Name: How To: Discover and Control of Corporate Data Wherever It Is Stored
Start: 2024-06-17T20:24:00Z
End: 2024-06-17T20:24:02.000Z
Location: BrightTALK

Lookout is an integrated endpoint-to-cloud security company. Our mission is to secure and empower our digital future in a privacy-focused world where mobility and cloud are essential to all we do for work and play. We enable consumers and employees to protect their data, and to securely stay connected without violating their privacy and trust. Lookout is trusted by millions of consumers, the largest enterprises and government agencies, and partners such as AT&T, Verizon, Vodafone, Microsoft, Google, and Apple. Headquartered in San Francisco, Lookout has offices in Amsterdam, Boston, London, Sydney, Tokyo, Toronto and Washington, D.C. To learn more, visit www.lookout.com.

We’d like to invite you to an opportunity to learn from a longtime Lookout customer, Alan Zaccardelle, who recently discovered an Android vulnerability, which he reported to Google and they are going to patch in the coming weeks. Alan has been with Airbus for more than 14 years and is now the CISO at one of their subsidiary organizations. 

As you know, Android devices can run both work and personal profiles. This newly discovered vulnerability has existed in the Android Work profile since 2015 and allows any app (malicious, legitimate, or unauthorized) to be sideloaded when a new Work profile is being created on a BYOD device. 

A malicious user can use this vulnerability to install any app during the Work profile creation and then use the sideloaded apps in the Work Profile as long as the device is enrolled in MDM. 

In this exclusive session, you’ll learn: 
- How Alan’s research led to this discovery and an explanation of its technical aspects
- The impact that this type of vulnerability could have on enterprise devices and data
- What mobile risk can look like, even on devices managed by an MDM, and why mobile needs to be part of your broader EDR strategy.

Exclusive Briefing: Discovery, disclosure, and impact of an Android vulnerability

Mobile devices have evolved into the cornerstone of employee productivity, communication and identity. However, they remain a blind spot for security teams and are a natural target for any threat actor aiming to compromise an organization. 

Without visibility into your organization’s mobile ecosystem, it’s impossible to identify security trends, potential risk, and coordinated cross-platform attacks. By the end of the session, you’ll have a well-rounded understanding of:
- How the traditional cyber kill chain is modernizing as threat actors exploit mobile devices and users more aggressively. 
- Evolving trends in the mobile threat landscape including the severity of mobile vulnerabilities and efficacy of social engineering attacks such as executive impersonation. 
- How mobile device telemetry can evolve from being a peripheral data point to a critical piece of the enterprise security puzzle by integrating with your SIEM, SOAR, or XDR. 
- Actionable insights that will help your security team gain better visibility into mobile risk and stay a step ahead of threat actors leveraging modern tactics.

The SOC’s Biggest Blind Spot and the Risk it Poses

2024 saw a surge in cyberattacks alongside rapid tech advancements, making it clear that staying ahead in the digital world is more important than ever.

In this exclusive webinar, we’ll explore the top cybersecurity predictions for 2025 — highlighting emerging threats, key trends, and the latest strategies for fortifying your defenses.

Join our expert panel as they share valuable insights and predictions on:
- New ransomware tactics and data breach methods
- How AI is shaping both security solutions and cyberattacks
- Growing threats from nation-states
- The latest security regulations and compliance frameworks

Cybersecurity Predictions: A Look into 2025's Security Landscape

As cyber criminals increasingly exploit mobile devices to breach cloud environments, security strategies for 2025 must prioritize mobile threat intelligence. This webinar explores new findings on advanced threats from China and Russia, demonstrating how mobile endpoints are leveraged in the modern kill chain to compromise cloud data. Learn why Mobile Endpoint Detection and Response (EDR) is essential in 2025 and how to stay ahead of evolving threats. Get actionable insights and strengthen your defenses against the rising tide of mobile-enabled cyberattacks.

2025 Security Planning: How to Utilize Mobile Threat Intelligence to Protect Cloud Data

Why Does My CEO Want My Password? Cybercriminals are impersonating senior executives and IT teams to trick employees into sharing critical sensitive information and corporate credentials. With one usable set of credentials, attackers can quietly access your cloud infrastructure and compromise data undetected. What’s worse is that you often don’t know when your employees are being targeted - making it impossible to proactively defend against these threats. 

Join this 30-minute webinar to learn: 

- How cybercriminals are modernizing their tactics to compromise entire organizations through a simple text message. 
- Why visibility into the initial steps of a modern attack is crucial to protecting data.
- How Lookout protects against executive impersonation and smishing attacks.

Lookout & Verizon: Executive Impersonation and Smishing Attacks Explained

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorized access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Turning the Tables on Adversaries: Enhance Your SOC Playbooks With Mobile

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorised access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Modern breaches now happen in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure with legitimate credentials and swiftly compromise data. Recent high-profile attacks are evidence of this including MGM Resorts, Caesars Entertainment, Twilio, and many others.

Join us for this 30-minute presentation to learn:
- How the traditional cyber kill chain has evolved to exploit mobile users
- Key findings from Lookout's Q1 Mobile Threat Landscape Report
- What makes your organization vulnerable to a modern-day attack
- Why automated defenses are essential
- How Lookout protects its customers from these types of attacks

Information Week Hosts Tales of a Modern Data Breach: The Rise of Mobile Attacks

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your organization safe.

Interactive Workshop: Hunt for Threats with Lookout Researchers

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your data secure

Scattered Spider: The cybercrime group behind the MGM Resorts data breach costing an estimated $100 million. 
APT41: A notorious Chinese APT that recently developed two mobile surveillanceware tools, WyrmSpy and DragonEgg, to target over 100 public and private sector organizations.

These two groups represent a global shift among threat actors – focusing on mobile devices to quietly compromise credentials, apps, and data. Join Tyler Croak, Principal Strategist at Lookout, and Ken Saganowski, Director of Technical Advisory at MOXFIVE, in this 30-minute session, to learn: 
 
- How the traditional kill chain has evolved 
- What modern tactics are being used to trick your users
- What happens after an attacker gains access - A real-life Scattered Spider example
- How to detect an intruder in your system
- What immediate actions you can take today to protect data in 2024

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Cybercriminals continue to evolve their tactics to compromise your organization's security defenses. The modern approach is to start by targeting users on their mobile devices to steal their credentials. 

Learn how these cybercriminals have evolved their tactics, and how Lookout prevents and protects at each stage of the kill chain. 

For more information, visit: www.lookout.com

How Lookout Protects Against the Modern Day Kill Chain

Embark on a focused exploration of the critical areas in mobile security in our upcoming webinar. Let us equip you with the knowledge needed to safeguard your organization’s mobile devices from phishing and malicious content. We’ll share threat intelligence, demonstrate simulated incident response scenarios, and show you how to tighten security with Workspace ONE Mobile Threat Defense integrated phishing and content protection.

See Mobile Threat Defense in Action

Cloud breaches are now happening in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure and swiftly compromise data.

Join us for this 30-minute webinar with Lookout EVP of Product to learn: 
- How the traditional cyber kill chain has evolved to exploit mobile users
- Why attacks utilizing a mobile device are increasing
- What makes your organization vulnerable to a modern-day attack 
- Why stopping breaches requires the ability to identify anomalous data movements
- The three key capabilities you need to defend against modern breaches

The Modern Kill Chain: How Attacks Have Gone From Months to Minutes

As the digital age is constantly evolving, the cybersecurity landscape remains in a constant state of change. The year 2023 bore witness to a multitude of cyberattacks and technological advancements, emphasizing the pressing need to stay one step ahead of the ever-shifting digital frontier.

In this webinar, we'll discuss the top cybersecurity predictions for 2024, including emerging threats, trends, and best practices for defense.

Our experts will share their insights on:
- The most likely cybersecurity threats to face in 2024
- The latest cybersecurity trends and how they could impact your organization
- Best practices for defending against emerging threats
- How to build a resilient cybersecurity posture

Cybersecurity Predictions for 2024: Emerging Threats and Best Practices

Your employees are using a diverse mix of cloud apps, private apps, personal networks, and unmanaged endpoints — making it difficult for your IT and security teams to have complete visibility into where your data resides. So how do you know all of your cloud data is protected?  

Your teams are now asked to secure an extremely complex environment, oftentimes with traditional point solutions that are siloed, difficult to manage, and lack built-in data and endpoint protection.

What’s the problem? Increased security risks, operational costs, and potential for human error.

Your solution? A data-centric cloud Security Service Edge (SSE) platform to simplify your security posture and lower costs.

Join our upcoming session where you'll leave with a confidence in understanding in:

- The major benefits of a unified SSE platform
- How to gain full visibility and control across your entire IT infrastructure
- Ditching the complexity of managing multiple security products and policies for a unified, cloud-based approach

Conquer Cloud Security Complexity: Unify Visibility & Control with SSE

It often takes years to fully integrate the IT infrastructure after a merger and acquisition. During that time, you need to provide user access to private enterprise apps while aligning security policies across both organizations. The Lookout Cloud Security Platform allows you to quickly provide access to private enterprise apps by following a zero trust network access architecture.

How To: Integrate With Your Existing Infrastructure

Many organizations work with a trusted group of partners and contractors. Appropriate security measures are required to protect the sharing of confidential information. With the Lookout Cloud Security Platform, you can enable data protection for external communication while helping to promote collaboration.

How To: Ensure Secure Data Sharing Between Employees, Partners, and Contractors

As cloud adoption continues to increase, organizations face a growing challenge with data sprawl. 
Learn how the Lookout Cloud Security Platform gives you a multi-pronged approach towards regaining control of your data.

How To: Discover, Assess, and Protect Confidential Data

Data is the lifeblood of every organization today. However, the increasing amount and reliance on data brings more sophisticated threats, making it harder to protect. In fact, 51% of security leaders cite securing data as a top challenge.* As cybercriminals continuously evolve their tactics, these attacks can have severe consequences, including operational disruptions, erosion of customer trust, and lasting financial damage. Traditional security solutions simply can't keep up or protect against the relentless pace of these threats.

That's why it's crucial to choose a security platform that takes a data-centric cloud security approach. This approach provides visibility and control over data usage, activities, and anomalies across all apps, ensuring that your data is protected wherever it goes — from Google Drive and Slack, all the way to internet apps and ChatGPT. 

Register for our upcoming webinar to learn: 
- Why traditional security approaches fall short in the cloud environment
- How data-centric cloud security revolutionizes data protection
- Real-life scenarios on how a typical day exposes your users and IT team to risk — see data protection in action

Secure Your SaaS Applications: Essential Strategies to Protect Your Cloud Data

As more and more organizations embrace hybrid work, employees increasingly rely on collaboration through SaaS apps like Slack, Teams, and Google Workspace to get work done. And that’s awesome.
But how do you protect all that sensitive data sharing across users and apps without restricting productivity and creativity?

Join this webinar to discover how Lookout Secure Cloud Access provides a unique approach to data security, by empowering organizations to collaborate and securely share data while improving control and visibility.

With real-world use cases, best practices, and a live demo, the session is designed to help you:
- Understand today’s leading data risks and threats
- Learn how to enhance your organization's security posture
- Discover best practices for enabling more productive collaboration

The Ultimate Balancing Act: Securing Cloud Data in the Hybrid Work Era

Today, businesses need a modern and robust approach to remote access security. One that delivers zero trust, comprehensive visibility, and advanced data protections across hybrid and remote environments. Designed for only traditional network architectures, VPNs simply don’t match up to securely enable access across all multi-cloud environments. In addition, they are difficult to scale, impact performance, and are costly and complex to maintain.

Like all other organizations, Lookout has also faced its fair share of these issues with legacy VPNs. And who better to learn from than someone who's been in the trenches? 

Hear firsthand from Joel Perkins, Lookout’s head of IT, to discuss how he overcame challenges of a legacy VPN with Lookout Secure Private Access, our zero trust network access (ZTNA) solution. Discover why visibility and control over all your private apps and the data within those apps is crucial, and why remote access via a standard VPN alone doesn’t suffice anymore.

Get practical takeaways and strategies for: 
- Understanding of all private apps: Discovering all private apps that need to be migrated.
- Planning migration of apps: Depending on the form factor, whether they are legacy / client server, VoiP or web apps, how can we plan the migration and whether both VPN and ZTNA need to coexist.
- Understanding of all users: Whether they are employees, contractors and using managed or unmanaged devices.
- Consider Protecting data from deliberate or accidental exfiltration: Avoid deliberate or accidental data exfiltration after access is granted. 
- Look beyond ZTNA as an integrated platform: Achieve seamless zero trust access with a single-agent, single console, and single policy engine, and support for a multi-cloud environment.

5 Key Considerations for a Successful Migration from Legacy VPN to ZTNA

An estimated 56% of employees are directly using AI to automate or augment job tasks.* Although there are many benefits that come with using these tools — employee enablement, productivity, time and resources saved — they also pose great risk to your sensitive and private data. AI platforms like ChatGPT and Google Gemini, collect the data submitted by end users to train their models. Any proprietary data submitted to these tools becomes publicly available once submitted, putting your most valuable data at risk.

Join our upcoming webinar, where Tyler Croak and Tony Kelly, Lookout’s cloud security experts, will walk you through best practices on your journey to enable your workforce to use GenAI tools safely, and without risk to your organization.

You’ll leave with an understanding of: 
- The risks of unsecured GenAI tools
- Real-world examples of accidental data leaks through AI tools
- Best practices to balance employee enablement with data security
- An actionable 3-step plan for secure AI use in your organization

*Source: UKG

Mitigating the Risks of GenAI: Secure Your Data & Empower Your Workforce

How to Build an Effective Cloud Data Security Strategy

Every day, your employees upload, download and share corporate data from your approved SaaS applications. While this is great for productivity, it often creates ongoing risk like data leakage, unauthorized sharing, regulatory violations or malware incursions.

Learn how the Lookout Cloud Security Platform enables you to pinpoint areas within your cloud apps that expose you to data risk while automatically taking corrective action.

How To: Discover and Control of Corporate Data Wherever It Is Stored

Cloud

Data Protection

Data Security

Data Loss

SaaS

Cyber Security

Cloud Security

IT Security

Regulations

Malware

Get powerful HR legislation insights that will help you safeguard your business and workforce. Connect with thought leaders and colleagues to get the most up-to-date knowledge on legislations you need to be aware of.

Legislation

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

How To: Discover and Control of Corporate Data Wherever It Is Stored

Presented by

About this talk

Lookout