Name: How To: Detect and Prevent Accidental Exfiltration by an Employee
Start: 2024-06-17T18:18:00Z
End: 2024-06-17T18:18:02.000Z
Location: BrightTALK

Lookout is an integrated endpoint-to-cloud security company. Our mission is to secure and empower our digital future in a privacy-focused world where mobility and cloud are essential to all we do for work and play. We enable consumers and employees to protect their data, and to securely stay connected without violating their privacy and trust. Lookout is trusted by millions of consumers, the largest enterprises and government agencies, and partners such as AT&T, Verizon, Vodafone, Microsoft, Google, and Apple. Headquartered in San Francisco, Lookout has offices in Amsterdam, Boston, London, Sydney, Tokyo, Toronto and Washington, D.C. To learn more, visit www.lookout.com.

We’d like to invite you to an opportunity to learn from a longtime Lookout customer, Alan Zaccardelle, who recently discovered an Android vulnerability, which he reported to Google and they are going to patch in the coming weeks. Alan has been with Airbus for more than 14 years and is now the CISO at one of their subsidiary organizations. 

As you know, Android devices can run both work and personal profiles. This newly discovered vulnerability has existed in the Android Work profile since 2015 and allows any app (malicious, legitimate, or unauthorized) to be sideloaded when a new Work profile is being created on a BYOD device. 

A malicious user can use this vulnerability to install any app during the Work profile creation and then use the sideloaded apps in the Work Profile as long as the device is enrolled in MDM. 

In this exclusive session, you’ll learn: 
- How Alan’s research led to this discovery and an explanation of its technical aspects
- The impact that this type of vulnerability could have on enterprise devices and data
- What mobile risk can look like, even on devices managed by an MDM, and why mobile needs to be part of your broader EDR strategy.

Exclusive Briefing: Discovery, disclosure, and impact of an Android vulnerability

Mobile devices have evolved into the cornerstone of employee productivity, communication and identity. However, they remain a blind spot for security teams and are a natural target for any threat actor aiming to compromise an organization. 

Without visibility into your organization’s mobile ecosystem, it’s impossible to identify security trends, potential risk, and coordinated cross-platform attacks. By the end of the session, you’ll have a well-rounded understanding of:
- How the traditional cyber kill chain is modernizing as threat actors exploit mobile devices and users more aggressively. 
- Evolving trends in the mobile threat landscape including the severity of mobile vulnerabilities and efficacy of social engineering attacks such as executive impersonation. 
- How mobile device telemetry can evolve from being a peripheral data point to a critical piece of the enterprise security puzzle by integrating with your SIEM, SOAR, or XDR. 
- Actionable insights that will help your security team gain better visibility into mobile risk and stay a step ahead of threat actors leveraging modern tactics.

The SOC’s Biggest Blind Spot and the Risk it Poses

2024 saw a surge in cyberattacks alongside rapid tech advancements, making it clear that staying ahead in the digital world is more important than ever.

In this exclusive webinar, we’ll explore the top cybersecurity predictions for 2025 — highlighting emerging threats, key trends, and the latest strategies for fortifying your defenses.

Join our expert panel as they share valuable insights and predictions on:
- New ransomware tactics and data breach methods
- How AI is shaping both security solutions and cyberattacks
- Growing threats from nation-states
- The latest security regulations and compliance frameworks

Cybersecurity Predictions: A Look into 2025's Security Landscape

As cyber criminals increasingly exploit mobile devices to breach cloud environments, security strategies for 2025 must prioritize mobile threat intelligence. This webinar explores new findings on advanced threats from China and Russia, demonstrating how mobile endpoints are leveraged in the modern kill chain to compromise cloud data. Learn why Mobile Endpoint Detection and Response (EDR) is essential in 2025 and how to stay ahead of evolving threats. Get actionable insights and strengthen your defenses against the rising tide of mobile-enabled cyberattacks.

2025 Security Planning: How to Utilize Mobile Threat Intelligence to Protect Cloud Data

Why Does My CEO Want My Password? Cybercriminals are impersonating senior executives and IT teams to trick employees into sharing critical sensitive information and corporate credentials. With one usable set of credentials, attackers can quietly access your cloud infrastructure and compromise data undetected. What’s worse is that you often don’t know when your employees are being targeted - making it impossible to proactively defend against these threats. 

Join this 30-minute webinar to learn: 

- How cybercriminals are modernizing their tactics to compromise entire organizations through a simple text message. 
- Why visibility into the initial steps of a modern attack is crucial to protecting data.
- How Lookout protects against executive impersonation and smishing attacks.

Lookout & Verizon: Executive Impersonation and Smishing Attacks Explained

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorized access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Turning the Tables on Adversaries: Enhance Your SOC Playbooks With Mobile

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorised access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Modern breaches now happen in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure with legitimate credentials and swiftly compromise data. Recent high-profile attacks are evidence of this including MGM Resorts, Caesars Entertainment, Twilio, and many others.

Join us for this 30-minute presentation to learn:
- How the traditional cyber kill chain has evolved to exploit mobile users
- Key findings from Lookout's Q1 Mobile Threat Landscape Report
- What makes your organization vulnerable to a modern-day attack
- Why automated defenses are essential
- How Lookout protects its customers from these types of attacks

Information Week Hosts Tales of a Modern Data Breach: The Rise of Mobile Attacks

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your organization safe.

Interactive Workshop: Hunt for Threats with Lookout Researchers

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your data secure

Scattered Spider: The cybercrime group behind the MGM Resorts data breach costing an estimated $100 million. 
APT41: A notorious Chinese APT that recently developed two mobile surveillanceware tools, WyrmSpy and DragonEgg, to target over 100 public and private sector organizations.

These two groups represent a global shift among threat actors – focusing on mobile devices to quietly compromise credentials, apps, and data. Join Tyler Croak, Principal Strategist at Lookout, and Ken Saganowski, Director of Technical Advisory at MOXFIVE, in this 30-minute session, to learn: 
 
- How the traditional kill chain has evolved 
- What modern tactics are being used to trick your users
- What happens after an attacker gains access - A real-life Scattered Spider example
- How to detect an intruder in your system
- What immediate actions you can take today to protect data in 2024

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Cybercriminals continue to evolve their tactics to compromise your organization's security defenses. The modern approach is to start by targeting users on their mobile devices to steal their credentials. 

Learn how these cybercriminals have evolved their tactics, and how Lookout prevents and protects at each stage of the kill chain. 

For more information, visit: www.lookout.com

How Lookout Protects Against the Modern Day Kill Chain

Embark on a focused exploration of the critical areas in mobile security in our upcoming webinar. Let us equip you with the knowledge needed to safeguard your organization’s mobile devices from phishing and malicious content. We’ll share threat intelligence, demonstrate simulated incident response scenarios, and show you how to tighten security with Workspace ONE Mobile Threat Defense integrated phishing and content protection.

See Mobile Threat Defense in Action

Cloud breaches are now happening in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure and swiftly compromise data.

Join us for this 30-minute webinar with Lookout EVP of Product to learn: 
- How the traditional cyber kill chain has evolved to exploit mobile users
- Why attacks utilizing a mobile device are increasing
- What makes your organization vulnerable to a modern-day attack 
- Why stopping breaches requires the ability to identify anomalous data movements
- The three key capabilities you need to defend against modern breaches

The Modern Kill Chain: How Attacks Have Gone From Months to Minutes

As the digital age is constantly evolving, the cybersecurity landscape remains in a constant state of change. The year 2023 bore witness to a multitude of cyberattacks and technological advancements, emphasizing the pressing need to stay one step ahead of the ever-shifting digital frontier.

In this webinar, we'll discuss the top cybersecurity predictions for 2024, including emerging threats, trends, and best practices for defense.

Our experts will share their insights on:
- The most likely cybersecurity threats to face in 2024
- The latest cybersecurity trends and how they could impact your organization
- Best practices for defending against emerging threats
- How to build a resilient cybersecurity posture

Cybersecurity Predictions for 2024: Emerging Threats and Best Practices

Security training for users is often the first step towards improving your organization’s security posture.  With the Lookout Cloud Security Platform, you can provide your users with real-time coaching to provide guidance immediately when security violations occur.

How To: Gain Real Time Guidance on the Proper Usage of Corporate Apps and Data

Generative AI sites are the latest Internet resource that is changing how users approach their tasks. These platforms leverage AI to create and improve content based on user submissions.

Learn how to protect confidential information from being shared to the collective by identifying personally identifiable information, compliance violations, or even source code.

How To: Protect Against Sensitive Data Loss on Generative AI Platforms

It often takes years to fully integrate the IT infrastructure after a merger and acquisition. During that time, you need to provide user access to private enterprise apps while aligning security policies across both organizations. The Lookout Cloud Security Platform allows you to quickly provide access to private enterprise apps by following a zero trust network access architecture.

How To: Integrate With Your Existing Infrastructure

Many organizations work with a trusted group of partners and contractors. Appropriate security measures are required to protect the sharing of confidential information. With the Lookout Cloud Security Platform, you can enable data protection for external communication while helping to promote collaboration.

How To: Ensure Secure Data Sharing Between Employees, Partners, and Contractors

Many organizations leverage on-prem systems that are not cloud ready. Granting remote access often involves the deployment of additional on-prem VPN components. With the Lookout Cloud Security Platform, you can leverage zero trust network access to provide secure access and data protection to your private enterprise apps.

How To: Enable Cloud Computing While Preserving On-Prem Investments

Credential theft, password spray, and dark web credential purchases are often the favored approaches to gain access to your environment for a ransomware attack. With legitimate credentials, the attacker is able to access your environment and prepare to launch an attack.

Learn how these actions leave clues that you can detect with the Lookout Cloud Security Platform.

How To: Detect Early Events in Ransomware Attacks

Every day, your employees upload, download and share corporate data from your approved SaaS applications. While this is great for productivity, it often creates ongoing risk like data leakage, unauthorized sharing, regulatory violations or malware incursions.

Learn how the Lookout Cloud Security Platform enables you to pinpoint areas within your cloud apps that expose you to data risk while automatically taking corrective action.

How To: Discover and Control of Corporate Data Wherever It Is Stored

For many organizations, the security topology leveraged multiple solutions, which were spliced together. By utilizing the Lookout Cloud Security Platform, you can define a set of security policies that get seamlessly applied to SaaS, private enterprise apps, mail, and web sites. This approach not only simplifies the security architecture but also helps seal gaps within the security framework.

How To: Consolidate Existing Vendor Solutions

With a zero trust model, every resource requires dynamic authentication. A user’s context must be validated before granting access. 

Learn how the Lookout Cloud Security Platform enables you to easily apply zero trust principles to your application resources.

How To: Continuously Monitor and Enforce Access Control Based on User Behavior

Cloud storage solutions have become a cornerstone of modern data management. Their scalability, affordability, and ease of use make them incredibly attractive. However, misconfigured access controls can lead to accidental data exposure.

Learn how the Lookout Cloud Security Platform ensures that your collaboration doesn't compromise your data security.

How To: Secure Sharing Controls with DSPM

Transitioning from a perimeter-based security model to a continuous, zero trust access approach begins with redefining how users gain initial access to applications.
Learn how the Lookout Cloud Security Platform, enable organizations to implement a continuous, zero trust access model without the complexity.

How To: Provide Continuous, Zero Trust Access

Data breaches are a constant concern for organizations. Sensitive information, including personally identifiable information (PII), intellectual property, and financial records, is a prime target for cyberattacks. 
Learn how the Lookout Cloud Security Platform can help improve your overall data security compliance.

How To: Enforce Encryption for Data at Rest

Organizations are trying to discover and protect data spread across numerous SaaS, private, Web, and infrastructure containers.  Many of these data containers hold sensitive information. To help with this, users are trained to apply classifications tags to help the organization identify classified data, to better enforce access controls, and to meet compliance requirements. 
But manual classification is error prone. Every user must learn, understand and apply the same logic when selecting the most appropriate classification tag.  Learn how the Lookout Cloud Security Platform empowers you to maintain a strong data security posture.

How To: Improve Data Governance with DSPM Classification

Top Data Protection SSE Use Cases

Not all cyber threats have malicious intent. Employees simply trying to get work done, often accidentally put data at risk. By leveraging the Lookout Cloud Security Platform, you can automatically remediate security issues caused by user mistakes, without preventing users from getting work done.

How To: Detect and Prevent Accidental Exfiltration by an Employee

Data Breach

Data Security

Data Protection

Employee Experience

Risk Management

User Behavior

IT Security

Cloud

Cloud Security

Data Best Practices

Get powerful HR legislation insights that will help you safeguard your business and workforce. Connect with thought leaders and colleagues to get the most up-to-date knowledge on legislations you need to be aware of.

Legislation

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

How To: Detect and Prevent Accidental Exfiltration by an Employee

Presented by

About this talk

Lookout