Name: Adapting to a new reality: threat landscape and cybersecurity challenges in 2020
Start: 2020-04-15T12:00:00Z
End: 2020-04-15T13:02:09.000Z
Location: BrightTALK
Rating: 4.39

On this channel, Kaspersky experts share their knowledge and key insights into high-fidelity threat hunting and intelligence, incident management, malware analysis, reverse engineering, security solutions, and several other vital aspects of the cyberworld. To keep you up to date, the experts also provide detailed webinars and workshops on how Kaspersky security solutions and services can halt and prevent a vast range of malicious attacks conducted by cybercriminals. 

Kaspersky is a global cybersecurity and digital privacy company that has been providing protection for 25 years, with over 400 million users from more than 200 countries. Kaspersky experts' mission is to help you find the perfect weapon to protect against any cyberthreat, carried out by even the most sophisticated cybercriminals. 

Kaspersky researchers are top-notch cybersecurity and protection technology experts, who regularly take part in leading information security events worldwide as best-in-class speakers. Kaspersky’s deep threat intelligence and security expertise is constantly being transformed into innovative security solutions and services that protect businesses, critical infrastructure, governments and consumers around the globe.

Subscribe and learn more about the latest cybersecurity discoveries on the threat landscape and how to defend against them.

Contact us at https://www.kaspersky.com/about/contact 




Not only do cybercriminals make money by committing cybercrime, but they also expand their operations by offering services to individuals without strong technical skills in malware development. This business model is known as Malware-as-a-Service (MaaS), and it operates on various sites of the "shadow" internet, including the Darknet. MaaS generates stable profits, enabling cybercriminals to maintain a team and continuously improve their services to carry out attacks on companies and individual users.
 
Through our research, we have identified 97 families of malware that have been distributed in the MaaS format – or "by subscription" – over the last seven years. These families include ransomware, various loaders, backdoors, botnets, and infostealers. In this webinar, Alexander Zabrovsky, Digital Footprint Analyst at Kaspersky, will delve into the inner workings of MaaS in the Darknet and address the most relevant issues:
 
- How did malware become a full-fledged product, and how did the "subscription" model become a new standard for cybercriminals?
- Why has YouTube become one of the key platforms for distributing malware? Who are traffers, and what is their function?
- Which families of malware are mentioned most often in the Darknet, and how does the Darknet services market depend on the news agenda?

Unveiling the Darknet's Malware-as-a-Service model

In large companies, the sheer volume of information resources makes their attack surface significantly larger, compared to smaller businesses. Numerous factors contribute to this exposure, including networks spread across various locations that are consolidated into a single infrastructure, mergers and acquisitions with companies possessing lower security levels, outdated hardware and software, and more. 

The level of preparedness for a potential incident directly impacts the effectiveness of the response and allows you to mitigate the attack’s impact. In this webinar, you will learn how to enhance incident responses for large-scale networks. Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky, will provide you with the following practical insights on:

 • Optimizing incident response processes beyond mere scaling up by increasing personnel and systems involved
 • Understanding incident response from a management perspective and why it should be an ongoing, cyclical process
 • Exploring key principles for a successful response, emphasizing the significance of not only technical skills but also quality processes and soft skills
 • Unveiling the limitations of backups in mitigating the consequences of an incident and discovering effective strategies to address them

Securing The Fort: How to master cyber incident response in a large company

Modern cars are no longer just a means of transportation. Their built-in services can manage everything for drivers and passengers alike from seat heating, to using voice-controlled GPS to find a coffee, or make theater ticket reservations. Along with the development of consumer services, driver safety services have also been developed - distance sensors to neighboring cars, speed limit recognition and the eCall safety system, to name a few.

These hi-tech solutions designed to improve the user experience and make your journey safer, are architecturally based on algorithms and technologies that in themselves carry threats to information security. The wider the user experience, the wider the attack surface for an attacker.

During the webinar we will explore:
  - Threat landscape: how has changed and evolved over the last 10 years
  - Top threats the automotive industry is exposed to 
  - Standards of automotive security
  - Trends in automotive security

Speakers:
Sergey Anufrienko, security researcher, Kaspersky ICS CERT
Alexander Kozlov, security researcher, Kaspersky ICS CERT

Cyberthreats to modern automotive industry

Due to some technical issues, we had to re-schedule the webcast that had been previously planned for April 26.

Modern ransomware has transitioned to a Ransomware-as-a-Service (RaaS) model, with many groups sharing common tactics, techniques, and procedures in their attacks, or TTPs. These TTPs, described in MITRE ATT&CK, are like a glue that binds together multiple diverse teams operating at various levels with different priorities. 

The Global Research and Analysis team (GReAT) at Kaspersky analyzed thousands of operations made by the different RaaS groups – and outlined the TTPs that the cybersecurity industry should consider in order to deliver a stronger protection for different organizations. In the webcast, Marc Rivero, a senior security researcher, GReAT, at Kaspersky, will delve into the main TTPs used by modern ransomware groups and shed the light on how to analyze them and use in attack detection and prevention.

The talk will include: 
- Kaspersky’s statistics on ransomware evolution
- Attack workflow using MITRE ATT&CK
- Overview of TTPs used by main ransomware groups
- Q&A session 

Speaker: Marc Rivero, senior security researcher, GReAT, Kaspersky

Be aware of ransomware TTPs: applying MITRE to ransomware campaigns

Kaspersky issued its annual Incident Response Analyst Report that provides insights into incident investigation services conducted by the company in 2022 and build a holistic overview of any cyberthreat trends, summarize observations into statistical analysis of recent incidents. 

Join our webinar on May, 24 when Ayman Shaaban, Digital Forensic and Incident Response Manager at Kaspersky, will highlight the most common attack scenarios based on 2022 incident investigations, including observations on:
• Top targeted regions and industries
• Most common initial compromise vectors
• Attack duration and impact
• Adversarial tools and tactics
• Expert incident response recommendations

Analyzing the nature of cyber incidents in 2022

In 2022, Kaspersky Managed Detection and Response (MDR) received more than 400,000 alerts worldwide. Kaspersky team processed these alerts discovered by the service and accumulated as anonymized customer cases to provide information about the modern threat landscape and the most common adversarial techniques.  

Join our webinar on May, 16 when Sergey Soldatov, Head of Kaspersky Security Operations Center, will highlight the results of MDR's operations occurred in 2022, including observations on:
• The most attacked industries
• The nature of high severity incidents
• Tactics, techniques and procedures used by attackers
• The most popular detection scenarios and an average threat detection rate

Findings highlighted in this webinar will help you to be aware of existing attack techniques and protect businesses from the growing number and complexity of real-life threats.

MDR analyst report 2022: the latest statistics on global cyber-incidents

Year after year, ransomware continues to make the news headlines. In their quest for profit, attackers target all types of organizations, from healthcare and educational institutions to service providers and industrial enterprises, affecting almost every aspect of our lives.

Ransomware gangs are constantly evolving and, it is crucial to be aware of their techniques and toolsets to thwart their attacks. To discover the latest trends in the ransomware market, please join Dmitry Galov, Dan Demeter, and Marc Rivero, senior security researchers at Kaspersky's Global Research and Analysis Team.

In this webcast you will learn about:

- An overview of ransomware gangs in 2022
- Updated techniques ransomware operators use in 2023
- The types of targets ransomware gangs are after
- How to protect your systems from a ransomware attack

Ransomware trends in 2023

Despite the recent cryptocurrency market downturn, cybercriminals continue keeping a close eye on crypto technologies and advancing their attacks on crypto industry. 

To discover more about the latest trends in the cryptocurrency threats, please join Vitaly Kamluk, Head of APAC Unit, Global Research & Analysis Team and Dan Demeter, Senior Security Researcher at GReAT . During their talk, Vitaly and Dan will provide an overview of the variety of modern crypto-related threats, ranging from social engineering attacks to Advanced Persistent Threats (APT) targeting businesses, to ensure you are informed about major threats to escape them and keep your crypto assets safe.

In this webcast you will also learn about:
• Updated techniques cybercriminals use to target the crypto industry today
• What kind of targets cryptocurrency-oriented fraudsters are after 
• How to keep your company’s systems protected from the threats targeting crypto.

Cryptocurrency Threat Landscape Trends in 2023

Cybercriminals tend to be secretive and act without disclosing their identity. However, when it comes to ransomware negotiations, the victim and the attacker have to “meet” face-to-face. Moreover, by the time the two sides meet to discuss the price, the attackers have already gained control of a company’s data or network – that puts the victim in a weak position.

What does it like to negotiate with someone who is trying hard to get a ransom whilst remaining in the dark? What can you expect from such negotiations? In this webcast, Marc Rivero, senior security researcher, GReAT at Kaspersky will observe various tactics used by ransomware groups, explain how the companies are trying to negotiate with these cybercriminals, and what outcome such negotiations may have.

In this webinar, you will learn:
- What Ransomware as a service (RaaS) model is
- What a data leak portal in RaaS terms is
- About ransomware negotiations: stages, means of communication
- What to do if you have been reached by a ransomware group
- Q&A session

Ransomware groups negotiation tactics: what you need to know

Today pentest challenges don’t boil down to discovering some hype vulnerabilities like XSS, CSRF, SQLl, and RCE in clients’ cybersecurity systems. While pentesters search for them and put effort into finding and demonstrating possible attack vectors, there is one more project member whose role remains unclear to a customer – the cybersecurity analyst.

These specialists take a helicopter view of the target system to properly assess existing “holes”. They offer customers a comprehensive picture of penetration testing results combined with an action plan on how to mitigate risks. Moreover, analysts help prove the need for a cybersecurity solution to c-suite and management teams, who are directly involved in cybersecurity processes and budgeting.

In this webinar, we showcase the role of analysts in penetration testing and security assessment projects. You will learn:
- What is the most mature manner of running such projects
- How an analyst’s view of a project can be useful to both technical specialists and management representatives
- What are the differences between pentesters and analysts, and why it’s important to have both on your project
- Is it possible to manage pentesting and security assessment without an analyst?

The webinar will be conducted by Olga Zinenko, Senior Security Services Expert at Kaspersky. Olga has 10 years’ experience in the information security analytics field, conducting dozens of audits, pentests and security assessments. She is a regular media contributor to publications on a variety of cybersecurity topics.

Good, Perfect, the Best: how an analyst can boost penetration testing results

Reverse engineering is one of the most challenging and promising fields in cybersecurity. It enables you to get into the most notorious APTs, build a career as a malware analyst, or threat hunter.

Join the webinar to get step-by-step guidance about making your first steps in RE and hear from a reverse engineer with more than 10 years’ experience from Kaspersky’s GReAT team, Senior Security Researcher Ivan Kwiatkowski. 

During this webinar, Ivan will share his insights about getting into reverse engineering, its objectives and challenges. He will also shed light on Kaspersky’s new training program aimed at introducing beginners to this complex field - “Reverse Engineering 101” - and will showcase one of the practical assignments  of the course. 

Join the webinar to:
 
be introduced to reverse engineering, its tasks and features
learn how to start a career as a reverse engineer and gain insights from Ivan’s personal experience
get introduced to Kaspersky xTraining’s recent “Reverse Engineering 101” training

As reverse engineering is considered to have a steep learning curve, we’ve designed our new “Reverse Engineering 101” to make it easier to enter the field. Complete this course and  you will be ready to take on a more serious challenge: xTraining’s Targeted Malware Reverse Engineering. Get your questions answered directly by the course's creator for a chance to win free access to “Reverse Engineering 101” training.

Starting Career In Reverse Engineering: RE101 Training Walkthrough

As the world discusses ChatGPT-3 and its impressive capabilities, the business community is concerned about the AI’s potential to change the game for cyber criminals and wreak havoc in the world of defense organizations. Should businesses soon expect a wave of even more advanced cyber-attacks or simply more attacks? Will current cybersecurity solutions be enough? Or will ChatGPT instead provide cybersecurity specialists with more efficient and smarter defensive and threat hunting tools? 
 
In this webinar, Kaspersky experts will discuss how ChatGPT currently influences the cyber threats landscape and cybersecurity in organizations, and contemplate whether this is a real game changer for the industry and, in particular Security Operation Centers (SOCs). The experts will also discuss the potential benefits of using ChatGPT in threat hunting and malware analysis.  
 
In this webcast you will find out: 
- If ChatGPT can really influence the threat landscape. Where can cyber criminals use it, and will it be effective? 
- Will the emergence of ChatGPT and similar AI language models lead to increased cybersecurity costs? 
- If ChatGPT is capable of becoming an autonomous hacking AI-tool 
- How can cybersecurity experts employ ChatGPT: a demonstration of a scanner for Indicators of Compromise (IoCs)  

The webinar will be conducted by Kaspersky's Vladislav Tushkanov, lead data scientist, Maher Yamout, senior security researcher, and Victor Sergeev, incident response team lead.

ChatGPT - good or evil? AI impact on cybersecurity

As the financial threat landscape has been evolving dramatically over the past few years, Kaspersky experts believe it is no longer enough to look at the threats to traditional financial institutions. We must assess financial threats as a whole. The cybercrime market has been developing extensively, with the overwhelming majority of attackers pursuing one goal – financial profit. 
This year, Kaspersky researchers have decided to adjust their predictions accordingly, expanding them to encompass both crimeware developments and financial cyberthreats. In a webinar on crimeware and financial threats, Kaspersky’s GReAT representatives – Dan Demeter, Dmitry Galov, and Marc Rivero – will analyze the key events and trends of 2022 and forecast several important tendencies expected in 2023.

Contents:
• A look back at 2022 financial cyberthreats predictions
• An overview of significant events and trends of 2022 
• Predictions for 2023 
• Q&A session

Speakers: 
Marc Rivero, Dan Demeter, Dmitry Galov, Global Research and Analysis Team, Kaspersky

Crimeware and financial predictions for 2023

The political turmoil of 2022 brought about a shift that will resonate in cybersecurity for years to come and have a direct impact on the development of future sophisticated attacks. The 2023 forecast is based on the expertise of the Kaspersky Global Research and Analysis Team (GReAT), and the operations it has witnessed while tracking more than 900 APT groups and campaigns this year.

During the session, David Emm and Pierre Delcher will guide you through the trends were tracked throughout 2022 and the implications that last year’s events may have in 2023.

Speakers: 
David Emm, principal security researcher
Pierre Delcher, senior security researcher
Global Research and Analysis Team, Kaspersky

Advanced persistent threat predictions for 2023

Mobile threats rank high in the contemporary threat landscape. Understanding them enables cybersecurity professionals to protect corporate networks more efficiently.
In this webinar, Kaspersky GReAT Lead Security Researcher Victor Chebyshev will present some up-to-date cherry-picked mobile threats which gained traction in 2022. Not only will you become familiar with the evolving cybersecurity challenges of 2022, but you will also scrutinize the most notorious ones! And here is more to come: during the webinar, Victor will reverse engineer a real-life mobile malware sample.
 
Join the webinar to:
 
- be introduced to the key mobile threats of 2022 and learn to reverse engineer them
- observe reverse engineering of a real-life mobile malware sample
- get introduced to Kaspersky xTraining’s recent Mobile Malware Reverse Engineering training
 
Victor will spill the beans on a recent training that he created and produced for the Kaspersky xTraining platform: Mobile Malware Reverse Engineering, a comprehensive on-demand online course aimed at building competence in reverse engineering mobile malware.
 
The course features static and dynamic analysis of some outstanding and unique malware samples like MagicKarakurt, LightSpy and the DuKong framework and is of great value for gaining experience in addressing mobile attacks.

Be sure to follow the webinar closely as all participants will have a chance to win six months FREE access to the Mobile Malware Reverse Engineering course worth $890!

Reversing mobile threats in 2022

Cybersecurity incidents were plentiful in 2022 – and most significant changes in the ICS threat landscape are mostly determined by geopolitical trends and the subsequent macroeconomic factors. In the webcast, Evgeny Goncharov, Head of Kaspersky ICS CERT, will share predictions of what we should expect to happen in cybersecurity of industrial organizations and OT systems in 2023. 
These predictions are the sum of the opinions of Kaspersky’s ICS CERT team based on their collective experience in researching vulnerabilities, attacks, and incident response, as well as the experts’ personal vision of the main vectors driving changes in the threat landscape. 

Contents:
• Year 2022 - key takeaways
• Developments in the APT world
• Risk factors due to geopolitical ebb and flow
• Additional technical and technological risk factors
• Most noteworthy techniques and tactics in future attacks


Speaker: 
Evgeny Goncharov, 
Head of Kaspersky ICS CERT

ICS cyberthreats in 2023 – what to expect

In a very short period of time, ransomware has transformed into a fully-fledged industry for cybercriminals with a myriad of actors involved. Today it represents one of the most dangerous threats to information. 

Kaspersky experts have analyzed the tactics, techniques, and procedures (TTPs) that major ransomware gangs have under their belt – and are ready to share this knowledge.

Kaspersky has been observing ransomware activity for a long time, discovering many similarities in the tactics, techniques, and procedures used by various groups during attacks. Kaspersky’s investigations have resulted in a monumental study on the TTPs of modern ransomware: in accordance with the MITRE ATT&CK methodology, it allows for quick and accurate attribution of detected events. 

This webcast will include:
• A general overview of the modern ransomware landscape
• The most common trends in ransomware today
• A comparative analysis of ransomware groups
• Q&A

The webinar will be conducted by Kaspersky experts who were in charge of the investigation: Vladimir Kuskov, Dmitry Galov, Nikita Nazarov, Fedor Sinitsyn, Global Reseach and Analysis Team.

Ransomware today: Tactics, techniques, and procedures

The sensitive data stolen from companies during a cyberattack often ends up on darknet markets. With the rise of the cybercrime as a service business model, we observe that not only data obtained from attacks is for sale but also for the information necessary to organize that attack.

Once an attacker gains access to the infrastructure of an organization, they can then sell that access to other advanced cybercriminals, such as ransomware operators. The price for accessing potential victims’ systems is relatively inexpensive when compared to the possible damage to the targeted business. In fact, the average cost for access to a company’s systems lies between the range from $2000 to $4000. Meanwhile, such attacks result in significant financial and reputational losses to the attacked organization and may even cause suspension of work and disruption of business processes. SMBs and enterprises are both key targets of such attacks.

Yuliya Novikova and Sergey Shcherbel, security experts at Kaspersky, shed light on how a company’s data and the information on their systems is sold on darknet markets.
In this webinar you will learn:
- Which types of company data are most widespread on dark markets 
- Which criteria cybercriminals use to evaluate the price for organization’s data 
- How to keep your data protected

Dark market for corporate data: how cybercriminals sell access to your company

In this webinar, Amin Hasbini and Maher Yamout, security researchers at Kaspersky’s GReAT in the META region, will share their insights on how the coronavirus epidemic has affected cybersecurity.

You will find out:

•  The cyber security challenges of working remotely in the current circumstances
•  Recent threat landscape as seen by Kaspersky and cyber threats related to the Coronavirus epidemic
•  Sneak peeks into the latest private threat intelligence findings by Kaspersky related to META

Adapting to a new reality: threat landscape and cybersecurity challenges in 2020

Cyber Attacks

Cyber Defence

Coronavirus

Threat Assessment

Threat Analysis

Threat Horizon

Threat Defence

Threat Intelligence

Remote Office

Remote Access

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Adapting to a new reality: threat landscape and cybersecurity challenges in 2020

Presented by

About this talk

More from this channel