Name: Cybersecurity Effectiveness Podcast: The Supply Chain Ripple Effect
Start: 2019-06-18T18:00:00Z
End: 2019-06-18T18:26:12.000Z
Location: BrightTALK
Rating: 0

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

How do you find and protect all of your external-facing assets? Is your attack surface vulnerable to attack?  What do the hackers see?

With new advances in technology comes new methods for hackers to take advantage of existing vulnerabilities,  so staying ahead of the curve is a vital part of keeping your organizations as secure as possible. 

There are several ways to keep your external security tight, but to stay one step ahead of the problem of external security, you need to know exactly what your external assets are, and what they look like to any threat actors. 

In this webinar, Andrew Pettet, Mandiant Sales Engineer and Jay Christiansen, Mandiant Red Team Consulting Manager will explore some of the tools used by security teams to improve cyber resiliency. 

We'll focus on:  

-  Understanding your attack surface, where to start and what to look for
-  A view of some of the tools you can use to look at your attack surface
-  A look at some of the tools that we use during these engagements
-  Operationalizing attack surface data into actionable insights

Attack Surface Management: Improve your cyber resiliency

Attribution assessments are an essential component of intelligence analysis. With threat intelligence one of the critical functions in The Defender's Advantage, navigating the challenges of attribution is essential to developing a proactive security posture. 

This webinar demystifies the cyber attribution process by outlining an approach that focuses first and foremost on a security function's resources and stakeholders. By understanding requirements of key stakeholders, a threat intelligence team is in a much better position to build an attribution process that directly addresses challenges facing an organization. We therefore advocate for a highly pragmatic approach to attribution that first focuses on tactical clustering and operational profiling.

A Stakeholder-led Approach to Cyber Attribution

Nearly one year ago, Russia invaded Ukraine, and we continue to see cyber operations play a prominent role in the war. To provide more insights into the role of cyber, we released Fog of War: How the Ukraine Conflict Transformed the Cyber Threat Landscape Report based on analysis from Google’s Threat Analysis Group (TAG), Mandiant, now part of Google Cloud, and Google Trust & Safety.

Join our upcoming webinar to explore new findings, and retrospective insights, across government-backed attackers, information operations (IO), and cybercriminal ecosystem threat actors from the report. 

Highlights include:
- Shifts in Russia’s government-backed attackers tactics and efforts.
- How Moscow has shaped public perception of the war.
- The effects on the Eastern European cybercriminal ecosystem, and how it has changed.

Speakers:
Toni Gidwani, Security Engineering Manager - Google Threat Analysis Group
Tina Tong, Threat Intelligence Analyst - Google Threat Analysis Group
Ben Read, Senior Manager of Threat Analysis - Mandiant, now part of Google Cloud

Fog of War: How the Ukraine Conflict Transformed the Cyber Threat Landscape

This webinar shares examples from actual EMEA incidents to show techniques threat actors use to hinder analysis and hide their trails. We discuss how these techniques work, how to counteract them as an incident response analyst and how to turn them into detection opportunities.

At Mandiant, we are relentless in our mission to ensure all organizations are secure from cyber threats and conﬁdent in their readiness. We continuously review the solutions we offer our customers and revise or create new approaches to confront an ever-changing threat landscape.

Attend this session to learn how Mandiant tries to stay ahead of threat actors and adapt when usual artifacts are not available.

Mandiant Incident Response: Tales from the EMEA Frontlines

Every year we see the threat landscape in EMEA evolve in different ways. While defenders must navigate challenges, their path doesn’t have to be so uncertain. By studying the trends we see today in EMEA, we can paint a clearer picture of the battles we expect to be fighting in the coming year.

To help organizations be prepared for 2023 so they can improve their cyber readiness, Mandiant threat expert Dr. Jamie Collier covers many of the EMEA-focused topics discussed in Mandiant Cyber Security Forecast 2023, including:

• Europe may surpass the U.S. as the most-targeted region for ransomware
• Russian cyber risks likely to continue to be high-tempo and high-impact
• Iranian actors may increase in escalating attacks due to rising internal turmoil
• Information operations likely to continue to increase in tempo, with unclear impact
• Cyber insurance may restrict access and coverage
• Extortion actors likely to continue to eschew ransomware in favor of pure extortion through data theft

Mandiant EMEA Cyber Security Forecast 2023

Join Dr Jamie Collier who will prise open today's information operation landscape. We have traditionally focused on only a narrow subset of information operations and with the majority of attention concerned about Russian interference in electoral processes. Yet, today's information operation landscape demonstrates that there is now a greater variety of players involved, a wider spread of victims, and a rich spectrum of aims and objectives. 

This webinar will explore how the landscape has evolved and the links between information operations and cyber security.

Prising Open Today's Information Operation Threat Landscape in EMEA

Ransomware Series - Part Three.

Adversaries behind ransomware are targeting organisations of all size and industries. Ransomware encrypts your critical data and can bring your organization to a halt. Mitigation strategies start with awareness and prevention. Learn about today’s #1 cyber threat from frontline experts to understand if your security controls can prevent a ransomware attack. 

In this webinar, the final one of the ransomware series, a panel of senior Mandiant intelligence analysts and validation engineers share their perspectives on the latest and most relevant ransomware as well as best practices on safely testing prevention capabilities with repurposed real ransomware.

This session covers how to:
- Understand how Mandiant FLARE experts analyse, dissect and repurpose the most notorious ransomware families
- Evaluate the efficacy of your endpoint security controls using the repurposed ransomware
- Capture evidence of effective ransomware prevention with contextualised threat intelligence and data-driven reporting.

EMEA Lessons From the Frontlines: Understand Your Ability to Prevent Ransomware

Ransomware Series - Part Two

Mandiant responds to hundreds of ransomware intrusions each year across the globe. In this session, our EMEA incident responders will describe a typical ransomware breach and share tradecraft employed by criminals to compromise networks, steal data, deploy ransomware, and extort victims. We will also share common challenges organisations face when responding to a breach.

Attendees will learn:

• How criminals are compromising victim organisations
• Tradecraft employed by attackers within victim networks
• Common challenges faced by organisations when responding and recovering to a successful ransomware intrusion

Mandiant Incident Response in EMEA: Anatomy of a Ransomware Breach

Ransomware Series - Part One. 

Join Mandiant Consulting and Threat Intelligence expert, Dr Jamie Collier, for a strategic overview on how ransomware has developed within the EMEA region over the past 12 months. We will explore how ransomware has emerged as a key threat to organisation's, from small or medium enterprises through to global multinationals and will also cover various trends including the rise of multi-faceted extortion, post compromise ransomware deployment and soliciting insider threats.
 
Attendees will learn about:
 
• The rise in ransomware targeting virtualization infrastructure
• How different cyber criminal groups are increasingly working together
• Emerging ransomware techniques, tools and procedures
• Use of supply chain compromise and zero-day exploits in ransomware operations

Ransomware Threat Trends in EMEA

Únase a Daniel Susin Acebo, Principal Consultant en Mandiant, en una sesión en la que se debatirán los datos de las tendencias en ciberataques en la región de EMEA, las perspectivas de las investigaciones y soluciones en primera línea que se destacan en el informe M-Trends 2022.

M-Trends 2022: Tendencias en ciberataques e informaciones de primera línea

Nehmen Sie an einer Sitzung mit Alexander Arlt, Principal Consultant bei Mandiant, teil, in der er die aktuellen EMEA-Daten und Erkenntnisse aus den heutigen Untersuchungen und Abhilfemaßnahmen diskutiert, die im Bericht M-Trends 2022 vorgestellt werden.

M-Trends: Die Top Cyber Trends und Frontline Insights in der EMEA Region

Join Mandiant consulting and threat intelligence expert, Jamie Collier, for a session discussing trending EMEA data and insights from today’s frontline investigations and remediations highlighted in the M-Trends 2022 report. In this talk, we will cover the following:

• The main actors that we have observed targeting EMEA
• Key strategic takeaways from the report for security leaders in EMEA
• Regional data and statistics

M-Trends: EMEA Top Cyber Trends and Frontline Insights

Rejoignez David Grout, CTO EMEA chez Mandiant, pour une session consacrée aux chiffres clefs et aux tendances cybersécurité en EMEA. Nous évoquerons également les mesures de remédiations mises en évidence dans le rapport M-Trends 2022.

Principales tendances et retours d’expériences de 15 mois d’investigation

Il report M-Trends di Mandiant è da sempre data-driven: Mandiant risponde agli incidenti più importanti nel mondo e le investigazioni a cui lavora in prima persona sono la sorgente di questo report. Gabriele Zanoni, Consulting Country Manager di Mandiant Italia illustrerà i contenuti del report tra cui i più recenti trend, i comportamenti degli aggressori e le nuove strategie dei gruppi ransomware.

M-Trends: I principali trend e attacchi informatici

Sulla scia degli attacchi su larga scala ai danni di sistemi software come log4j, Accellion, SolarWinds ed Exchange, e con il progredirsi delle violazioni verso la supply chain, i sistemi di gestione della superficie di attacco “Attack Surface Management ” non sono piu’ soltanto considerati degli strumenti utili, ma una necessita’ per i team di sicurezza. 

In questa sessione di introduzione a Mandiant Advantage Attack Surface Management (ASM), vedrete come lo strumento fornisca la necessaria visibilità utile a monitorare continuamente e dinamicamente la vostra infrastruttura, le applicazioni, i servizi cloud e l'utilizzo SaaS, garantendo al contempo il rispetto delle adeguate politiche di sicurezza in tutto l'ambiente. 

Unisciti a Walter Doria, Senior Systems Engineer, Mandiant, per un briefing esclusivo con i clienti e una sessione di domande e risposte per imparare come ASM:

- Si integri perfettamente nella piattaforma Mandiant Advantage
- Consenta la visibilità per rilevare, classificare e gestire le risorse note e non
- Aumenti la consapevolezza delle esposizioni per conoscere l'importanza di ogni risorsa e dare priorità alle vulnerabilità associate
- Renda utilizzabile la Threat Intelligence di Mandiant al fine di ridurre sia la frequenza che la gravità degli incidenti ai danni dei servizi esposti

Aggiungere un rapido sistema di allarme al vostro ambiente di sicurezza

Aux vues de l’accroissement des codes malveillants exploitant les vulnérabilités contre des logiciels tels que log4j, Accellion, SolarWinds et Exchange, et alors que les attaques sur des chaînes d'approvisionnements deviennent courantes, la gestion de la surface d'attaque (ASM) n'est plus une option à avoir, mais une nécessité pour les équipes de sécurité.

Assistez à une démonstration de la solution Mandiant Advantage Attack Surface Management pour comprendre ce qu’elle offre: une visibilité qui vous aide à surveiller en permanence et de manière dynamique votre infrastructure, vos applications, vos services cloud et votre utilisation du SaaS, tout en garantissant le respect des politiques de sécurité appropriées à l'environnement.

Rejoignez David Grout, CTO EMEA, Mandiant, pour une séance exclusive d'information et de questions-réponses afin de découvrir comment ASM :

- S'intègre de manière transparente à la plateforme Mandiant Advantage.
- Permet une visibilité pour trouver, classer et gérer les actifs connus et inconnus.
- Accroît la sensibilisation aux risques pour connaître l'importance de chaque actif et hiérarchiser les vulnérabilités.
- Rend opérationnel le renseignement sur les menaces adapté à une surface d'attaque unique afin de réduire la fréquence et la gravité des incidents.

Ajoutez un système d'alerte à votre environnement de sécurité

A raíz de los ataques a gran escala contra software como log4j, Accellion, SolarWinds y Exchange, y con las infracciones a gran escala de la cadena de suministro que se están convirtiendo en algo habitual, la gestión de la superficie de ataque (ASM) ha dejado de ser una opción agradable, para convertirse en algo imprescindible para los equipos de seguridad.

Vea una demostración de Mandiant Advantage Attack Surface Management para comprender cómo proporciona visibilidad para ayudarle a supervisar de forma continua y dinámica su infraestructura, aplicaciones, servicios en la nube y uso de SaaS, al tiempo que garantiza el cumplimiento de las políticas de seguridad adecuadas en todo el entorno.

Únase a Jonathan Rendal, Consulting Sales Engineer, Mandiant, para una sesión informativa exclusiva para clientes y una sesión de preguntas y respuestas para aprender cómo ASM:

- Se integra perfectamente en la plataforma Mandiant Advantage
- Permite la visibilidad para encontrar, categorizar y gestionar activos conocidos y desconocidos
- Aumenta el conocimiento de las exposiciones para conocer la importancia de cada activo y priorizar las vulnerabilidades
- Pone en funcionamiento la inteligencia sobre amenazas adaptada a una superficie de ataque única para reducir la frecuencia y la gravedad de los incidentes

Añada un sistema de alerta temprana a su entorno de seguridad

In the wake of large-scale attacks against software such as log4j, Accellion, SolarWinds, and Exchange, and with large-scale supply chain breaches becoming common—Attack Surface Management (ASM) is no longer a nice to have option, but a must-have for security teams.

See a demonstration of Mandiant Advantage Attack Surface Management to understand how it provides visibility to help you continuously and dynamically monitor your infrastructure, applications, cloud services and SaaS usage while ensuring the proper security policies are adhered to across the environment.

Join David Grout CTO EMEA, Mandiant, for an exclusive customer briefing and Q&A session to learn how ASM:

• Integrates seamlessly into the Mandiant Advantage platform
• Enables visibility to find, categorize, and manage known and unknown assets
• Increases awareness of exposures to know the importance of each asset and prioritize the vulnerabilities
• Operationalizes threat intelligence tailored to a unique attack surface to reduce the frequency and severity of incidents

EMEA Tech Talk: Add an Early Warning System to Your Security Environment

Mark Weatherford, Global Information Security Strategist at Booking Holdings and former CISO of the States of California and Colorado, has over twenty years of executive-level leadership experience in some of the world’s most important organizations. He and Brian Contos discuss misconceptions of cloud security, issues in the supply chain, and evaluating all areas of your cybersecurity environment.

For more commentary and insight from the best and brightest in our industry, visit the Cybersecurity Effectiveness Podcast at https://www.verodin.com/podcast.

Cybersecurity Effectiveness Podcast: The Supply Chain Ripple Effect

Cyber Security

Cloud Security

Supply Chain

IT Security

Information Security

Network Security

CISO

Continuous Monitoring

Continuous Security Validation

Data Protection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Cybersecurity Effectiveness Podcast: The Supply Chain Ripple Effect

Presented by

About this talk

More from this channel