Name: The Evolution of Magecart and Web Skimming Attacks
Start: 2023-03-08T15:58:00Z
End: 2023-03-08T16:09:39.000Z
Location: BrightTALK
Rating: 0

Akamai secures and delivers digital experiences for the world’s largest companies. Our intelligent edge platform keeps apps and experiences closer to users — and attacks and threats far away. Top brands globally rely on Akamai so their businesses can be fast, smart, and secure.

A compliance assessment is one of the most time-consuming tasks security teams are charged with across all industries. Gaining visibility into the network, accurately scoping the environment subject to compliance and protecting it against lateral movement of breaches - are all critical to the success of an audit and are hard to achieve using traditional network segmentation techniques. 

Join us for a webinar to learn how Zero Trust segmentation can help your organization achieve compliance and pass an audit with confidence. 
Our expert panel will discuss:
- The challenges global organizations face with maintaining compliance in an ever-changing threat landscape
- Why traditional segmentation techniques leave blind spots in visibility and control
- How Zero Trust segmentation can improve your compliance posture and help you pass an audit 
- How Akamai is using Akamai Guardicore Segmentation internally to achieve compliance with its own products
- Real-world example of a global financial institution that has successfully implemented zero trust segmentation to achieve compliance. 

Register now to secure your spot!

Navigating the Compliance Landscape in a Zero Trust World

When Forrester Consulting contacted hundreds of enterprise cloud strategy leaders for a new study, commissioned by Akamai, the responses showed that multicloud only achieves its potential with a workload-first strategy. The study, The Great Cloud Reset, describes the key issues those tech leaders face in implementing multicloud today and in the future, including:

• 41% struggle to find a cloud services provider that can meet data sovereignty requirements
• 88% said they have six or more applications that need to run in multiple regions
• Two-thirds are prioritizing architecture that supports workloads across the core and edge
• More than two-thirds said placing workloads in the right clouds optimized performance, reliability, and resilience

For more of Forrester’s findings, join our webinar on June 14 at 10 AM ET. Register today to reserve your place.

The Great Cloud Reset

Extortion is the criminal business model that is dominating the headlines. Join Akamai and IDC to hear about the most effective ways to stop the “Cyber Triple Extortion” threat from impacting your company.  This video webinar will cover common attack groups, the techniques they use, and how to stop them based on an integrated security strategy. Our panel includes IDC’s Christopher Rodriguez; Akamai’s Advisory CISO, Steve Winterfeld; and Akamai’s Cloud Security Product Manager, Venkat Praneeth Nangineni.

Defending the Triple Threat

With nearly 50% of organizations regularly releasing vulnerable apps into production because of time restraints from the growing demand of faster turnaround, security is often not being integrated into the application development lifecycle until it is too late.

Additionally, the number of vulnerabilities is continuously increasing and exploitation attempts are being seen within 24 hours of disclosure. App and API attacks against organizations are on the rise.

Join us for a two-part webinar, each episode lasting just a bite-sized 20 minutes, where we will take a closer examination of the key takeaways of our recently released State of the Internet / Security report, Slipping Through the Security Gaps: The Rise of Application and API Attacks Against Organizations.

Some key takeaways include:
• LFI attacks tripled over last year and remain top attack vector
• App and API attacks surged in manufacturing and healthcare industries due to the major increase in IoT connections
• SSTI, SSRF, and web shells are emerging attack vectors

Presenters:
Patrick Sullivan, Vice President, Chief Technology Officer, Security Strategy, Akamai
Eliad Kimhy, Head of Akamai Security Research Core Team, Akamai
Anthony Lauro, Security Technology and Strategy Director, Akamai

Akamai SOTI - The Rise of Application and API Attacks - Part 2

With nearly 50% of organizations regularly releasing vulnerable apps into production because of time restraints from the growing demand of faster turnaround, security is often not being integrated into the application development lifecycle until it is too late.

Additionally, the number of vulnerabilities is continuously increasing and exploitation attempts are being seen within 24 hours of disclosure. App and API attacks against organizations are on the rise.

Join us for a two-part webinar, each episode lasting just a bite-sized 20 minutes, where we will take a closer examination of the key takeaways of our recently released State of the Internet / Security report, Slipping Through the Security Gaps: The Rise of Application and API Attacks Against Organizations.

Some key takeaways include:
- LFI attacks tripled over last year and remain top attack vector 
- App and API attacks surged in healthcare industries due to the major increase in IoT connections 
- SSTI, SSRF, and web shells are emerging attack vector
- How to secure your digital interactions with your patients/members and their data while guaranteeing 100% availability


Presenters:
Patrick Sullivan, Vice President, Chief Technology Officer, Security Strategy, Akamai
Eliad Kimhy, Head of Akamai Security Research Core Team, Akamai
Anthony Lauro, Security Technology and Strategy Director, Akamai

Akamai SOTI - Healthcare App & API Attacks Rising - Part 2

The first triple extortion ransomware attack targeted healthcare. After the clinic’s network was breached and data was encrypted, patients were threatened that their personal data would be made public if they didn’t pay a demand. Today, triple extortion attacks are on the rise – with healthcare and life sciences organizations among some of the primary targets. 

Join this panel to learn about the most effective ways to stop the triple extortion threat from impacting your financial or clinical operations. 
This talk will cover impact trends, common attack groups, the techniques they use and how to stop them based on an integrated security strategy. 

The panel will be led by Akamai Industry Strategist Carley Thornell, and include Akamai’s Advisory CISO Steve Winterfeld and Chris Notaro, a well known accelerator of tech-enabled healthcare.

Presenters:
Steve Winterfeld, Advisory CISO Akamai
Carley Thornell, Industry Marketing Manager for Healthcare and Life Sciences, Akamai
Chris Notaro, Co-Founder and CEO, Untangle Health

How to battle Triple Extortion in Healthcare - Now

Akamai SOTI - The Rise of Application and API Attacks - Part 1

With nearly 50% of organizations regularly releasing vulnerable apps into production because of time restraints from the growing demand of faster turnaround, security is often not being integrated into the application development lifecycle until it is too late.

Additionally, the number of vulnerabilities is continuously increasing and exploitation attempts are being seen within 24 hours of disclosure. App and API attacks against organizations are on the rise.

Join us for a two-part webinar, each episode lasting just a bite-sized 20 minutes, where we will take a closer examination of the key takeaways of our recently released State of the Internet / Security report, Slipping Through the Security Gaps: The Rise of Application and API Attacks Against Organizations.

Some key takeaways include:
- LFI attacks tripled over last year and remain top attack vector 
- App and API attacks surged in manufacturing and healthcare industries due to the major increase in IoT connections 
- SSTI, SSRF, and web shells are emerging attack vector
- How to secure your digital interactions with your patients/members and their data while guaranteeing 100% availability

Presenters:
Patrick Sullivan, Vice President, Chief Technology Officer, Security Strategy, Akamai
Eliad Kimhy, Head of Akamai Security Research Core Team, Akamai
Anthony Lauro, Security Technology and Strategy Director, Akamai

Akamai SOTI - Healthcare App & API Attacks Rising - Part 1

It has been established that microsegmentation is a fast-growing essential business building block - from gaining visibility into your applications and workloads, developing your security posture, and enabling Zero Trust - microsegmentation represents exciting advancements for operational security.

But there are many approaches organizations have at their disposal, and understanding the tools and solutions that suit your business needs and requirements is essential for longevity and success.

In this session, we’ll be reviewing the solutions and tools available today, the mistakes to avoid, and how to set your business up for success.

Join Akamai and Enterprise Strategy Group Analysts as we discuss:

- Considerations before assessing Microsegmentation vendors
- Where historical microsegmentation tools have fallen short in the past, and the tools available today
- How you can gain visibility into your network using Microsegmentation
- AI and machine learning in the microsegmentation space
- And more!

Join this webinar to get an exclusive first look at our white paper.

A Deep Dive on Malicious DNS Traffic Part 2: From Insights to Actions

DNS is an attack traffic highway, which can illustrate the many facets of modern attacks, including C2 communications. Leveraging our DNS research and report, "Attack Superhighway: A Deep Dive on Malicious DNS Traffic", the first webinar in this series will discuss results and top threats including:
• Our findings based on the malicious DNS traffic of corporate networks that Akamai protects in real time
• Prevalent attacker groups and tools they commonly use
• The risks that initial access brokers present to organizations, given their heavy involvement with ransomware groups

A Deep Dive on Malicious DNS Traffic Part 1: Results / Top Threats

Ransomware doesn't begin and end with encryption. It's part of a long attack chain, and with the right defenses in place, you can gain the opportunity to thwart the attacker at every step of the way. 

In this session, we'll explore the ransomware attack chain, and the various tools and techniques you can employ to break the chain at each step of the way. We'll also dive into a real world example of how one business was able to thwart the efforts of Darkside, the ransomware group associated with the infamous colonial pipeline attack.

Commerce Chats: E1 - Breaking the Ransomware Attack Chain

Maintaining and deepening customer trust is imperative, especially in a post-pandemic world where brand loyalty is up for grabs. With the unprecedented shift to life online, retailers and specifically those in ecommerce have struggled to gain visibility into their online traffic – both legitimate and malicious. That’s why being able to quickly detect and block malicious bot activity – like credential stuffing, content scraping and inventory hoarding – not only improves customer experience during the path to purchase but also protects against online revenue loss.

Join us as we discuss:

-  Why enhancing visibility into online traffic is critical for safeguarding customer trust
-  The damaging effect of malicious bot activity on customer experience and conversions. -  The latest tools available today to combat malicious bots
- Understanding the account takeover (ATO) kill-chain to prevent fraud
- The benefits of real-time analysis into bot traffic
- Reducing the risk of being impacted by malicious bots

Understanding Bots: Protecting your Customer Experience… and Bottom Line

Join us to learn more about Akamai’s newest security service, Hunt.

As cyberthreats evolve, adversaries manage to evade even the most advanced security tools. As a result, it becomes the responsibility of often understaffed security teams to hunt for these sophisticated threats. 

Join Dan Petrillo as we introduce Akamai’s newest and most advanced security service — Akamai Hunt. Capitalizing on the infrastructure of Akamai Guardicore Segmentation, and the massive global threat intelligence provided by Akamai, our Hunt team continually detects and remediates the most evasive threats and pervasive security risks in your network.

Learn about:
• How our Hunt service works
• What differentiates it from other security services and solutions
• New security use cases made possible with Hunt
And much more!

We'll Hunt For You: Introducing Akamai's Newest Security Service

Attracting customers to your website is only half the battle; Keeping them there is what matters most. That’s why creating and maintaining a seamless digital experience once they’ve arrived is crucial to optimizing the customer journey and driving conversions.

Did you know that according to Akamai research, –~15% of potential user sessions are interrupted by an unwanted pop-up or browser extension, potentially luring customers away to a competitive - or even fraudulent site? This “audience hijacking” represents a real source of damage to investments made to build brand loyalty – with bottom line repercussions .

Gaining visibility into and control over how extensions interact with your website will give your retail organization an upper hand against unwanted activity impacting – and distracting – your customers.

Join us in this session as we discuss:

-  The impact of audience hijacking on the customer path to purchase
-  Other client-side threats to brand loyalty (i.e. Magecart style attacks)
-  How to reduce affiliate and ad fraud
-  How the pandemic impacted customer loyalty
-  How to better control your brand experience – and online investments
-  Balancing protecting revenue with building customer relationships

Customer Loyalty: Protecting the Client-side Experience

The cloud continues to mature, and DevOps and IT leaders are increasingly settling into a world where workloads get spread across multiple cloud providers. Knowing which cloud platforms fit best for which workloads gives developers the power to choose the right cloud for the job and maximizes the return on investment of cloud infrastructure spending.

A new Techstrong Research report reveals how developing a multicloud strategy has become more deliberate today. The report’s findings and other recent research from Akamai show that developers and business leaders are searching for ways to solve growing cost, performance, and scaling requirements when choosing the best cloud provider for their workloads.

Join this program to learn what DevOps professionals seek from their cloud providers, what’s driving them to spread workloads across multiple clouds, and how companies like NSoft approach different cloud providers for their workloads to deliver the best customer experiences.

Panelists:

NIKOLA RAKIĆ, Chief Technology Officer - NSoft

PAVEL DESPOT, Senior Product Marketing Manager - Akamai

MIKE ROTHMAN, Chief Strategy Officer of Techstrong Group & GM of Techstrong Research

Finding the Right Cloud for the Right Workload

It’s no shock that organizations understand the inherent value of microsegmentation. Despite only 36% of organizations using microsegmentation today, 91% anticipate using microsegmentation in the next two years. This gap is in part due to the use of the wrong tools, but also confusion as to where to start with a microsegmentation project. While many businesses plan on using microsegmentation to support their Zero Trust goals, the breadth of these projects can lead to unforeseen challenges.

So while it is important to align to longer term Zero Trust plans, identifying critical business needs and mapping these to more specific microsegmentation use cases can help generate short term success and create momentum towards expansion.

Join Akamai and Enterprise Strategy Group Analysts as we discuss the state of microsegmentation and explore real-world use cases key customer examples to help inform your organization’s microsegmentation strategy.

We will discuss:

- Key microsegmentation use cases, and what you can learn from these real life examples
- Microsegmentation learnings you can apply to your business
- Planning your long-term security strategy

Join this webinar to get an exclusive first look at our white paper.

Exploring Key Use Cases for Microsegmentation

Magecart and web skimming attacks have not gone away - they are just getting harder to detect! Hear from Tony Lauro, Akamai Director of Security and Gal Meiri, Akamai Threat Research and discover:

- How Magecart and web skimming attacks work, and how they've evolved in recent years
- New and advanced attack techniques are being leveraged by skimmers to avoid detection   
- Ways to gain visibility into malicious script behavior and defend against in-browser threats

The Evolution of Magecart and Web Skimming Attacks

Magecart

Web Skimming Attacks

Cybersecurity

Cloud Security

Application Security

Cyber Defence

Cyber Crime

Cyber Attacks

in-browser threats

Malicous Scripts

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Evolution of Magecart and Web Skimming Attacks

Presented by

About this talk

More from this channel