Name: Inside the Mind of a Hacker
Start: 2021-12-14T18:00:00Z
End: 2021-12-14T18:58:05.000Z
Location: BrightTALK

Bugcrowd is the force multiplier in cybersecurity, providing access to a global network of ethical hackers who help organizations maximize the impact of their security defenses. Top Fortune 500 organizations trust Bugcrowd to manage their Penetration Test, Bug Bounty, Vulnerability Disclosure, and Attack Surface Management programs. Bugcrowd helps organizations identify and fix vulnerabilities, protect customers, and make the digitally connected world a safer place.

In this Infosecurity webinar sponsored by Bugcrowd, an expert panel, including Bugcrowd’s Chairman, Founder and CTO Casey Ellis, discuss the need for security teams to prioritize the most important areas of their organizations. Security teams should also seek outside help, leveraging the skills of crowdsourced white hat hackers, to identify the new vulnerabilities across their networks.

The expert panel also discusses:

-The evolving threat landscape and expected trends for 2022
-The importance of adopting a risk-based approach
-The growth of crowdsourced security and how it works

Evolving your security strategy to challenges of 2022

Lessons have been learned from the Log4Shell vulnerability. But what is next? Another vulnerability discovery, rushing to understand it and trying to remediate it. With digital transformation showing no signs of slowing in 2022, organizations need to evolve their security practices along with the current landscape. Static vulnerability scanning, traditional penetration testing are not effective. Platform-powered crowdsourcing, where the crowd and the platform are foundational, is the approach organizations need to take when it comes to security maturity.

Hear from Bugcrowd’s Justin Beachler, Dir. of Trust & Security at Bugcrowd, as he is on the front lines helping organizations evolve their security strategy by adopting a platform-powered crowdsourcing approach to navigate through the uncharted waters of crowdsourced security.

Navigating the Uncharted Waters of Crowdsourced Security

The recently discovered Log4j vulnerability (“The vuln that stole Christmas”) was a massive wake-up call. Now that we have the benefit of security researcher report data compiled over the last few months, we can draw some conclusions about what happened and why. 
In this keynote session, you’ll learn:

-What those reports tell us about how the incident unfolded
-Why this incident constitutes a new class of vulnerability, and why that matters
-Whether we should think about open source software vulnerability management differently now

What We Learned From The Log4j Vuln

Penetration testing as you know it is broken: It’s too slow, limited, cumbersome, and noisy. The result? Poor results, including late or incomplete reports and missed vulnerabilities, and lackluster ROI.
 
Attend this “Meet the Experts” webinar on Thursday, Feb. 17, to hear from Bugcrowd's Director of Product, Kaushik Srinivas explain Bugcrowd’s vision for modern, platform-powered Penetration Testing as a Service. Among other things, you will learn how the Bugcrowd Security Knowledge Platform helps customers quickly launch efficient, effective, and agile pen tests for web apps & APIs, cloud services, networking, mobile, and IoT. Topics will include:
 
-The unique benefits of the crowdsourcing model for penetration testing
-Why and how Bugcrowd’s platform-powered approach modernizes the penetration testing experience
-New Bugcrowd PTaaS capabilities, functionality, and high-level roadmap

Meet the Experts: Re-defining Penetration Testing at Bugcrowd

The most glamourized aspect of cybersecurity is detection and response as software and security professionals chase after attackers in their environments. However, one could argue that a strong cybersecurity posture thwarts all but the most nefarious actors. In that vein, important preventative measures include device and application vulnerability management, penetration testing (or pentests), and a bug bounty program that offers rewards to the ethical hacker community to find vulnerabilities.

Join us for this audio webcast, titled “The Business Value of Crowd-Sourced Security Solutions” brought to you by Bugcrowd and IDC.

The Business Value of Crowd-Sourced Security Solutions

Accenture recently found that a large majority of business leaders (81%) believe that the cost of staying ahead of cybersecurity attackers is “unsustainable”. This perception of a losing battle continued to fuel an interest in more innovative and proactive approaches to cybersecurity, like that of Bugcrowd, in 2021.

Our new Priority One Report focuses on vulnerability trends as reflected by growing security researcher activity on our platform last year. Tune into this webinar featuring Bugcrowd Founder, Chairman, and CTO Casey Ellis to learn:

-What were the top vulnerability types in 2021?
-Which industries led the way to increase investment in crowdsourced cybersecurity?
-How did vulnerability severity levels change?
-What were the industry and policy trends that will influence adoption in 2022 and beyond?

The Top Software Vulnerabilities of 2021

We are excited to invite you to Bugcrowd’s Crowd Cafe webinar series featuring key experts discussing critical and timely cybersecurity topics. 

Join us for the episode on January 13th with Bugcrowd's Chairman, Founder and CTO Casey Ellis. He will be discussing his perspective and predictions on cybersecurity for this year. Will cybercriminals or nation-states be the bigger threat? What parts of an organization’s attack surface will see more activity? We’ll also be discussing how the cybersecurity industry, organizations and consumers will be reacting to the changing cybersecurity landscape.

Join Bugcrowd for our 2022 Cybersecurity Predictions

Your organization’s assets are continuously changing. Consequently, your traditional security assessments must evolve from point-in-time, yearly assessments to continuous ones. And because security is more than just technology, you need to rely on people and processes, as well.

Join SANS Certified Instructor and Author Jorge Orchilles and Bugcrowd Product Marketing Director Toby Bussa as they explore Bugcrowd’s next-generation penetration testing offering. The webcast will cover:

-Overview and evolution of security assessments
-Current state of InfoSec
-Problems with current security assessments, compliance, and regulatory requirements
-Evolving landscape
-Benefits of next-generation penetration testing

Penetration Testing-as-a-Service

Everyone agrees that the historic Log4J vulnerability, and the associated Log4Shell exploit, is the worst Java risk we’ve seen in years–maybe ever. But why? And what will remediation look like for the countless platforms and products that touch it in some way? Furthermore, how should the ecosystem prepare for the next one before it happens? 


Join us for an impromptu AMA session with Bugcrowd Founder and CTO Casey Ellis to hear answers to those questions, insights about how hunters on the Bugcrowd Security Knowledge Platform are working 24/7 to find and understand this vuln for customers, and to ask Casey your own questions, as well.

Log4Shell: Your Questions Answered

We are excited to launch the Meet the Experts series for Bugcrowd customers.  During this fireside chat we will discuss top updates to the platform.  In this first session on December 07 at 10 am PST, learn about Bugcrowd's crowdsourced security platform's vulnerability disclosure program to learn how we:

1. Find the vulnerabilities that matter
2. Keep the noise out with the superior triage and validation capabilities
3. Make it easy to get started with the self-service approach

Meet the Experts Series

Crowdsourced participation has a multitude of benefits for pen testers whether you're starting out in the field or you have years of experience. Learn how and why to get started in crowdsourced initiatives, whether it's hacking for fun and profit, or just to level-up your skills and experience.

Crowdsourced Pen Testing for the Win

Cybersecurity is a critical concern as cybercriminals, nation-states, and other threat actors  increasingly target organizations and cause disruption and harm. Additionally, governments and regulatory authorities are also increasing their scrutiny of organizations. For example, in the U.S., the SEC recently sanctioned organizations "...for failures in their cybersecurity policies and procedures." The European Union’s General Data Protection Regulation (GDPR) has led to fines against organizations that stemmed from cybersecurity data breaches. All of these events are driving boards of directors to focus more on the cybersecurity aspects of their organizations.

In the inaugural episode of Bugcrowd’s CrowdCafe we are joined by Robyn Denholm, who recently joined Bugcrowd’s board. We’ll discuss the following topics and questions: 
- How well is cybersecurity understood by boards these days? Is it different now than it was 12 to 18 months ago in light of the increasing number of, and impact from, ransomware and nation-state attacks? 
- What are board members worried about when it comes to cybersecurity?
- Security and risk management leaders often struggle to translate cybersecurity from a technology issue to a corporate concern. What kind of information and measures are boards looking for and expecting from their cybersecurity leadership?
- Should we expect to see it become the norm that a director on a board understands and/or speaks "cybersecurity"? Will this happen within the next couple of years or will it take longer?

Cybersecurity and the Board: Current Perspectives and Expectations

Between looming deadlines and increased pressure to launch better products faster than the competition, modern-day developers have less time than ever before. Valuable time is often consumed by rework, debugging, and code maintenance - a recent survey found 38% of developers spend up to a quarter of their time fixing software bugs. Over half of developers say if they didn't have to spend so much time fixing bugs, they would have enough time to build new features and functionality.

In this webinar, join experts from Bugcrowd, Secure Code Warrior, and TX Group, as they discuss:

Why vulnerabilities continue to be an issue despite the use of scanning tools
The importance of security testing as a component of the security workflow
How to fix the traditional security training model
How to help your developers find and fix vulnerability issues faster
Steps to leverage crowdsourced security to optimise your security model
Join the discussion to hear how TX Group is addressing this challenge and pick up practical tips to help your development team today.

Shorten your software vulnerability remediation by over 35%

Often we hear about ransomware targeted at organisations who are specifically targeted by gangs to make a profit, pipelines or organisations at the top of the supply chain. However, ransomware is a threat that all businesses face, even SMEs, and often these organisations struggle the most in protecting, responding and recovering from ransomware incidents. 

This is a true story about Bugcrowd's Application Security Engineer, Katie Paxton Fear and the first week at her first job after finishing her degree. She provides a detailed story how her company got hit by ransomware and the difficult decisions some of the most junior members of staff had to make. While the company did have backups, how did they justify/make the case to shut down the entire business for a day or determine to just pay the ransom? Overall, it's the story of how the security culture failed and how they could have prevented the attack in the first place, by following some simple pieces of advice and how other SMEs can learn from this experience.

Ransomware-A True Story

The blistering pace of technology changes and the increasing aggression of cyber-bourne adversaries are making it increasingly difficult to prioritize vulnerabilities.  Also, the consequences of an exploited vulnerability are exploding in cost, especially with the rise of ransomware around the world, so it is more important than ever to prioritize this management of vulnerabilities.

Fortunately, Bugcrowd are experts in this area. Every day, we review and triage hundreds, if not thousands, of vulnerabilities from our helpful hacker community which would otherwise be used as footholds for malicious attackers.

In this webinar, Bugcrowd is partnering with the world leading experts in endpoint security CrowdStrike, where we will sit down together and merge Bugcrowd's knowledge of "what is vulnerable, and where" with CrowdStrike's market-leading (intelligence) knowledge of "who is attacking what" to discuss:

-Which eCrime and nation-state actors are taking advantage of current vulnerabilities?
-What methods, tools, and procedures do these attackers employ?
-What role can the whitehat hacker community and platforms like Bugcrowd play in making vulnerability prioritization simpler and more effective?

A discussion on threat-lead prioritization

Today, Insider Threat poses an even greater risk to businesses in the wake of the COVID-19 pandemic. Forrester Research, Inc. reported that in 2020, a quarter of all security breaches were caused by an insider and estimates that in 2021, Insider Threats will account for 33% of security breaches.

Watch this session with a panel of experts, including Bugcrowd’s Katie Paxton-Fear, who discuss: 
- Factors that contribute to this increase in Insider breaches
- How remote work has impacted the malicious & non-malicious Insider Threats facing businesses
- The implications on enterprises today.

Identifying and Avoiding Insider Threats in Today’s Remote Workforce Age

Anti-ransomware methods are a hot topic with many different approaches. But what are these methods and how do they work? How can we give the initiative back to the defender in the arms race between attack and defense? 

In this webinar, our panel discusses why directing and preventing ransomware poses different intellectual and practical challenges compared to other forms of malware, along with the opportunities to develop new mitigation techniques. They'll also cover:
-A technical overview of the current research across categories such as filessystem interaction, API calls, ransom notes, and network activity
-Five new methods for ransomware detection and prevention
-A statistical analysis of ransomware and attacker behaviors

Thwarting Extortion: Ransomware Detection and Prevention

Hackers are often unfairly portrayed as shady silhouettes in hoodies. In fact, most ethical hackers are curious, committed security researchers from a broad range of backgrounds, willing and able to join the global fight against attackers.

Join us to hear Bugcrowd CTO Casey Ellis and security researchers Chris Inzinga and Majd Atiyat discuss what motivates this global and diverse community in 2021. You’ll learn:

-Who becomes an ethical hacker, and why
-What motivates/what’s on the minds of ethical hackers today
-The critical role of ethical hackers in the cybersecurity ecosystem

Inside the Mind of a Hacker

Hackers

Cyber Security

Ethical Hacking

Vulnerabilities

Vulnerability Intelligence

Vulnerability Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Inside the Mind of a Hacker

Presented by

About this talk

More from this channel