Name: MS Teams und Office 365 als neue Zielscheibe für Cyberkriminelle [German]
Start: 2021-04-20T18:05:00Z
End: 2021-04-20T19:15:34.000Z
Location: BrightTALK
Rating: 0

Netwrix empowers information security and governance professionals to reclaim control over sensitive, regulated and business-critical data, regardless of where it resides. Over 11,500 organizations worldwide rely on Netwrix solutions to secure sensitive data, realize the full business value of enterprise content, pass compliance audits with less effort and expense, and increase the productivity of IT teams and knowledge workers.

Did you know that a botnet called Vollgar is hijacking thousands of SQL servers every single day? Even worse, Vollgar is just one of some 30 cryptocurrency mining botnets operating today, and these campaigns often go undetected for days or even weeks.

These attacks highlight how vulnerable database servers are — and how easily they serve as a launching point for additional malicious activity in the network. Fortunately, there are effective defense strategies.

Join this real-training-for-free session to learn what you need to know to protect your organization. First, Microsoft MVP and cybersecurity expert Nick Cavalancia will explain exactly why SQL Servers make such great initial attack vectors and describe the tactics and techniques that adversaries use once they have established access.

Then Jordan Jasnoch, SQL Server expert and solutions engineer at Netwrix, will dive into how you can protect your critical SQL Server data. He’ll walk you through an attack and how you can spot the tracks it leaves in the logs, including OS changes, modifications of database configuration and elevation of database privileges. Moreover, he’ll provide key best practices for hardening the security of your SQL servers so you can proactively block attacks.

SQL Server Attack Ride-Along: Detecting and Investigating a Database Attack

To protect your organization’s most valuable assets, it’s critical to secure all three attack surfaces: data, identities and infrastructure. That puts identity and access management (IAM) squarely at the center of any modern security strategy. Indeed, to build a Zero Trust environment, you need to be able to verify the identities of people, applications and machines, and control what systems and data they can reach.

Netwrix has made exciting acquisitions in the IAM space recently, and we’re excited to showcase how they can further enable you to ensure that only the right people have access to the right resources at the right time for the right reason.

Join this webinar to learn how you can:
- Control privileged accounts
- Govern and administer identities
- Set policies and secure passwords

Power Up Your Identity and Access Management

Active Directory controls access to critical systems and data for organizations around the world — but it is not always managed securely. That makes it a top target of attackers.

How can you best protect your organizations from these attacks? And when they happen, how can you detect them promptly and respond effectively?

Learn from the experts how you can secure your Active Directory from end to end and gain peace of mind. Anthony Moillic (Field CISO EMEA/APAC at Netwrix) and Sander Berkouwer (CTO at DirTeam and 14-time Microsoft MVP) will explain how you can:
·   Identify and mitigate AD security risks before attackers can exploit them.
·   Promptly detect and contain active threats.
·   Quickly recover from incidents to ensure business continuity.

Join them for this webinar to become the Active Directory security hero your organization needs!

[Attack]tive Directory: How To Overcome AD Exploits And Prevent Attacks

A single misuse of a privileged account, whether negligent or malicious, can lead to costly business disruptions and data breaches. Want to dramatically reduce those risks?
Join us for a 30-minute demo and learn how Netwrix SbPAM empowers you to:
• Minimise the risk of privilege compromise and misuse by eliminating standing privileged accounts altogether.
• Maintain strong IT productivity by granting admins exactly the permissions they need to complete a task, for exactly as long as required.
• Enforce individual accountability by certifying, logging and recording each privileged session.
• Avoid audit findings by giving auditors hard proof that all privileged activity in your organisation is under scrutiny.
• Reclaim the time you currently spend switching from system to system, trying to make sure there is no unnecessary privilege and that privileged credentials are properly updated.
• Let your team work the way they like while improving security by integrating Netwrix SbPAM with your existing environment.

How to Minimise the Risk from Privileged Activity [Netwrix SbPAM Demo]

With threats growing in both number and sophistication every day and regulations imposing increasingly strict requirements, you are always fighting an uphill battle. Arm yourself with Netwrix Auditor to kick-start your IT risk assessment program, secure your critical assets and slash preparation time for compliance audits by up to 85%.
Take part in this 30-minute session as one of our solutions engineers explains how you can:
• Identify and mitigate both data and infrastructure security gaps
• Protect your critical assets to minimise the risk of a data breach
• Reduce the mean time to detect security threats and contain incidents
• Prove your adherence to compliance regulations with less effort

How to Ease the Burden of IT Auditing [Netwrix Auditor Demo]

L'accès et les droits d'accès aux données sont excessifs, et la gestion en est complexe et sujette aux erreurs. La localisation des données sensibles est souvent inconnue (tout particulièrement entre plusieurs bases de données non structurées) et elle est justement la première cible dans presque tous les cas de violation. Avec l'augmentation des pressions externes et de nouvelles régulations, les exigences de tiers et la préoccupation des clients, la nécessité de récupérer le contrôle des données de tout type n'a jamais été aussi impérieuse.

Un programme de gouvernance des données bien exécuté est la solution à ce problème.

Regardez notre webinaire et découvrez comment notre solution peut vous aider à :

- Identifier les défis auxquels votre organisation est confrontée en matière de sécurité et de confidentialité des données
- Rendre exclusif l'accès aux données
- Limiter au maximum le nombre de personnes pouvant accéder aux données, ainsi que leurs droits d'accès
- Identifier, sécuriser et maximiser la valeur des données, où qu'elles soient stockées

Comment améliorer la gestion des droits et de l'accès aux données

In a recent edition of its CISO Workshop, Microsoft emphasized posture management for addressing cyber risk. This new discipline goes far beyond traditional vulnerability management, looking into operations and processes to help organizations further prevent harm.

In this “plan & build” session, you will learn:
- How to implement posture management in your organization and who needs to be involved
- Metrics for success and pitfalls that can lead to failure
- How posture management helps with compliance and incident management
- What types of tools map to the various aspects of posture management

How to Implement Posture Management to Address Cyber Risks

One IT practice tops the list for both good cyber hygiene and regulatory compliance: secure configuration management, or system hardening. The toughest part about hardening your servers and other computers is not simply finding missing settings, but establishing solid configurations in the first place and maintaining them over time.

Join this session as we demonstrate just how easy Netwrix Change Tracker makes it for small IT teams to:

- Identify weaknesses in current system configurations
- Establish benchmark standards for a hardened posture
- Apply those approved benchmark settings consistently
- Promptly spot and correct drift into insecure configurations

Deep Dive: Simple Practices for Secure Configuration Management

Theft of privileged credentials is the costliest type of insider threat, and the number of such thefts has tripled over the last two years. Privileged accounts are the most lucrative target for any malicious actor because they provide quick access to critical data and systems — and most organisations have lots of these accounts, which are used by humans and applications.
For privileged account management (PAM), most organisations focus on session management and password vaulting, and miss key areas like privilege discovery and the detection and investigation of suspicious admin behavior. Are you interested in exploring what a truly comprehensive approach to PAM would look like?

Join this webinar to learn about:
• What are the essential elements of a PAM program? Are you overlooking any of them?
• How can you achieve full-cycle privilege orchestration without disrupting your vital business processes?
You’ll also get to see Netwrix PAM solutions in action .

PAM 2.0: Smarter, Better, Faster, Stronger

Migrating to the cloud can create opportunities for enterprises, but it can also introduce serious security risks. All too often, security controls are not implemented until well after the migration is complete, and out-of-the-box controls are passed over because of the perception that they will frustrate business users and hinder service adoption. Even worse, document controls tend to come last because of the effort required to implement them — and by then, users are already sharing content freely, including sensitive data.

In this webinar, we will discuss the following:
- Common threats involved with migrating to the cloud
- Controls for mitigating those threats
- The value of document protection
- Microsoft 365 services for document protection
- How Netwrix solutions enhance document protection
 
By the end of this webinar, you will be better prepared for a secure migration to cloud services.

Cloud Security Masterclass: Make Your Cloud Migration Journey Secure

Any unexpected change to a system file can indicate a network security breach, a malware infection or other malicious activity that puts your business at risk. File integrity monitoring (FIM) helps you promptly detect such changes by continuously monitoring system folders on their servers. Indeed, FIM is so critical for data security that most common compliance regulations and security frameworks, including PCI DSS, HIPAA, FISMA and NIST, recommend implementing it whenever possible.
 
Join our new webinar to discover how to:
 
·   Establish a solid FIM process across your IT environment
·   Integrate FIM with change control processes to filter out noise and empower security teams to focus on true threats
·   Meet FIM compliance requirements with ease and automate compliance reporting at scale
·   Integrate the FIM process into your broader security ecosystem for maximum effectiveness

File Integrity Monitoring: An Effective Way to Detect Cyberthreats in Real Time

Commercial and open source system configurations generally lack all the necessary security measures needed before deploying into production. These configurations will often times have features and functionalities enabled by default, making them less secure and a prime target for today’s cyber criminals.

Implementing a CIS hardened build standard can help you address this issue by disabling and removing unnecessary functionalities and features, allowing your security team to proactively minimize system vulnerabilities, enhance system integrity, achieve compliance, and reduce your attack surface.

We’re on a mission to improve cyber security for everyone. That’s why we’ve launched our new Deep Dive: How to Implement a CIS Hardened Build Standard to help make the understanding and operating the CIS Controls as easy and accessible as possible.

In this 40-minute webinar you will learn:
- How to work through a CIS Benchmark Secure Configuration Guide & how to avoid the ‘Gotchas’
- How to customize and expand to deliver a hardened build standard that’s designed for you
- How to roll out to your IT systems, both manually and automatically
- How to maintain everything in its secure, hardened state

Deep Dive: How To Implement A CIS Hardened Build Standard

Bad actors relentlessly hammer Active Directory environments with attacks that are easy to pull off — but often hard to detect and defend against. Want to see exactly how some of the most common attacks unfold, step by step, and discover effective strategies for spotting and responding to them? 

Join this webinar for a front-row seat at an epic cyber battle: Brian Johnson (security enthusiast and president of 7 Minute Security) and Kent Tuominen (solutions engineer at Netwrix) will launch and defend against multiple attacks, including:
- Kerberoasting and AS-REPRoasting
- Password spraying
- Pass-the-hash attacks
- Running SharpHound/BloodHound to map privilege escalation paths

[Cyber Battle] Active Directory Security: Hacker vs Netwrix

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. It disrupts or halts an organization’s operations and poses a dilemma for management: pay the ransom and hope that the attackers keep their word about restoring access and not disclosing data, or do not pay the ransom and restore operations themselves. The methods used to gain access to an organization’s information and systems are common to cyberattacks more broadly, but they are aimed at forcing a ransom to be paid.

Organizations must be able to quickly recover from a Ransomware attack and trust that any recovered data is accurate, complete, and free of malware. Fortunately, organizations can implement the NIST Cybersecurity Framework to prepare for and reduce the potential for successful ransomware attacks. Attend this webinar to learn how to go about this, including how to:

- Gauge your organization's level of readiness to mitigate ransomware threats
- Identify security objectives from the NIST Cybersecurity Framework that support preventing, responding to, and recovering from ransomware events
- Understand how to manage data integrity risks and implement the appropriate safeguards to protect critical data, systems, and devices from ransomware
- Prepare for and respond to any ransomware attacks that succeed

Preparing for Ransomware with the NIST Cybersecurity Framework

Tout composant de votre SI repose sur l'administration via des comptes d’administration, que ce soit pour gérer une application, un système ou un annuaire d’identité. Pendant des années, nous avons pris l’habitude d’octroyer des privilèges « à vie » et sur des périmètres élargis. Petit à petit, nous restreignons les périmètres : Tier Identitaire, bastion, Hardening, Zero Trust… Des termes qui aujourd’hui résonnent dans nos conversations quotidiennes. 

Et pourtant, malgré tous nos efforts visant à empêcher les attaques sur nos systèmes informatique, nous n’arrivons que difficilement à modifier notre approche du privilège « à vie ». 

Regardez notre webinaire avec les experts de la sécurité et de la gestion des identités, Loïc Vermain (CVC-IT) et Karim Azzouzi (Netwrix) pour apprendre comment vous pouvez:

Faire face à des défis modernes de la gestion à privilèges avec une approche moderne et innovante
Réduire drastiquement votre surface d’attaque en octroyant des privilèges à la demande… Et surtout, limités dans le temps ! 
Éliminer les risques des violations de données liées à la compromission des comptes à privilèges

Renforcez votre posture de sécurité en gérant mieux les comptes à privilèges

Cyber insurance is in no way a replacement for a solid cybersecurity strategy. In fact, many insurance vendors have security baselines for their policies. Having an effective mix of security processes and technologies will help your organization not only qualify for cyber insurance but also obtain better coverage.

Join this session to learn how you can improve your security posture by:

- Restricting access to sensitive data and systems based on job function
- Removing local admin rights
- Implementing tools and processes for promptly detecting and responding to security threats

Preparing for Cyber Insurance: Achieving a Strong Security Baseline

Choosing the right cyber insurance policy can be difficult: Not all insurers are equal, so organizations should not limit their criteria to premiums and coverage. Preparing to apply can also be a challenge, since insurers will want to assess your cybersecurity posture. 

Join this session and discover:
·      Why organizations need cybersecurity insurance
·      Key factors for selecting the appropriate policy
·      Why cyber insurance cannot take the place of cyber defense
·      Real-life examples illustrating common pitfalls of the preparation process

Preparing for Cyber Insurance: Best Practices for Cyber Insurance Readiness

A huge percentage of data breaches start with privileged credential abuse. There are often many privileged accounts that today’s overburdened IT security teams lose track of them. Stop leaving privileged accounts available for attackers to compromise and insiders to misuse! Instead, discover and remove them to achieve zero standing privilege (ZSP).
 
Join the webinar to discover how to:
·   Find accounts with excessive privileges
·   Dramatically reduce your attack surface area with just-in-time (JIT) privilege·
·   Manage and track all privileged activity in one place
·   Implement real-time attack detection and response
·   Adopt additional controls detailed in the NIST cybersecurity framework

The NIST framework for full-cycle privilege orchestration

Gerade in Zeiten von COVID-19 wird die Digitalisierung in unterschiedlichen Bereichen zwangsläufig vorangetrieben. Damit rückten in den letzten Monaten insbesondere cloudbasierte Anwendungen immer mehr in den Fokus von Cyberkriminellen. Neben anderen namhaften Produkten haben sich Office 365 und Teams von Microsoft als meistgenutzte Online-Kollaborationsplattform etabliert. Ein Angreifer mit gestohlenen Zugangsdaten kann nahezu ungehinderten Zugang zu Teams und allen unterstützenden Diensten erhalten.
In diesem Webinar aus der Serie «Von einem Hacker erklärt…» wird gezeigt, welche gängigen Angriffe auf MS Teams und Office 365 existieren und wie Ihre Firma dadurch ebenfalls ungewollt zur Zielscheibe werden kann. Zudem lernen Sie, wie Sie sich vor solchen Angriffen schützen können und welche Möglichkeiten Netwrix dazu bietet.

MS Teams und Office 365 als neue Zielscheibe für Cyberkriminelle [German]

Cyber Attacks

Data Security

IT Security

Microsoft

Ms Teams

Office 365

Work From Home

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

MS Teams und Office 365 als neue Zielscheibe für Cyberkriminelle [German]

Presented by

About this talk

More from this channel