Name: Iranian Cyber Warfare and Threat Actors
Start: 2020-03-16T17:00:00Z
End: 2020-03-16T17:43:00.000Z
Location: BrightTALK
Rating: 4.27

IntSights, now a Rapid7 company, enables organizations of any type or size to gain the full benefits of external threat intelligence, no matter the size or sophistication of their threat intelligence programs. Unlike any other solution on the market, IntSights takes the complexity out of threat intelligence and delivers instant value without the heavy lift or sizable resource allocation that traditional threat intelligence solutions require. Designed to scale, IntSights is for any company, and frictionless integration of our real-time cyber threat intelligence with existing security infrastructure allows enterprises to maximize return on investment. 

In 2022, your attack surface will be larger than ever before. From the onset of the hybrid workforce to huge waves of data being produced, security teams around the world are working hard to reduce their attack surface and improve operational security. But to do this, effective vulnerability management is a must-have. 

A successful vulnerability management program must have visibility over the entire organisation and the right tools. This year, unpatched vulnerability endpoints will continue to be exploited, and building up your vulnerability management is key to avoiding a breach. 

Join us in this session as we discuss: 

-  The importance of patching 
-  Taking a risk-based approach to vulnerability management
-  AI and fraud prevention 
-  How security teams are “cleaning up” vulnerabilities left behind by Covid
-  Attack surface reduction and management

Vulnerability Management in 2022: Reduce Your Attack Surface

Underground criminal forums reveal a variety of criminal threats to the energy sector, and recent cyberattacks such as the one on Colonial Pipeline highlight the significance of these ongoing industry threats.

Criminal forums provide myriad ways in which bad actors can monetize access to energy networks and data. They also reveal details on TTPs and malware that criminals use against energy organizations.

In this educational presentation, Paul Prudhomme, Head of Threat Intelligence Advisory at IntSights, will discuss the threats to energy organizations as described in posts on underground criminal forums, including the dark web.

Watch this webinar to learn:
-The specific underground criminal activities threatening today’s energy organizations, and the types of data leaking out as a result of ransomware events
-Why Colonial Pipeline wasn’t the first — and it won’t be the last — energy company cyberattack
-How dark web posts provide important clues for improving cybersecurity measures
-Best practices to avoid losing control of your company’s data

Threats to the Energy Sector on Underground Criminal Forums

The healthcare and pharmaceutical industry has a complex and challenging cyber threat landscape. Its distinctive features must be understood and proactively addressed to maintain a strong security posture.

The IntSights 2021 Healthcare and Pharmaceutical Industry Cyber Threat Landscape Report draws heavily upon IntSights’ original coverage of underground criminal forums, and contains supplemented coverage from other sources, such as media and vendor reporting on state-sponsored attacks.

Join the report’s lead author, Paul Prudhomme, for an on demand webinar. Paul will provide a detailed walk-through of these key considerations:

-The data sets and accesses that cybercriminals seek
-Where corporate-level initiatives compete against security controls
-The “gotcha” of vulnerable medical devices as well as non-health systems
-How compliance and regulation stops short of addressing root problems

Specific steps for keeping your organization’s data out of underground criminal forums

Building Immunity: The Healthcare & Pharmaceutical Industry Threat Landscape

The expanding attack perimeter has companies of all sizes struggling to monitor and protect against attackers. Security and risk leaders need more context about the threats that exist across their company’s internal and external attack surfaces, as well as the ability to ensure a rapid and complete response. 

In this webinar, Jeff and Alon will explore the intersection of extended detection and response (XDR) and cyber threat intelligence (CTI) to uncover its many benefits for security risk mitigation:
-How CTI extends your company’s “monitored environment”
-Ways to improve signal-to-noise ratio and understand your real risk
-The latest technologies for driving a proactive and automated response

How XDR and CTI Converge for Stronger Security Risk Mitigation

As organizations face several different challenges in 2022 and beyond, preparing for a cyber attack is as important as ever. Businesses face a myriad of cyber threats; from phishing to ransomware, it's imperative that your organization puts in place measures to protect your most important assets.

Join top security leaders for an interactive discussion on how to better secure the enterprise in 2021 and learn more about:

- Trends in cyber attacks and what's at risk
- Prevention best practices
- Solution recommendations for attack detection and response
- Top threats on the horizon and what's at risk
- How organisations can take the necessary steps to prepare for the unexpected and build business resilience

Moderated by: 
Michelle Drolet, CEO, Towerwall

Panelists include: 
Rapid7
Kelvin Murray, Snr. Threat Researcher, Carbonite + Webroot, OpenText Business Solutions
Paul Prudhomme, Head of Threat Intelligence Advisory at IntSights, a Rapid7 Company
James Johnson, Cloud & Data Security Specialist, ATG - EMEA, Proofpoint

Threatscape 2022: Cyber Attack Prevention

Security teams face a great many challenges in protecting their organizations from cyberattacks, but the threat of a network breach looms largest over their heads. Threat actors often initiate breaches of enterprise networks before selling and trading that access to other hackers on cybercriminal forums, leaving network administrators to defend against sophisticated attackers.

Watch this session to learn about:
• Specific entry points and methods of breaching a network that intruders often sell to other threat actors at a great profit
• How the transfer of access can create discontinuity in the TTPs that network security teams must address
• How delays in transferred access may actually create an opening for admins to detect the breach and thwart the attack
• Using external threat intelligence to proactively identify and remediate these kinds of network breaches before a large-scale attack can be carried out

Speaker: Paul Prudomme, Head of Threat Intelligence Advisory at IntSights

Selling Breaches: How Cybercriminals Buy and Sell Network Access

Leaked credentials have been hot commodities on dark web black markets for years, ranging from small batches to complete database dumps. The security industry has been battling back and forth with cybercriminals, developing new and better ways to authenticate users: 2FA, OOB authentication, device ID, KBA – you name it. Recently, hackers have found new and innovative ways to circumvent even advanced security protocols – like digital browser identity theft, which allows them to almost perfectly mimic a user's digital fingerprints.

Listen to this webinar to learn more about:

-The delicate relationship between authentication vs identification vs validation vs verification, from the defender’s side
-The evolution of the different tools, tactics and procedures used to circumvent and beat authentication solutions viewed from the cybercriminal’s perspective
-Some of the recent dark web stores and offering, their prices, details and their targets

The Evolution of the Dark Web Digital Identity Markets

The dark web is a sprawling underground network of secrecy where cybercriminals plan and coordinate cyberattacks against organizations. Monitoring the dark web can provide cybersecurity teams with valuable intelligence for how, when, and where a cyberattack might be launched, but this is no simple task. You need to know what to look for and how to engage on the dark web in order to identify threats without drawing suspicion.

Join IntSights to listen in on this webinar. We’ll share:

-Key dark web sources you need to be monitoring
-How to covertly establish access behind enemy lines
-Common examples of dark web threats
-How to operationalize your dark web monitoring program

How to Hunt Threats on the Dark Web to Prevent Cyberattacks

Russian threat actors target Western organizations and governments with large-scale data breaches, malware-spreading campaigns, espionage, election meddling, and other malicious activity while the Russian government turns a blind eye.

Listen to this webinar to learn more about:

-The restrictive internet laws Russia imposes on businesses and consumers alike
-The cyber-political landscape, the robust Russian cybercriminal underground community on the dark web
-The sophisticated tools and tactics Russian hackers use to levy their attacks

The Business Impacts of Russia’s Thriving Cybercriminal Underground

2019 was the worst year to date for data breaches. Phishing, misconfiguration mistakes, third party risk, and insider threats continue to plague organizations across industry verticals. So, what are some proactive approaches organizations can take to address old and new security threats in 2020?

Join this panel of security experts and industry leaders to learn more about:
- The biggest threats to the enterprise in 2020 
- What keeps CISOs up at night
- How to stay ahead of the threats
- Proactive security strategies and best practices
- Avoiding misconfiguration mistakes and minimizing the risk of insider threats
- Solutions available today and what to expect in the near future

Speakers: 
Jo Peterson, Vice President Cloud Services, Clarify360 (Moderator)
Tyler Cohen Wood, Cyber Security Expert, Former Senior Intelligence Officer, Private Consultant
Carlos Valderrama, SOC Director, Proficio
Athar Awan, Cyber Security Consultant, Security Solutions Consultants
Etay Maor , Chief Security Officer, InSights

[PANEL] Protecting the Enterprise from Threats in 2020

Charity Wright, Cyber Threat Intelligence Advisor at IntSights will take you on a tour of the dark web and explain how CISO's can successfully implement a threat intelligence strategy to neutralize threats outside the wire and at the earliest stages of the cyber kill chain. 

Join this session to learn active measures to bolster your external cyber defense and response, including practical strategies to accelerate SecOps activities with dark web threat intelligence.

CISO's Guide to Proactive Breach Mitigation Using Threat Intelligence

The common notion is that state actors engaged in APT campaigns work in solitude and launch their destructive attacks in the stealthiest manner possible, rendering all pre-emptive intelligence actions against them useless. Is that what happens today? Is their way to perform reconnaissance activities and monitoring criminals on darknet and Clear Web to discover these campaigns? Discussing real use cases of state actors engaged in APT campaigns, explore what can be done with the available intelligence tools we have today, specifically from the Dark Web.

The discussion will include real use cases of APT actors performing reconnaissance activities on darknet platforms and on the Clear Web. It will provide useful tips for organizations who wish to assess their exposure and vulnerability to such attacks by using the same reconnaissance methods as the threat actors themselves and advanced OSINT tools.

About the presenter:

Alon Arvatz served in an elite intelligence unit in the Israel Defense Forces. While serving for 3 years in the most innovative and operational setting, Alon led and coordinated large operations in the cyber intelligence world. Alon established Cyber School, a center providing teenagers with courses, seminars and workshops on cyber intelligence. Today, Alon is the Co-Founder & VP of Product Development at IntSights. While serving in an elite intelligence unit in the Israel Defense Forces Alon lead core cyber threats discussions investigating and deliberating main cyber topics. He also established a cyber center for teaching cyber and have a lot experience in presenting and teaching the cyber world in general and the hackers and dark and deep web in specific.

OSINT: The Secret Weapon in Hunting Nation-State Campaigns

The Dark Web is a critical resource to help security teams move from a reactive to a proactive posture.  Recently, IntSights examined how dark web forums focused on recruiting and collaborating insiders. Though our findings focused on insider threats, our method highlights how examining the Dark Web has become a crucial part of implementing proactive security.  In this talk, security researcher Alon Arvatz will go through:

- Methods and techniques to uncover critical intelligence to reduce enterprise risk.  
- How to extract intelligence from Dark Web using OSINT WebINT tools and methodologies.
- How security teams can use threat intelligence to incorporate proactive controls.
 
About the speaker
Alon Arvatz, a former IDF intelligence officer, was tasked with exploring the Dark Web to find threats to his country

Dark Web Tutorial: How to Use the Dark Web to Enable Proactive Security

The Dark Web.  A lot of scary things happen there--but it’s also a tremendously useful resource to bolster security.  But you have to know how to use it and where to look.  In this webinar, we’ll help security teams better leverage the Dark Web to protect the enterprise.  

Alon Arvatz, a former IDF intelligence officer, was tasked with exploring the Dark Web to find threats to his country.  He’ll share his knowledge and techniques including:
  
  · Know where to look and what to look for in the Dark Web
  · Leverage the Dark Web to predict attacks
  · Track and identify threat actors

What Every Security Professional Should Know About the Dark Web

Cyber attacks don't just happen. You need an attacker who is motivated, has infrastructure, seeks resourcing and performs reconnaissance.  And all this happens before the attack.  Ironically, most security vendors focus on blocking or identifying activity at the point of attack.  But what if you could identify attacks during development, during the hacker supply chain? 

Clear and effective visibility into the attack chain would give security teams a dramatic ability to predict attacks, girding before the attack even begins. In this webinar, security researcher Ido Wulkan will help you understand where to look, what to look for and how to do it. 

About the Presenter:
Ido has a decade of experience in intelligence research and analysis, focusing on the deep and dark web. Ido served in one of the leading intelligence units of the Israeli Defense Force (IDF) as a cyber intelligence analyst, where he gained intimate knowledge of various threat actors and their techniques. Following his service, Ido worked at several intelligence firms as an analyst and team leader, where he expanded his knowledge of cybercrime ecosystems. Ido now leads IntSights’ cyber intelligence analysts team, where he serves as a focal point for all IntSights’ intelligence.

Using the Hacker Supply Chain to Get Ahead of the Attack [Threat Hunting Series]

Tensions escalated between the United States and Iran when the U.S. assassinated top-ranking military official, General Qasam Soleimani, in early January 2020. The likelihood of retaliatory cyberattacks from Iranian Advanced Persistent Threat (APT) groups against U.S. organizations is high. Now is the time to assess whether your organization is a likely target of Iranian state-sponsored cyber operations, and determine if your team is ready and trained to respond.

Watch a live recording of a discussion between our Chief Security Officer Etay Maor and Cyber Threat Intelligence Analyst Charity Wright about the potential ramifications of the recent tensions, and how they may impact global organizations. You’ll learn about:

-Iranian cyber capabilities, tactics, targets, Indicators of Compromise (IoCs), and motivations
-How to better defend against Iranian cyberattacks by identifying threats at the source
-How to prepare your SOC and incident response teams to respond calmly and effectively to state-sponsored attacks

Iranian Cyber Warfare and Threat Actors

Cyber Attacks

Threat Landscape

Threat Detection

Security Operations

Network Security

Cyber Defence

Security Awareness

Cyber Intelligence

Threatscape

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Iranian Cyber Warfare and Threat Actors

Presented by

About this talk

More from this channel