Name: Red vs. Blue: The Importance of Attack Simulations
Start: 2022-01-13T09:00:00Z
End: 2022-01-13T09:00:58.000Z
Location: BrightTALK
Rating: 5

CyberProof delivers better security operations and drives superior experiences for enterprise customers. Our cloud-first, AI-powered approach to security, delivers industry-leading security services to drive real business results. We believe that working closely with our customers and partners through a better security, together services model, jointly empowers us to defend against the greatest of threats. 

Penetration testing should do more than check a box—it should provide real insight into how attackers might target your business.

Join Faizal Ashruf, Head of Exposure Management Service Delivery, and Akash Joseph Thomas, Technical Program Manager at CyberProof, to learn how modern, threat-led pen testing delivers strategic value and drives smarter risk decisions.

In this session, you’ll see how CyberProof:
 - Aligns testing with real-world threats and business priorities
 - Scales across hybrid and cloud environments
 - Produces actionable findings tied to your remediation workflows
 - Supports continuous validation—not just point-in-time checks

Get a closer look at how CyberProof helps you test smarter, not harder.

Modern Penetration Testing: Strategic, Scalable, and Risk-Aligned

Join us for the Cyber Defenders: Threat Round-Up – Episode 09 Livestream, where we dive deep into the most pressing challenges facing global enterprise security teams. This session brings together current threat intelligence and actionable strategies to address risks ranging from supply chain attacks to sophisticated state-sponsored campaigns.

Key topics we planned to cover for this month’s event include: 
➡️ 2025 Key Takeaways with guest: Cyber Security Researcher Costin Raiu 
➡️ Oyster Backdoor Resurfaces: Analyzing the Latest SEO Poisoning Attacks
➡️ Third wave of Brazilian malware: Coyote >> Maverick >> and now Astaroth  
➡️ AI Cybercriminals Target Black Friday and Cyber Monday - Security Boulevard 
➡️ Fake Adobe installer campaigns to drop different RMM
➡️ Cybersecurity Predictions for 2026 

Wednesday, Dec 10
11am ET/ 8am PT

Cyber Defenders: Threat Round-Up – Episode 09 Livestream

Security teams are under pressure to do more with less—facing alert fatigue, fragmented tooling, and a shortage of skilled analysts. Traditional automation isn’t enough.

Join Doron Davidson, Managing Director of Security Operations at CyberProof, to explore the launch of CyberProof's Agentic AI —a new co-managed approach that integrates AI agents into everyday SecOps workflows for faster, smarter, and more scalable threat response.

In this session, you’ll learn how CyberProof’s agentic AI:
 - Automates detection, investigation, and triage in real time
 - Augments analyst decisions with contextual threat intelligence
 - Operates across hybrid, multicloud, and legacy environments—without vendor lock-in
 - Delivers measurable gains in SOC speed, accuracy, and efficiency

See how human-augmented AI is transforming SecOps—and what it means for your team.

Introducing CyberProof Agentic AI: High-Accuracy, Human-Augmented SecOps

CyberProof’s Vulnerability Management experts Achu John, Information Security Specialist, and Kumar Badiger, Vulnerability Management Lead, will share practical strategies for identifying and mitigating security vulnerabilities before they impact your organization. You’ll learn how to build a proactive program that reduces risk without draining your team’s resources. The session will walk through real-world approaches to understanding exposure, streamlining remediation, and keeping your business secure. Whether you're just starting out or refining an existing program, this session will help you understand a more strategic and efficient approach to reducing risk.
For more information or to speak with an expert, visit https://www.cyberproof.com.

How to Stay Secure with Proactive Vulnerability Management

Join us for the Cyber Defenders: Threat Round-Up – Episode 08 Livestream, where we dive deep into the most pressing challenges facing global enterprise security teams. This session brings together current threat intelligence and actionable strategies to address risks ranging from supply chain attacks to sophisticated state-sponsored campaigns.

Key topics we planned to cover for this month’s event include:
➡️   Vishing attack on the rise through Microsoft Teams
➡️   Supply Chain Risk from NPM Compromise: An analysis of how attackers exploit open-source dependencies via Node Package Manager (NPM) and strategies for enhanced package integrity checks and securing development pipelines.
➡️   Malware rebrand continue – Coyote to Maverick from 2024- late 2026 targeting brazilian users spreading through WhatsApp
➡️   East Asia State-Sponsored Cyber Threats: An analysis of coordinated cyber espionage and ransomware attacks, highlighting motivations like IP theft and influence operations, along with how to stay ahead of cyber escalation cycles during regional crises.

Cyber Defenders: Threat Round-Up - Episode 8

Understand your organization’s threat landscape in minutes.

In this webinar, Brendon Anderson, Senior Cybersecurity Consultant at CyberProof, walks you through how to interpret your Cyber Threat Landscape Report — the foundation for understanding who’s targeting you, how they operate, and where your defenses may fall short.

You’ll learn:
• How your report identifies relevant threat actors, malware, and campaigns
• What the MITRE ATT&CK matrix reveals about your defensive coverage
• How to use the findings to prioritize risk and strengthen detection
• Why rapid, data-driven visibility is critical for enterprise SOCs

Whether you’re a CISO, SOC manager, or security architect, this session will help you turn intelligence into action, and prepare your teams for what’s next.

Access your complimentary Cyber Threat Landscape Assessment here:
https://www.cyberproof.com/cyber-threat-landscape-assessment/?utm_campaign=13856061-EED%20Management&utm_source=BrightTALK

Get a Self-Guided Cyber Threat Landscape Assessment

Únete a Salvador Sánchez, Director de Ventas para Iberia y Latinoamérica, y a Daniel Ausín, Gerente de Producto para Evaluación de Seguridad CTEM y SaaS, mientras explican el porqué, qué y cómo de implementar un programa de Gestión Continua de la Exposición a Amenazas (CTEM). CyberProof es una empresa de UST.

Descubre:
 - Los pilares fundamentales de un programa CTEM exitoso y por qué es esencial para una defensa cibernética proactiva
 - Cómo priorizar exposiciones según el riesgo real y la inteligencia de amenazas
 - El proceso paso a paso que utiliza CyberProof para operacionalizar CTEM en entornos empresariales complejos

Cómo activar CTEM para priorizar riesgos y amenazas en tiempo real

Explore the evolving threat landscape in the Energy Utilities sector with Jamie Collier (Google Threat Intelligence) and Sergey Novikov (CyberProof). Episode 2 of CyberSector Insights investigates nation-state disruption and sabotage, how to best protect IT/OT against disruptive attacks, upcoming threats, and recommendations.

CyberSector Insights Episode 2: Energy and Utilities Sector

Wiz delivers powerful cloud security insights, but translating those insights into action requires the right support. In this session, experts from CyberProof explain how we help organizations maximize value from Wiz through tailored advisory, onboarding, and SOC/SecOps services.

Whether you're new to Wiz or already deployed, you'll learn how we streamline integration, embed with DevSecOps teams, and accelerate remediation.

Learn about:
 - Key differences in supporting greenfield vs. brownfield Wiz deployments
 - Integrating Wiz into broader SOC/SecOps workflows and developer pipelines
 - Use cases in CNAPP/CSPM, compliance, and application/data security

How to Maximize Your Wiz Investment: Integrate Wiz into SecOps and DevSecOps Workflows

These days in cybersecurity, there’s no shortage of alerts, tools, or dashboards, but CISOs still lie awake asking two questions: Are we at risk, and can we respond?

In this fireside chat, Ron Eddings sits down with Tony Velleca, CEO of CyberProof and former CISO, for a conversation on mastering security complexity with a threat-led defense strategy. Drawing on CyberProof’s three-pillar framework, Cybersecurity Estate Management, Threat Exposure, and Defense Management, Tony shares how leaders can simplify their programs, focus where it hurts most, and bring clarity to the boardroom. Along the way, they’ll discuss why asset visibility is the foundation of AI-readiness, how to move past “patch everything,” and why risk scoring needs a rethink.

Fireside Chat: The Threat Led Future - Thinking Like An Attacker

Today’s CISOs face a growing visibility gap across fragmented IT, cloud, and hybrid environments. Join us to explore how Cybersecurity Estate Management helps you regain control by delivering a real-time, risk-aligned view of your entire digital estate.

In this session, you'll learn how to:
 - Continuously discover and classify assets—including unmanaged and unknown ones
 - Enrich asset data with security context like exploitability, business impact, and exposure
 - Prioritize remediation based on risk—not just vulnerabilities
 - Align asset visibility with business governance and regulatory compliance
 - Integrate with threat-led frameworks like CTEM to validate defenses and improve response

Designed for security leaders, this session outlines how to evolve from static inventories to dynamic, intelligence-driven estate management that reduces risk and enhances operational confidence.

How to Reduce Risk and Blind Spots: Continuous Asset Discovery Across Cloud and IT Environments

Every enterprise claims to know their assets… until something slips through the cracks.

Join Ron Eddings and Daniel Deeney, co-founder and CEO of Paladin Cloud and now Executive at CyberProof, for a live fireside chat that pulls no punches on the industry's biggest blind spot: incomplete asset inventories. Daniel breaks down the emerging discipline of Asset Estate Management, a term coined alongside a CISO of a large enterprise organization to describe how cloud complexity, misaligned tooling, and unreliable CMDBs are exposing organizations to unnecessary risk.

This session is a battle plan for classifying assets into managed, unmanaged, and suspicious states, and why that distinction could save your enterprise from a catastrophic oversight. Plus, Daniel will share how agentic AI could radically transform cybersecurity workflows, starting with your asset estate.

Fireside Chat: AI, Asset Risk & the Managed Estate

CyberProof takes center stage at Black Hat 2025, as Yuval Wollman, President of CyberProof, joins host Doug White live from the Cyber Risk TV studio in Las Vegas.

In this eye-opening interview, Yuval unpacks how AI agents are not only expanding the attack surface — but reshaping the entire cyber threat landscape. Discover how ransomware-as-a-service platforms like Funksec and Dragonforce are operating with enterprise-level precision.

The 2025 Mid-Year Threat Landscape and the Shifting Battlefield

Learn from experts about how to improve your threat detection by building and managing security use cases that match your organization’s risks and needs. In this webinar, you’ll see how to identify gaps in your current coverage, prioritize the development of detection rules and playbooks, and streamline your SOC operations with automation and clear documentation. Discover a practical, step-by-step approach to keeping your defenses sharp and aligned with real-world threats.

How to Build Risk-Aligned Use Cases for Proactive Threat Detection and Response

As part of our monthly Cyber Defenders: Threat Roundup series, this live, interactive session brings you the latest threat intelligence straight from the field, curated by CyberProof’s CTI, Hunting, and SOC teams.

In this episode, we'll feature some of the top threats and attacks from July 2025, including:
➡️ Cyber-Warfare Without Borders: Israel ↔ Iran Shadow Conflict
➡️ Scattered Spider Broadens Its Web: From Retail Targets to Aviation & Insurance
➡️ Deepfake-Powered Social Engineering: BlueNoroff’s macOS Backdoor
➡️ Beyond ClickFix: The Rise of FileFix Social-Engineering
➡️ WinRAR & Notepad++ CVEs

Cyber Defenders: Threat Roundup - Cyber-warefare, scattered Spider, Deepfakes, Clickfix, and more

Explore the evolving threat landscape in the Retail sector with Jamie Collier (Google Threat Intelligence) and Sergey Novikov (CyberProof). Episode 1 of CyberSector Insights dives into attack trends, supply chain risks, and how threat intelligence drives resilience.

CyberSector Insights Episode 1: Retail Sector

Join Nick Lantuh, co-founder of Interpres Security and now President, Interpres Group at CyberProof, and Brendon Anderson, Senior Cybersecurity Consultant at CyberProof as they explain the why, what and how of implementing a Continuous Threat Exposure Management (CTEM) program. CyberProof is a UST company.

Learn:
 - The core pillars of a successful CTEM program and why it’s essential for proactive cyber defense
 - How to prioritize exposures based on real-world risk and threat intelligence
 - The step-by-step process CyberProof uses to operationalize CTEM in complex enterprise environments

How to Operationalize CTEM for Real-Time Threat Exposure and Risk Prioritization

Descubra cómo el enfoque de seguridad como prioridad de Google Cloud, combinado con la experiencia de CyberProof en servicios SecOps co-gestionados, ofrece una protección integral para las empresas modernas. 
Aprenda:
 - Cómo ha evolucionado la visión de seguridad de Google Cloud
 - Dónde aporta valor CyberProof a las capacidades de Google
 - Por qué los clientes se benefician de un enfoque unificado, desde un SOC en la EU con interlocución 100% en Español e Inglés

Diseñado para la seguridad: Cómo Google Cloud y CyberProof potencian al CISO moderno

From an operational perspective, running attack simulations enables your cyber defense team members to sharpen their incident management and collaboration skills in detecting and responding to the most likely threats. But how should they be carried out in a typical organization?   In this presentation, Threat Hunter Aviel Golrochi and SOC analyst Nir Aharon discuss the need for and benefits of conducting attack simulations. Aviel will be representing “Blue Teaming” - the defensive side of attack simulations - while Nir will explore “Red Teaming” activities.

Red vs. Blue: The Importance of Attack Simulations

#SOC

#SecurityOperationsCenter

#CyberSecurityTraining

#AttackSimulations

#security

#cybersecurity

#ThreatHunting

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful finance insights for your business. Connect with experts and colleagues to get the most up-to-date knowledge that will help you to determine which financial factors build or erode value in your organization.

Finance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Red vs. Blue: The Importance of Attack Simulations

Presented by

About this talk

CyberProof