Name: Best Practices for Cloud Detection and Response: Real-World Lessons from Multi-Cloud Attacks
Start: 2026-01-14T01:17:00Z
End: 2026-01-14T01:17:56.000Z
Location: BrightTALK
Rating: 5

Palo Alto Networks is the next-generation security company, leading a new era in cybersecurity by safely enabling applications and preventing cyber breaches for tens of thousands of organizations worldwide. Built with an innovative approach and highly differentiated cyberthreat prevention capabilities, our game-changing security platform delivers security far superior to legacy or point products, safely enables daily business operations, and protects an organization's most valuable assets. Find out more at www.paloaltonetworks.com or call us at 1-877-524-1031.

Discover how to effectively deploy autonomous AI agents to transform your security operations from reactive to proactive defense postures. This webinar explores practical implementations of agentic AI systems that can independently monitor, detect, and respond to emerging threats across your digital ecosystem. Security leaders will learn how to architect multi-agent security frameworks that coordinate across detection, analysis, and response functions while maintaining appropriate human oversight.

Agentic AI for Security Defense: Building Autonomous Cyber Resilience

Go behind the scenes of a pre-disclosure discovery to see how threat hunters identified a critical Remote Code Execution chain targeting Sharepoint servers 24 hours before the CVE was released.

Intercepting the ToolShell Zero-Day Before the Headlines

Explore the economy of "access brokers" who maintain dormant network footholds for years, and learn why detecting these silent threats requires analyzing statistical anomalies and process deviations rather than waiting for malicious execution.

The Detection Nightmare: Years Pass Without a Move

Cloud security incidents persist, with research showing sensitive data exposure and infiltration remain major threats despite security investments. Managing multiple cloud providers while accelerating development cycles creates exploitable gaps.
 
This webinar explores why cloud incidents disproportionately contribute to breaches and how unified platforms address these challenges. Learn how contextual intelligence and AI-powered solutions help balance development speed with security in multi-cloud environments.
 
· How incomplete alert context causes 75% of cloud incidents and delays detection
· Barriers to achieving a unified view across cloud security operations
· Strategies for integrating security data from code to cloud infrastructure
· Proven improvements in response times and compliance through unified platforms
· 82% of orgs improve their detection and response KPIs with an integrated platform
 
Discover how organizations enhance cloud security by uniting development, operations, and security teams with AI-driven, context-aware platforms

Effective Cloud Security: The Need For a Unified Platform that Spans Code to Cloud to the SOC

Go inside the Lazarus Group’s attack methodology to understand how they weaponized a legitimate application, and why analyzing software behavior—not just digital signatures—is the only way to stop supply chain attacks before they are disclosed.

The 3CX Supply Chain Attack: When Trusted Software Turns Malicious

As enterprises race to adopt generative AI, most overlook the crucial reality: LLMs don’t behave like traditional applications and create an entirely new class of security risk. From prompt injection and data leakage to plugin abuse and shadow agents, the risks associated with LLMs are often misclassified and rarely mitigated.

Dive into a detailed look at the newly defined OWASP Top 10 for LLM Applications, including the first-ever interactive threat model for GenAI environments. You will receive practical guidance on emerging AI threats and see how Palo Alto Networks’ AI Security solutions and services can give you control across the AI lifecycle.

You will delve into:
● The 10 most critical vulnerabilities in LLM-powered apps
● Real cases of model abuse, data leakage and prompt injection
● What preventive and detective controls to prioritize first

Navigating the OWASP Top 10 for LLM Applications: What Security Leaders Need to Know

Security operations are at a breaking point as AI-powered threats outpace the legacy, human-centric SOC.To combat AI-enabled adversaries, SecOps must abandon slow, traditional SIEMs and unify security operations on an AI-driven, automation-first platform to detect, investigate and respond at machine speed. .  
 
This webinar explores how organizations are rethinking the security data layer and SecOps modernization in the AI era. Learn why two-thirds of organizations are reevaluating SIEM solutions and how platform-based approaches help tackle growing challenges. Key topics include:
 
Unleash AI automation beyond SOAR for autonomous, rapid threat response.
Transform SIEM into an integrated AI-driven SOC platform that unifies data and streamlines SecOps.
Evolve your security data layer without rip-and-replace risk, protecting all investments in rules and threat intelligence.

 
Watch to see how modern SecOps platforms help defenders match AI-enabled attackers’ speed while reducing complexity.

Modernizing SecOps and SIEM for the AI era

Join us for the webinar "Exploring the Importance of Smart, Connected and Secure Aviation" to discover how digital transformation is reshaping airport operations and passenger experiences. This engaging session will feature industry experts discussing key topics, including the role of private wireless, 5G, AI, and cybersecurity in building smarter and safer airports. Panelists will share insights into optimizing the passenger journey through connected ecosystems and Industry 4.0 use cases, as well as explore emerging trends and future opportunities in aviation.
 
Attendees will gain valuable insights into successful deployments, technical best practices, and strategies to enhance operational efficiency, passenger satisfaction, and digital trust in a connected airport environment.

If you already hear from us, we will continue to contact you in the same way. You can withdraw your consent at any time. To find out more about how we use your personal data, including to personalize our interactions with you, please see Nokia General Privacy Notice (https://www.nokia.com/privacy/general-notice/)

Exploring the Importance of Smart, Connected and Secure Aviation

Traditional security posture tools bury your team in thousands of compliance-focused alerts, leaving you exposed to the leading causes of breaches: misconfigurations and over-privileged IAM access. The attack surface also includes sensitive data sprawl (DSPM) and complex GenAI model risks (AI-SPM). You need to know what attackers are actually targeting, not just what is misconfigured.

Join experts from Unit 42, Palo Alto Networks’ elite threat research team and Cortex Cloud product specialists to transform your cloud security. 

In this webinar, you will learn to:

● Move Beyond Compliance: Understand why compliance-only CSPM fails and hear Unit 42 insights on how attackers target data and AI assets.
● Prioritize with Intelligence: Discover how Cortex Cloud delivers a decisive Risk Score by correlating misconfigurations, data sensitivity, and Unit 42 threat TTPs.
● Unify and Secure: Explore Cortex Cloud, the comprehensive CNAPP solution that unifies CSPM, DSPM, and AI-SPM across the entire lifecycle.
● Defend the AI Frontier: Implement visibility and control over your AI stack, scanning model pipelines and preventing data leakage risks.

Stop reacting to noisy alerts. Start proactively preventing breaches by defending the assets that matter most—your data and AI innovations—with intelligence-driven security. Watch the webinar to learn how.

Cortex Cloud + Unit 42: Stop Alerts, Start Preventing Breaches

AI agents powered by the Model Context Protocol (MCP) are reshaping how enterprises work — coordinating tasks, integrating with tools and making autonomous decisions at scale. But the very power that makes MCP so transformative also makes it dangerous. Attackers don’t need to break your infrastructure; they just need to trick your AI. From prompt injections and impersonated services to excessive privilege and compromised “trusted” tools, MCP introduces a new class of vulnerabilities that can quietly erode revenue, trust and compliance.

Traditional security controls aren’t designed for this environment. AI agents move fast, interpret loosely and can be manipulated in ways legacy defenses can’t detect. The question isn’t whether MCP-enabled agents can be exploited — it’s how quickly adversaries will take advantage.

In this session, we’ll demystify MCP, expose the top security gaps it creates and share a practical security playbook for containing AI risk. Whether you’re an executive asking “what’s the business impact?” or a practitioner asking “how do I defend it?”, you’ll walk away with a clear roadmap for securing your agentic future.

You’ll learn:

● How MCP works — and why it’s becoming the backbone of agentic AI.
● The most common and dangerous ways AI agents can be tricked.
● Security strategies to control agent “agency” and prevent rogue behavior.
● What leaders must do now to protect AI-powered systems before attackers strike.

Join us to uncover the hidden risks in MCP — and how to defend your AI before it makes a decision you can’t take back.

Can your AI Be Tricked? Exposing the Security Gaps in MCP

AI systems are no longer theoretical targets — they’re already being exploited. From jailbreaks and prompt injections to data leaks and agent manipulation, attackers are using simple language to probe and break systems once thought secure. Traditional pentesting can’t keep pace with this reality. AI behaves unpredictably, its vulnerabilities change with context and every new update or integration introduces fresh risk.

In this session, we’ll explore why AI needs an entirely new red teaming playbook. You’ll hear real-world evidence of how even the most advanced models fail under adversarial testing, and why continuous red teaming — across models, applications and agents — is now essential. We’ll break down how red teaming works in practice, from simulating guardrail bypasses and data exfiltration to uncovering context-driven flaws that only appear in deployment.

You’ll learn:

● Why AI’s nondeterministic nature breaks the old red-teaming model.
● The most common attack vectors enterprises face today.
● How vulnerabilities differ in models, applications and agents.
● How continuous red teaming builds confidence for developers, executives and customers alike.

Join us to see how AI red teaming turns hidden flaws into actionable insights — helping you protect your business before attackers exploit the gaps.

Red Teaming Your AI Systems Before Attackers Do

Generative AI is transforming how businesses innovate — but it also opens the door to risks that only surface once systems go live. Even rigorously trained models can harbor hidden flaws that attackers exploit through prompt injection, jailbreaks, tool misuse or data exfiltration. These aren’t rare edge cases — organizations have already suffered financial loss, compliance penalties and reputational damage from AI failures.

In this webinar, we’ll show why static testing and traditional tools can’t keep pace with adaptive AI systems. You’ll learn:

• How vulnerabilities emerge when chatbots and agents interact with real users.
• Real-world cases where runtime attacks disrupted operations and eroded trust.
• Why legacy security methods fail to block AI-specific threats.
• A practical framework for runtime protection using inspection, monitoring and adaptive defenses.
• How Prisma AIRS™ AI Runtime Security delivers broad detection and low-latency safeguards without slowing innovation.

Join us to see how runtime protection transforms AI from an unpredictable risk into a trusted, resilient business enabler.

When Hidden Flaws Surface: Securing AI at Runtime

AI is a powerful driver of innovation, but it can introduce an invisible risk: unintentional data leaks. These leaks are often self-inflicted when employees, customers or partners unintentionally expose sensitive data through AI tools. Systems can remember, replicate and resurface confidential information in unexpected ways, leaving organizations vulnerable without a clear forensic trail. The ultimate risk isn’t just fines or a breach notification, but a profound loss of trust from customers, regulators and boards.

In this webinar, we'll shift the conversation from a technical problem to a trust-driven business imperative. You'll learn:

● Why traditional security models fail.
● The most common ways sensitive data slips into and out of AI systems.
● How to build a proactive AI governance strategy with real-time visibility and automated guardrails.
● How to accelerate AI adoption safely. 

Join us to move beyond reactive security and create a responsible AI framework that lets you innovate confidently.

When AI Leaks: Containing and Preventing Sensitive Data Leaks

AI is redefining what’s possible, with over 78% of global enterprises having integrated it into their operations. However, only 6% have an advanced AI security strategy framework. To compensate, many organizations are putting AI guardrails in place, hoping to seal security gaps without slowing innovation.

In this webinar, we'll expose the "guardrail trap" — the reason why these traditional mechanisms often fail under real-world pressure. Drawing on recent examples, we'll show you how adversaries exploit fragmented standards and risky design decisions, turning a "lethal trifecta" of external data, permissive tools and broad access rights into a major liability. 

You’ll leave with a clear framework for avoiding the guardrail trap — and a view into how Prisma AIRS™ can help your organization build AI systems that aren’t just functional, but resilient, compliant and trustworthy.

The Guardrail Trap: Why Existing AI Security Strategies Aren't Enough

Organizations face pressure as AI adoption accelerates and cloud environments expand, yet most lack full visibility into their security posture. With 79% of organizations reporting visibility gaps leading to three times more security incidents, the stakes are high. As AI spending surges across 96% of enterprises, identifying vulnerabilities in cloud networks and AI systems is critical.

This webinar explores three approaches to address security blind spots that put your organization at risk. Gain insights to protect cloud infrastructure and AI deployments before incidents occur.

· Techniques for assessing network risk in public cloud environments
· Strategies to test cloud firewalls against advanced threats
· Methods to identify exposures in AI applications, models, and data

Learn how complimentary tools can uncover security gaps and AI vulnerabilities missed by traditional methods. Watch to shift from reactive response to proactive security management.

3 Ways to Identify Your AI & Cloud Network Security Blind Spots

Cryptographically relevant quantum computers threaten traditional key exchange methods, leaving encrypted data vulnerable to harvest-now-decrypt-later attacks. Adversaries collect encrypted communications today, intending to decrypt them once quantum computers advance. Organizations must explore protection strategies beyond standard encryption.

This webinar examines quantum key distribution (QKD), an out-of-band key exchange technology using quantum mechanics instead of mathematical formulas. Unlike conventional methods, QKD generates encryption keys through a separate appliance, ensuring harvested data stays secure as attackers never access the key material. Topics include:

· How QKD integrates with VPN infrastructure
· Real-world use cases securing financial and government communications
· QKD’s advantages, limitations, and distance constraints

Learn how early adopters deploy QKD to protect sensitive data against future quantum threats.

What is Quantum Key Distribution?

Traditional random number generators may leave cryptographic keys vulnerable to attacks, including quantum computing threats. As organizations transition to quantum-resistant security, entropy quality for encryption keys is critical yet often overlooked.

This session explores quantum random number generators (QRNGs) and their role in enhancing data security. Palo Alto Networks experts discuss the differences between pseudo-random, true random, and quantum random number generators, highlighting why entropy quality is as vital as key length for protecting sensitive data. The session includes evidence of vulnerabilities from weak entropy and guidance on implementing QRNG technology.

· Types of random number generators and their security implications
· How weak entropy has compromised SSL/TLS servers and IoT devices
· Current QRNG options, from embedded chips to cloud-based services

Watch this webinar to learn how QRNGs can strengthen your cryptographic foundation.

What is Quantum Random Number Generator QRNG?

According to Unit 42®, 80% of security exposures occur in the cloud, with attacks increasing almost 2x in the past three years. To stay ahead, modern organizations are adopting cloud detection and response (CDR) approaches in record numbers.

Join Forrester VP and Principal Analyst Andras Cser and Palo Alto Networks Technical Evangelist Ory Segal in a candid discussion on the state of CDR. They'll dive deep into cloud security trends, discuss real customer challenges and provide actionable recommendations to help your organization build a resilient CDR program.

What you'll learn:

- The state of cloud security: Understand why traditional security strategies are failing and how attackers are exploiting new cloud vulnerabilities faster than ever.
- Proactive vs. reactive approaches: Discover how a prevention-first approach is crucial to stopping attacks before they escalate.
- A strategic roadmap: Walk away with concrete, actionable steps for building a resilient CDR program, including how to improve threat detection and automate response.

This is a must-attend session for security leaders looking to move beyond reactive defense and stop cloud attacks in real time.

The State of Cloud Detection & Response, Featuring Forrester

As businesses rely on the cloud for critical applications, attacks are increasing at an alarming rate. Unit 42® reports show that 80% of security exposures exist in cloud attack surfaces, with a 66% rise in threats targeting cloud environments. Traditional security measures struggle to keep up, leaving companies vulnerable to breaches, data theft, and service disruptions.
In this virtual session, we’ll explore why cloud attacks are surging, the top security risks organizations face today, and why real-time protection is essential for staying ahead of threats. Join us to learn practical strategies for detecting and stopping attacks before they cause damage, ensuring your cloud environment stays secure.

The Future of Cloud Security: Real-Time Protection

Cloud-first adversaries have increased attacks against cloud environments by 66%,1 yet security teams can’t respond fast enough to stop the breach.

 That’s why modern organizations are rapidly choosing to break silos between cloud security and the SOC with AI-driven Cloud Detection and Response (CDR). Learn how you can shut down today’s cloud-first threats with effective threat detection, investigation and response from a unified, single-agent offering built on the world’s most complete SOC platform and No. 1 cloud-native application protection platform (CNAPP).

Join our experts in this webinar to understand:

-The latest insight on emerging cloud attacks sourced from world-class Unit 42® threat experts.
-How AI is transforming cloud detection and response.
-Why a unified platform for cloud security and SOC delivers significantly faster, more efficient outcomes to stop cloud-first cyberattacks.

Stopping Cyberattacks in the Cloud | The Future of Cloud Detection and Response

Dominate the Cloud Threat Landscape with Real-Time CDR

As cloud adoption surges, so does the speed and sophistication of attacks. Traditional, static detection and response can’t keep up in today’s fast-moving, multi-cloud environments.
Join us to explore actionable best practices for modern cloud detection, investigation, and response (CDR). We’ll cover how security teams are leveraging CDR to keep up with the speed, and diversity of cloud-native attacks.

In this session, you'll learn:
- Lessons from real-world multi-cloud incidents
- Why cloud security must start with prevention, not just detection
- How to cut through the noise and focus on what really matters
- Key capabilities to demand in a CDR solution — and red flags to avoid
- How to ready your SecOps team for cloud-native response

Best Practices for Cloud Detection and Response: Real-World Lessons from Multi-Cloud Attacks

Palo Alto Networks

Cloud Security

Cloud Detection and Response

Multi-Cloud

Multi-Cloud Attacks

Cloud native response

SecOps

cybersecurity

Security Operations

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Best Practices for Cloud Detection and Response: Real-World Lessons from Multi-Cloud Attacks

Presented by

About this talk

Palo Alto Networks