Name: Ep 9 - Biggest Cybersecurity Challenges of 2022: Are You Prepared?
Start: 2023-06-15T09:00:00Z
End: 2023-06-15T09:01:05.000Z
Location: BrightTALK
Rating: 5

F5 is a multi-cloud application services and security company committed to bringing a better digital world to life. F5 partners with the world’s largest, most advanced organizations to secure and optimize every app and API anywhere—on premises, in the cloud, or at the edge. F5 enables organizations to provide exceptional, secure digital experiences for their customers and continuously stay ahead of threats.

SSRF flaws occur when a web app fetches a remote resource without validating the user-supplied URL. Attackers can coerce the app to send a request to an unexpected destination—even if it’s secured by a firewall, VPN, or other network access control list (ACL). 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 

Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
• Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners.

OWASP Top 10: Server Side Request Forger - Ep10

The rise of multi-cloud and edge architectures is resulting in applications becoming more distributed and interconnected across different environments. Managing and securing these connections between applications and the associated APIs across different cloud networks is extremely complex.

Multi-cloud networking aims to address and simplify these challenges.

In this session, we will share case studies of how multi-cloud networking has solved critical business problems for our customers:

- Interconnecting applications and securing APIs across private data centres and public clouds
- Connecting cloud-native applications across a set of distributed Kubernetes clusters
- Enriching traditional MPLS- and SD-WAN-based services with multi-cloud networking to simplify and secure application interconnectivity between clouds


By watching this session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Ep 3 - Multi-Cloud Networking in Action: Real-World Success Stories

Without properly logging and monitoring app activities, breaches cannot be detected. Not doing so directly impacts visibility, incident alerting, and forensics. The longer an attacker goes undetected, the more likely the system will be compromised. 
  
Protect Your Web Apps from New and Critical Risks 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open-source software. 
  
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn:
 
 • How OWASP creates its Top 10 list of the most critical security risks to web applications. 
 • Recategorization of risk to align symptoms to root causes. 
 • When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
  
By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

OWASP Top 10: Security Logging and Monitoring Failures - Ep9

The pace of the adoption of generative AI is set to eclipse nearly every other major technology introduction in the past two decades. As an inherently democratised technology usable by technical and non-technical users alike, security professionals are being challenged to leverage it as a tool – and view it as a threat.

In this session, we will examine the defensive and offensive uses of generative AI, and attempt to predict what the future holds for the cyber security industry as we adjust to the rapidly growing "new normal". You will learn about:

- The emerging threat surface created and embodied by generative AI technologies
- Ways that adversaries use and abuse generative AI, and possible defences
- A simple way to classify AI workloads that you can easily apply
- What the future holds for AI-backed security



By watching this session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Ep 2 - Generative AI in Cyber Security: A Double-Edged Sword

This new risk category focuses on making assumptions related to software updates, critical data, and CI/CD pipelines without verifying integrity. The SolarWinds supply-chain attack is one of the most damaging we've seen. 
  

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
  
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn:
 
 • How OWASP creates its Top 10 list of the most critical security risks to web applications. 
 • Key changes including recategorization of risk to align symptoms to root causes. 
 • When each risk can manifest, why it matters, and how to improve your security posture. 
 
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
  
By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

OWASP Top 10: Software and Data Integrity Failures - Ep8

In a work-from-anywhere and multi-cloud world, keeping your organisation safe has become incredibly complex. Adding more and more security vendors and products isn't necessarily solving the problem as attacks are getting more sophisticated.

The industry is realising that customers need fewer but more effective solutions that can be easily integrated into one coherent security architecture.

In this session, our Field CTO in EMEA will share his perspectives on the security solutions landscape and help you navigate the myriad of architectural approaches. He will cover:

- Key trends in the security industry
- Consolidation and evolution through cyber security mesh architectures
- How multi-cloud and work-from-anywhere have transformed the security industry
- What WAAP, CNAPP, SSE, SASE, CSMA, and other trending security acronyms are all about and how they fit together
- How customers can strengthen and simplify their security posture in this new reality




By watching this session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Ep 1 - Comparing and Positioning Security Architectures

It is critical to confirm identity and use strong authentication and session management to protect against business logic abuse. Most authentication attacks trace to the continued use of passwords. Compromised credentials, botnets, and sophisticated tools provide an attractive ROI for automated attacks like credential stuffing. 

The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Identification and Authentication Failures - Ep7

The pace of the adoption of generative AI is set to eclipse nearly every other major technology introduction in the past two decades. As an inherently democratised technology usable by technical and non-technical users alike, security professionals are being challenged to leverage it as a tool – and view it as a threat. 
 
In this session, we will examine the defensive and offensive uses of generative AI, and attempt to predict what the future holds for the cybersecurity industry as we adjust to the rapidly growing "new normal". You will learn about: 
 
 • The emerging threat surface created and embodied by generative AI technologies
 • Ways that adversaries use and abuse generative AI, and possible defences
 • A simple way to classify AI workloads that you can easily apply
 • What the future holds for AI-backed security

Generative AI in Cyber Security: A Double-Edged Sword

Open Source software exploits are behind many of the biggest security incidents. The recent Log4j2 vulnerability is perhaps the most serious risk in this category to date. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Vulnerable and Outdated Components - Ep 6

Security Misconfiguration is a major source of cloud breaches. Learn what to do and avoid—as modern app development, software re-use, and architectural sprawl across clouds increases this risk. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Security Misconfiguration - Ep 5

Security needs to be inherent to applications. A secure design can still have implementation defects leading to vulnerabilities. An insecure design can’t be fixed by perfect implementation. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Insecure Design - Ep 4

Injection is a broad class of attack vectors where untrusted input alters app program execution. This can lead to data theft, loss of data integrity, denial of service, and full system compromise. Injection is no longer the top risk, but still formidable. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Injection - Ep 3

Cryptographic failures, previously known as "Sensitive Data Exposure", lead to sensitive data exposure and hijacked user sessions. Despite widespread TLS 1.3 adoption, old and vulnerable protocols are still being enabled. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Cryptographic Failures - Ep 2

94% of tested apps showed some form of broken access control. Failures can result in unauthorized disclosure, modification or destruction of data, privilege escalation and lead to account takeover (ATO), data breach, fines, and brand damage. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Broken Access Control - Ep 1

John starts out by explaining what the OWASP Top 10 is. He highlights themes like risk re-orientation around symptoms and root causes, new risk categories, and modern application architectures. Follow along for a video on each of the Top 10 risks. 
 
The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. 
 
Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the new OWASP Top 10 and learn: 

• How OWASP creates its Top 10 list of the most critical security risks to web applications. 
•  Recategorization of risk to align symptoms to root causes. 
• When each risk can manifest, why it matters, and how to improve your security posture. 

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners. 
 
Watch the other episodes of the series below.

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

OWASP Top 10: Overview

Digital transformation has driven a rapid increase in the use of cloud, and as a result many organisations are re-architecting their core business software for a distributed application infrastructure. By exploiting modern, agile development concepts such as microservices and APIs, IT leaders are delivering more flexible and responsive application services. However, this distributed infrastructure puts an even greater focus on securing every element of the interconnected cloud and edge platforms. 

In this session, F5 Field CTO Bart Salaets and Computer Weekly editor in chief Bryan Glick will discuss the opportunities and challenges for IT leaders in deploying, securing, connecting, and monitoring modern distributed apps. They will cover:

• The business drivers leading organisations to adopt distributed cloud services
• The challenges this presents and how IT leaders are tackling them
• The key technologies involved and how they fit together
• Key distributed cloud use cases

Distributed Cloud Services: Key Considerations for IT Leaders

Modern applications are no longer single, monolithic entities but are broken down into multiple microservices communicating through APIs – often deployed in different locations and clouds. As a result, deploying, securing, interconnecting, and monitoring modern apps has become more complex than ever before.

In this webinar, Bart Salaets will explain how to efficiently address these challenges in a distributed cloud environment. 
 
He will cover:
• Securing distributed applications through services such as WAF, DDoS mitigation, bot defence, and API protection
• Interconnecting applications deployed across different environments through multi-cloud networking capabilities
• Deploying applications across cloud and edge environments through a managed Kubernetes platform

By watching this session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

Distributed Cloud Services: Less Pain, More Gain

Over recent years, the traditional WAF (Web Application Firewall) has evolved to include broader capabilities and turned into a broader category called WAAP (Web Application and API Protection). Buu Lam delivers this Brightboard Lesson on what a WAAP is, what does it solve for, and how to take advantage of one.

To learn more visit http://www.f5.com/waap

By watching this Brightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

What is a WAAP?

Ep 13 - Reference Designs for Application Security in Kubernetes

Ep 12 - API Governance & Security In the Modern Enterprise

Ep 11 - WAF Market Trends & Security Analyst Recommendations

Ep 10 - How AUDI Boosted Time-to-Market Through Cultural Change & Security First

Ep 8 - Securing Apps Starts with Securing Kubernetes

Ep 7 - Integrating WAF into DevSecOps Practices

Ep 6 - Scaling Your App Delivery Infrastructure in Minutes not Days

Ep 5 - Top 5 Pitfalls to Avoid in Client-Side Security

Ep 4 - Why You Need Observability Beyond Monitoring Apps

Ep 3 - Smarter Bot Mitigation with Machine Learning Can Reduce Risks and Costs

Ep 2- Multi-layer App Security in Kubernetes for DevSecOps

Ep 1 - Modernising and Securing Your API Architecture

Ep 9 - Biggest Cybersecurity Challenges of 2022: Are You Prepared?

How AUDI Boosted Time-to-Market Through Cultural Change & Security First - Ep 10

Reference Designs for Application Security in Kubernetes - Ep 13

API Governance & Security In the Modern Enterprise - Ep 12

WAF Market Trends & Security Analyst Recommendations - Ep 11

Ep 3 - Smarter Bot Mitigation with Machine Learning

Ep 2 - Multi-layer App Security in Kubernetes for DevSecOps

MyForum Series

Join us for an exclusive myForum event where we explore and debate the most pressing cybersecurity concerns of 2022, and more importantly how organisations can fight back.

Today's cybercriminals vary wildly by motivation, sophistication, level of resources, and depth of specialisation. At the same time, applications are becoming increasingly distributed and decentralised, creating a whole new world of challenges and pain.

Cybersecurity is an infinite game where no organisation or vendor can ever claim outright victory. Staying in that game is only achievable with a long-term strategy, relentless persistence, and constant innovation.

Drawing on the latest research and insights, Bryan Glick (Editor in Chief, Computer Weekly) will be moderating a panel consisting of Lisa Forte (Cybersecurity Expert and Top 100 Women in Tech award winner), David Warburton (Threat Research Manager, F5 Labs), and Matthieu Dierick (Solutions Architect, F5).

By watching this lightboard session, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time

Cyber Security

Cyber Attacks

Application Security

SecOps

Security

Cloud Native

Threat Assessment

DevOps

Bots

Cyber Crime

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ep 9 - Biggest Cybersecurity Challenges of 2022: Are You Prepared?

Presented by

About this talk

More from this channel