Name: Detect All Your IT Assets in SECONDS
Start: 2016-04-05T18:00:00Z
End: 2016-04-05T18:58:58.000Z
Location: BrightTALK
Rating: 4.15

Join us for this informative technology series for insights into emerging security trends that every IT professional should know. These brief sessions will give you an opportunity to discover best practices from market leaders as well as hands-on advice from industry experts on a variety of security and compliance topics.
 
Let Qualys help keep you up-to-date with cost-effective and efficient technology trends. Choose the topic that interests you or plan to attend the entire series to make sure you stay ahead of the curve.

The Qualys Threat Research Unit (TRU) has curated anonymized data from over 2.3 billion vulnerabilities to provide a uniquely detailed analysis of vulnerabilities, breaches, and remediation responses across the globe within the 2023 TruRisk Research Report. 

In this recorded web event, we will cover the exclusive findings within the report and offer additional perspectives on the report's five security risk facts. More importantly, attendees will be given actionable information summarized within the five separate risk facts that can help improve your risk posture in 2023.

Watch to get data-packed insights on the following findings:  

11 Days Slower: Vulnerabilities patched are 11 days slower than exploits
17.4 Day MTTR: In the MTTR for Chrome and Windows products
28 Days: IABs target vulnerabilities that are patched 28 days slower
33% OWASP: Of 25m vulns found, 33% were linked to OWASP misconfigurations
50% Failure: Samples yield a 50% fail-rate due to infrastructure misconfigurations

Qualys 2023 TruRisk Research Report Review

Cybersecurity teams must move faster than attackers when vulnerabilities are disclosed. This is only possible if the attack surface is mapped out continuously. This Fireside conversation explores attack service management, tools that infosec professionals can use to manage risks before attackers discover them, and what threat intelligence indicates about the likelihood of exploitation. Register now and gain insights to help you better mitigate threats.

Implementing an Attack Surface Management Program

Most organizations would agree that the greatest cybersecurity risks would cause the most interruption to the business. But how can CISOs and infosec professionals get ahead of potential risks and prioritize those? This conversation will explore how organizations can focus on a risk-based approach to cybersecurity, cybersecurity in the boardroom, and more.

Moderated by: 
Doug Cahill, VP, Analyst Services, Sr. Analyst, ESG

Featuring: Jonathan Trull, CISO, Qualys

Understanding a Risk-Based Approach to Cybersecurity

With attacks on payment data increasing, organizations are looking to achieve data protection as well as streamline PCI compliance in an automated manner. But only 27.9% of organizations were fully PCI compliant during their interim validation in 2019 according to the Verizon Payment Security Report (PSR) 2020. The PSR also highlights the top control gaps, which organizations need to prioritize for better data protection and complete PCI.

Qualys fills these gaps by expanding its PCI compliance solution beyond PCI ASV scanning to support more than 97% of PCI requirements. Qualys’ integrated platform gives you one holistic view of your PCI in-scope assets and their PCI compliance posture along with the tools and automation you need to meet PCI DSS requirements efficiently.

Join us for a webinar on August 26, 2021 where PCI experts Hariom Singh, director of product management for compliance solutions at Qualys, and Mathias Hoelzli, senior manager threat and vulnerability management at NortonLifeLock, walk you through the challenges organizations face and how they can overcome them to protect their cardholder data.

Get started now:

- Sign up for the PCI Compliance webinar on August 26, 2021.
- Learn about the complete Qualys PCI Compliance solution.
- Start your trial of the new integrated Qualys PCI Compliance solution.

Get PCI Compliant with Qualys

In support of DevSecOps teams using Kubernetes to build modern applications, Qualys and Red Hat are collaborating to secure the complete Red Hat OpenShift stack.   

Newly introduced capabilities delivered via Qualys Cloud Agent enable vulnerability scanning directly into Red Hat Enterprise Linux CoreOS in Red Hat OpenShift.   

This new offering enhances Red Hat’s layered approach to security and complements the Qualys Container Security app, which already secures your containers from build to runtime.  

Join this webinar on August 16, 2021 for a demonstration of full-stack security of containers and the container stack in Red Hat OpenShift presented by container security experts Dave Meurer, Global Principal Solutions Architect at Red Hat, and Jason Ell, Sr. Director of Product Management for Cloud Agent at Qualys. 

Sign up now!

Securing Red Hat Enterprise Linux CoreOS in Red Hat OpenShift with Qualys

Join us for AssetView Live to learn how we’ve reinvented asset management for cybersecurity professionals. CyberSecurity Asset Management (CSAM) monitors IT asset health from a security perspective, helping inventory your complete IT ecosystem, detect security gaps, and respond to the risk, all from a unified platform.

Register today for AssetView Live to hear our vision, see a deep-dive demo, learn how customers use CSAM, and participate in a Q&A.

Agenda:

10:00 – 10:15 am
Introducing CyberSecurity Asset Management (CSAM)
Sumedh Thakar, CEO and President, Qualys

10:15 – 11:00 am 
Live CSAM Demo
- Identify and alert on unauthorized assets
- Monitor critical assets for external exposure
- Alert for EOL, unauthorized software and missing required software
- Response actions: uninstall EOL Adobe Flash with one click 
- FedRAMP and PCI-DSS report for asset health
Ed Rossi, VP of Product Management, Qualys

11:00 – 11:15 am
Customer Insights: Asset Inventory for Security Pros
Jatinder Pal Singh, Director of Security Operations, Informatica

11:15 – 11:30 am 
Industry Insights: Your Security Foundation Starts with Asset Visibility and Context
Todd Waskelis, AVP, AT&T Cybersecurity Solutions

11:30 – 11:50 am
Live Q&A

AssetView® Live - Reinventing Asset Management for Cybersecurity

News of ransomware attacks hits the headlines on a near-daily basis, so it is no surprise that ransomware attacks increased over the past year. They’ve also become more dangerous as attackers target and encrypt growing amounts of data, and ransom demands skyrocket. Yet, despite the visibility, risks and increasing costs, organizations aren’t taking some of the basic precautions to protect themselves from attacks, such as remediating key known vulnerabilities. 

Speakers Brian Kime, Security and Risk Senior Analyst at Forrester and Mehul Revankar, VP of Product Management and Engineering at Qualys will discuss the current state of ransomware and prevention techniques including:

- Latest threat vectors with an emphasis on ransomware attack vectors  
- Examples of ransomware attacks that exploited specific vulnerabilities  
- How to harden systems as temporary risk mitigation where immediate patching is not possible 

Mehul will also address how to discover, assess and patch critical vulnerabilities with Qualys VMDR.

Preventing Ransomware Attacks in the Age of Covid-19

Join Qualys' Research and Product Team for a discussion of this month's high-impact vulnerabilities, including those that were part of April's Microsoft Patch Tuesday. We will walk you through the steps to quickly identify vulnerable assets and remediate them with Qualys Patch Management.  

We will cover:  

- The significant vulnerabilities published this month 
- Qualys Research Team's analysis of the most critical vulnerabilities  
- An action plan for quickly identifying and remediating vulnerabilities

This Month in Patches

Are your scans working at maximum efficiency? Join our Senior Security Architect to learn the arts of effective scanning with Qualys VMDR. We’ll show you how it works and how to make scans more productive in your environment. 

This session with cover: 

- How to set up, use and troubleshoot authentication records and password vaults 
- Authenticated scanning – privileges, root delegation and executed commands 
- Scanning through a firewall and why it is not recommended  
- Scanning vs. Endpoint Agent – should you use both?

Qualys Technical Series – Reaching Maximum Efficiency with VM Scans

As authorities have issued emergency directives to mitigate the ‘widespread domestic and international exploitation of Microsoft Exchange Server vulnerabilities’, Qualys invites you to join a webcast where the Qualys Vulnerability Research Team will discuss the impact of the ProxyLogon vulnerability in Microsoft Exchange servers around the globe. We will outline the steps organizations need to take immediately to assess and address these high-priority vulnerabilities. 
 
The webinar will cover: 
 
- The key elements of the ProxyLogon zero-day vulnerability in Microsoft Exchange servers and its impact 
- How to identify vulnerable Exchange environments, track them for missing patches, and remediate them with patching 
- How to harden them as temporary risk mitigation where immediate patching is not possible 
- Key indicators of compromise and how to detect and respond to them 
- Analysis of the data from the Qualys Vulnerability Research Team 

The Qualys team will also talk about the new free 60-day service to detect, prioritize, and patch vulnerable Exchange servers, and to detect environments missing compensating controls.

Mitigate the Risk of Microsoft Exchange ProxyLogon Vulnerabilities

With organizations rapidly adopting mobile technology in nearly all business functions, mobile devices are not only storing critical data but also connecting to corporate networks to access internal assets, data and apps. 

This adoption is increasing the risk of:

- Data exposure and exfiltration through unauthorized access
- Attacks that penetrate organizations' internal networks via vulnerabilities & misconfigurations on Android & iOS devices.

Traditional vulnerability management tools fail to provide security in this environment because they lack visibility off the network, i.e. to mobile devices. While a Mobile Device Management (MDM) approach provides ‘policy-based prevention’, it does not assess the latest vulnerabilities or correlate vulnerabilities to mobile app updates.

In this webinar, we'll show how Qualys VMDR for Mobile Devices expands the FedRAMP-authorized Qualys Cloud Platform to provide security teams a single console to secure all Android, iOS and iPadOS devices across the enterprise.

Mobile security experts will demonstrate:

- Comprehensive visibility of mobile devices connecting inside your network, with critical data points such as device type, OS version, installed apps, EOL status, device location, CA certificates, and more
- Continuous assessment of device, OS, app, and network vulnerabilities using the industry's most comprehensive signature database and automated correlation of vulnerabilities to app updates
- Expansion of your vulnerability management program with continuous monitoring of critical mobile device configurations based on NSA guidelines.
- Remote ‘over-the-air' actions such as locking the device, changing its passcode, de-enrolling the device or uninstalling risky apps, along with seamless patch orchestration to deploy the latest app versions from Google App store.

Seamlessly Expand Vulnerability & Patch Management to Enterprise Mobile Devices

As enterprises rapidly adopt SaaS applications, blind spots have developed as traditional security policies, controls guidance, and tools don't provide the benchmarks or visibility IT and security teams need to protect them. While some have looked at cloud access security broker (CASB) solutions to fill the need, these solutions only broker the access based on the perimeter and don't provide a continuous, holistic approach into risk and compliance.

In this webinar, CIS will discuss the importance of SaaS security and the value provided by security guidelines like the CIS Benchmarks, consensus-developed secure configuration guidelines for hardening operating systems, servers, cloud environments, and more. Qualys will introduce SaaS Detection and Response (SaaSDR), which allows IT administrators to manage their critical SaaS security and validate policy against the CIS Benchmarks for Google Workspace, Microsoft Office 365, Salesforce.com, and Zoom.

CIS experts will cover:

- Balancing trust and risk when using SaaS applications
- Securing critical workflows within an expanding boundary of responsibility
- Creating policy assurance with consensus-based security best practices
- How automated monitoring brings policy to life

Qualys experts will demo how SaaSDR addresses:

- User and device visibility
- Data exposure monitoring
- Application data insights for risk assessment
- Continuous security posture & compliance monitoring

Speeding SaaS Cybersecurity Policy to Implementation

While vulnerability scanning has evolved significantly over the past few decades, the fundamental goal remains the same: to identify vulnerabilities accurately, assess the risk, and prioritize and remediate them before they get exploited by an attacker.

It is easier said than done. There are multiple ways to scan an asset, for example authenticated vs. unauthenticated scans or agent-based vs. agentless, each with its own advantages. With multiple approaches, it can be difficult to link the vulnerability detections back to the asset, even more so when the key identifiers for the asset, like IP address, network card, and so on, have changed over its lifecycle.

To address this challenge, Qualys is introducing exciting new platform technology to provide customers with a single unified view of vulnerabilities prioritized by risk.

Join us on this webcast as we cover:

- Vulnerability Scanning Challenges
- Asset Identification Challenges
- Vulnerability Prioritization with VMDR
- New Qualys Platform Solution
- Demo

New Unauthenticated and Agent-Based Scan Merging Capabilities in Qualys VMDR

In this world of cybersecurity challenges, End of Life (EOL) software running in your environment creates concerns around unpatched vulnerabilities. It also introduces compatibility issues and increases support costs and the potential for downtime of crucial business apps. In this session, we'll examine how to identify, prioritize and manage your software lifecycles, including EOL, to maintain a healthy and secure software ecosystem. Most importantly, we'll hear from Newburyport Bank about how they gained visibility to and reduced the risk of EOL software.


Specifically, we'll cover:

- Challenges and concerns related to EOL software
- Importance of establishing and maintaining a comprehensive software and hardware inventory
- Benefits of actively managing software through the EOL lens
- Tips to identify, prioritize and mitigate EOL software in your environment
- Newburyport Bank’s case study on managing their EOL software

Getting a Handle on Your EOL Software; the Overlooked Aspect of Cybersecurity

Understanding the behaviors and attributes of the CVEs leveraged by stolen FireEye Red Team assessment tools is key to both attack prevention and response. In this webinar, Qualys research and product experts will analyze the riskiest CVEs. We will share insights into the CVE behaviors to help operational security teams build defensive actions against the complex attack vectors involved, and we will walk through the threat attributes to help threat hunting teams take defensive actions against adversaries.

Finally, we will show how Qualys solutions can help you develop a plan to reduce exposure from these CVEs.

In this workshop, we will discuss :

- Key CVEs used by the FireEye Red Team assessment tools
- How Qualys VMDR and EDR help organizations identify vulnerable assets
- The Qualys patch management solution to remediate vulnerabilities
- How to isolate compromised systems based on indicators of compromise

Unpacking the CVEs in the FireEye Breach

From an executive perspective, security design and risk tolerance have taken on new meaning. Distributed IT, remote workforces, and emerging digital requirements have all forced CISOs to look at security and compliance in a new light—one that heavily focuses on visibility into both IT and business functions. In this webinar, we'll examine today's IT landscape from a CISO perspective, exploring topics such as corporate-wide configuration management, how CISOs view security, and best practices for risk and compliance. 

Specific topics include:

- Top IT challenges CISOs face today
- Understanding risk, compliance, and IT visibility
- The business impacts of IT asset inventory
- Key points around visibility, configuration management, and integration
- Best practices and advice from the field

CISO perspective: How IT asset inventory can reduce security and compliance risk

Rapid digitalization has forced companies to rethink how to best manage their IT assets. Especially when those assets now include software, licensing, certificates, and even SaaS applications. Aside from better visibility, knowing what’s in your global IT environment is fundamental to security. With more people working remotely, questions arise such as how do you manage cloud instances? How do you control physical and logical asset inventory? And will you lose sight of IT management as your company grows?

In this webinar, we'll dive into how IT visibility has shifted amid the pandemic, emerging challenges for both IT administrators and technology leaders, and how IT inventory can help. Specific topics include:

- The changing IT asset landscape
- Understanding the speed of change: SaaS, virtualization, IoT, and more
- How to reduce pressure on IT with automation and better security
- Final thoughts and best practices

Want to Better Manage and Secure Your IT Assets? Start With IT Inventory

Qualys invites you to join a webcast where the Qualys' Vulnerability and Malware Research Team will discuss the recent Solorigate/SUNBURST attack and outline steps organizations can take to identify vulnerable assets, isolate compromised systems, and remediate them with patching and mitigation actions.

The webcast will cover: 

- The key elements of the Solorigate/SUNBURST attack chain and its impact 
- Key indicators of compromise 
- Analysis of the data from the Qualys Research Team 
- Steps organizations can take to immediately mitigate the risk 
- A live demo of best practices response using Qualys solutions 
- Free 60-day access to Qualys service to detect, prioritize, and remediate vulnerable and compromised assets

Qualys Advisory Webcast: Mitigate Solorigate/SUNBURST and FireEye compromises

The foundation of security is control. But how do you control what you can't search?

A huge hurdle to protecting your network is knowing exactly what devices are connected. It’s increasingly difficult for organizations to know what IT assets exist in their environment, where they’re located, who manages them and their associated security risks.

Learn how Qualys AssetView quickly gives your IT and security teams a complete, accurate view of all IT assets in your environment via your favorite web browser.

Reserve your seat for this webcast so you can discover how to: 

* Run instant queries that return results in seconds
* Search for OS and App configuration information on all your assets for fast, accurate and actionable data
* Get a unified view of your IT and Security data

Detect All Your IT Assets in SECONDS

asset discovery

IT Assets

IT security

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Detect All Your IT Assets in SECONDS

Presented by

About this talk

More from this channel