against your own defenses. From vulnerability exploitation to ransomware and social engineering, this session provides a hands-on guide to assessing your security readiness against the attacks that matter most right now. Leave with a clear roadmap to build a more resilient and threat-informed security posture.

Key Takeaways

- Understand the limitations of traditional pen testing and why threat intelligence is crucial
- Learn practical techniques for incorporating real-world attack simulations into your security assessments
- Gain a framework for building a more resilient and proactive security posture based on actionable threat intelligence

Smarter Pen Testing with Threat Intel

It takes valuable time to sift through the ever-increasing number of cyber threats and stop those likely to result in a breach. The faster your team can resolve that unending flow of incidents, the better.

Expert security teams are just one part of the solution. Add the latest AI tools to consolidate and simplify your existing security operations technologies, accelerating time to resolve critical incidents. Finally, prove to your stakeholders that everything is perfectly handled. See how Lumen Technologies is achieving this in this valuable session.

Sign up for our webinar, Empower the CISO’s organization with ServiceNow AI and automation, to supercharge your existing security operations. Lumen Technologies’ Geoff Krahn and ServiceNow’s Julian Azaret will explain how to:

- Apply intelligent workflows and generative AI
- Inspire confidence in your board, company, and customers
- Slash incident resolution time by up to 72%
- Take this simple step to ensure that your security team can be ready for future threats.

Empower the CISO's organization with ServiceNow AI and automation

The transformative potential of AI demands robust security and Google Cloud is uniquely positioned to help organizations accelerate their AI journey by providing capabilities to holistically manage risk across the AI lifecycle. Join this session to learn about how you can securely navigate the evolving AI landscape with new AI Protection capabilities, including Model Armor, our LLM guardrails solution, which allows organizations to apply security and safety controls to gen AI applications.

Managing AI Risk with Confidence

With 98% of organizations experiencing vendor breaches, preparedness is critical. This webinar equips CISOs and security leaders with strategies to effectively manage third-party cyber incidents. Learn how to leverage a robust playbook to move from reactive scrambling to proactive resilience.

Attend to learn how to:

- Stop Scrambling: Implement rapid response frameworks.
- Communicate Clearly: Develop winning crisis communication plans.
- Become Proactive: Discover preventative best practices.
- Ask the Right Questions: Vet vendor cybersecurity effectively.
- Learn from the Pros: Gain insights from real-world scenarios.

Don't let vendors be your vulnerability. Join us to streamline response, communicate effectively, and build a stronger digital ecosystem against escalating third-party threats.

A CISO's Guide to Mastering Cyber Incident Response: Are Your Vendors Your Weakest Link?

To succeed as a CISO in 2025, you first need guts and luck. This year is poised to bring huge disruption. Unless you have been involved in the design, delivery, direction and drivers for an organization’s technology infrastructure, are supported by effective management processes and procedures, and have a large budget and resources, you will need to re-evaluate your strategy.

This webinar will challenge your understanding of good practices and focus on “known, knowns”, identifying the challenges that can arise for the "SHOCKS, HORRORS and EXCUSES" that accompany significant disruptions. It was also explore a need to learn lessons from the past to prepare for the future.

Together we will consider challenges arising for CISOs, by answering:
1) What key areas should CISOs focus on during 2025?
2) Why should CISOs establish an operational resilience strategy? 
3) How would scenarios versus resources assist CISOs in their strategic delivery? 

Tune into this session presented by operational resilience expert Steve Yates, as he explores the challenges faced by CISOs, and why their function is so critical to the survival of organizations and society, especially as nation state actors and other hacker groups seeks to attack our company and personal data.

Viewers will come away from this session with the ability to:
- Form an understanding of an operational risk approach.
- Consider the challenges that exist in adopting a “siloed” approach. 
- Know the need of exercising your organization for a critical scenario.

What are the Top CISO Priorities for 2025?

A powerful alliance is formed when CISOs and boards unite, paving the way for enhanced digital resilience. However, differences in how to prioritize and measure the impact of cybersecurity can create misalignment. Join to explore the top 5 gaps between CISOs and the board.

Bridge the Gap – CISO and the Board

CISO Summit

Attackers are leveraging AI to enhance the speed, scale, and sophistication of their cyberattacks, posing a significant challenge to traditional defense mechanisms. Amidst a staggering increase of 300% annually in AI-driven attacks, the critical factor lies in their speed, highlighting the urgency for security measures to operate in near real-time to mitigate threats effectively. 

The traditional way of doing security is ill-equipped for real-time defense. We also believe that AI can potentially empower defenders far more than attackers. However, the effectiveness of AI in cybersecurity greatly depends on integrating data and automation within a unified platform.  This session will explore the value of a unified AI, data, and automation platform in enhancing cybersecurity defenses, improving incident response capabilities, and enabling proactive threat hunting. 

Join us to delve into the key strategies for leveraging AI in cybersecurity and learn how a cohesive platform can empower CISOs to stay ahead of emerging threats in the age of AI.

Security Operations in the Age of AI

Palo Alto Networks

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Security Operations in the Age of AI

Presented by

About this talk

Palo Alto Networks