Name: Prising Open Today's Information Operation Threat Landscape in EMEA
Start: 2022-11-17T10:00:00Z
End: 2022-11-17T10:49:50.000Z
Location: BrightTALK
Rating: 4.5

Mandiant provides public and private organizations and critical infrastructure worldwide with early threat insights through unmatched intelligence and response expertise for the highest-profile incidents.

This webinar shares examples from actual EMEA incidents to show techniques threat actors use to hinder analysis and hide their trails. We discuss how these techniques work, how to counteract them as an incident response analyst and how to turn them into detection opportunities.

At Mandiant, we are relentless in our mission to ensure all organizations are secure from cyber threats and conﬁdent in their readiness. We continuously review the solutions we offer our customers and revise or create new approaches to confront an ever-changing threat landscape.

Attend this session to learn how Mandiant tries to stay ahead of threat actors and adapt when usual artifacts are not available.

Mandiant Incident Response: Tales from the EMEA Frontlines

Every year we see the threat landscape in EMEA evolve in different ways. While defenders must navigate challenges, their path doesn’t have to be so uncertain. By studying the trends we see today in EMEA, we can paint a clearer picture of the battles we expect to be fighting in the coming year.

To help organizations be prepared for 2023 so they can improve their cyber readiness, Mandiant threat expert Dr. Jamie Collier covers many of the EMEA-focused topics discussed in Mandiant Cyber Security Forecast 2023, including:

• Europe may surpass the U.S. as the most-targeted region for ransomware
• Russian cyber risks likely to continue to be high-tempo and high-impact
• Iranian actors may increase in escalating attacks due to rising internal turmoil
• Information operations likely to continue to increase in tempo, with unclear impact
• Cyber insurance may restrict access and coverage
• Extortion actors likely to continue to eschew ransomware in favor of pure extortion through data theft

Mandiant EMEA Cyber Security Forecast 2023

Ransomware Series - Part Three.

Adversaries behind ransomware are targeting organisations of all size and industries. Ransomware encrypts your critical data and can bring your organization to a halt. Mitigation strategies start with awareness and prevention. Learn about today’s #1 cyber threat from frontline experts to understand if your security controls can prevent a ransomware attack. 

In this webinar, the final one of the ransomware series, a panel of senior Mandiant intelligence analysts and validation engineers share their perspectives on the latest and most relevant ransomware as well as best practices on safely testing prevention capabilities with repurposed real ransomware.

This session covers how to:
- Understand how Mandiant FLARE experts analyse, dissect and repurpose the most notorious ransomware families
- Evaluate the efficacy of your endpoint security controls using the repurposed ransomware
- Capture evidence of effective ransomware prevention with contextualised threat intelligence and data-driven reporting.

EMEA Lessons From the Frontlines: Understand Your Ability to Prevent Ransomware

Ransomware Series - Part Two

Mandiant responds to hundreds of ransomware intrusions each year across the globe. In this session, our EMEA incident responders will describe a typical ransomware breach and share tradecraft employed by criminals to compromise networks, steal data, deploy ransomware, and extort victims. We will also share common challenges organisations face when responding to a breach.

Attendees will learn:

• How criminals are compromising victim organisations
• Tradecraft employed by attackers within victim networks
• Common challenges faced by organisations when responding and recovering to a successful ransomware intrusion

Mandiant Incident Response in EMEA: Anatomy of a Ransomware Breach

Ransomware Series - Part One. 

Join Mandiant Consulting and Threat Intelligence expert, Dr Jamie Collier, for a strategic overview on how ransomware has developed within the EMEA region over the past 12 months. We will explore how ransomware has emerged as a key threat to organisation's, from small or medium enterprises through to global multinationals and will also cover various trends including the rise of multi-faceted extortion, post compromise ransomware deployment and soliciting insider threats.
 
Attendees will learn about:
 
• The rise in ransomware targeting virtualization infrastructure
• How different cyber criminal groups are increasingly working together
• Emerging ransomware techniques, tools and procedures
• Use of supply chain compromise and zero-day exploits in ransomware operations

Ransomware Threat Trends in EMEA

Únase a Daniel Susin Acebo, Principal Consultant en Mandiant, en una sesión en la que se debatirán los datos de las tendencias en ciberataques en la región de EMEA, las perspectivas de las investigaciones y soluciones en primera línea que se destacan en el informe M-Trends 2022.

M-Trends 2022: Tendencias en ciberataques e informaciones de primera línea

Nehmen Sie an einer Sitzung mit Alexander Arlt, Principal Consultant bei Mandiant, teil, in der er die aktuellen EMEA-Daten und Erkenntnisse aus den heutigen Untersuchungen und Abhilfemaßnahmen diskutiert, die im Bericht M-Trends 2022 vorgestellt werden.

M-Trends: Die Top Cyber Trends und Frontline Insights in der EMEA Region

Join Mandiant consulting and threat intelligence expert, Jamie Collier, for a session discussing trending EMEA data and insights from today’s frontline investigations and remediations highlighted in the M-Trends 2022 report. In this talk, we will cover the following:

• The main actors that we have observed targeting EMEA
• Key strategic takeaways from the report for security leaders in EMEA
• Regional data and statistics

M-Trends: EMEA Top Cyber Trends and Frontline Insights

Rejoignez David Grout, CTO EMEA chez Mandiant, pour une session consacrée aux chiffres clefs et aux tendances cybersécurité en EMEA. Nous évoquerons également les mesures de remédiations mises en évidence dans le rapport M-Trends 2022.

Principales tendances et retours d’expériences de 15 mois d’investigation

Il report M-Trends di Mandiant è da sempre data-driven: Mandiant risponde agli incidenti più importanti nel mondo e le investigazioni a cui lavora in prima persona sono la sorgente di questo report. Gabriele Zanoni, Consulting Country Manager di Mandiant Italia illustrerà i contenuti del report tra cui i più recenti trend, i comportamenti degli aggressori e le nuove strategie dei gruppi ransomware.

M-Trends: I principali trend e attacchi informatici

Sulla scia degli attacchi su larga scala ai danni di sistemi software come log4j, Accellion, SolarWinds ed Exchange, e con il progredirsi delle violazioni verso la supply chain, i sistemi di gestione della superficie di attacco “Attack Surface Management ” non sono piu’ soltanto considerati degli strumenti utili, ma una necessita’ per i team di sicurezza. 

In questa sessione di introduzione a Mandiant Advantage Attack Surface Management (ASM), vedrete come lo strumento fornisca la necessaria visibilità utile a monitorare continuamente e dinamicamente la vostra infrastruttura, le applicazioni, i servizi cloud e l'utilizzo SaaS, garantendo al contempo il rispetto delle adeguate politiche di sicurezza in tutto l'ambiente. 

Unisciti a Walter Doria, Senior Systems Engineer, Mandiant, per un briefing esclusivo con i clienti e una sessione di domande e risposte per imparare come ASM:

- Si integri perfettamente nella piattaforma Mandiant Advantage
- Consenta la visibilità per rilevare, classificare e gestire le risorse note e non
- Aumenti la consapevolezza delle esposizioni per conoscere l'importanza di ogni risorsa e dare priorità alle vulnerabilità associate
- Renda utilizzabile la Threat Intelligence di Mandiant al fine di ridurre sia la frequenza che la gravità degli incidenti ai danni dei servizi esposti

Aggiungere un rapido sistema di allarme al vostro ambiente di sicurezza

Aux vues de l’accroissement des codes malveillants exploitant les vulnérabilités contre des logiciels tels que log4j, Accellion, SolarWinds et Exchange, et alors que les attaques sur des chaînes d'approvisionnements deviennent courantes, la gestion de la surface d'attaque (ASM) n'est plus une option à avoir, mais une nécessité pour les équipes de sécurité.

Assistez à une démonstration de la solution Mandiant Advantage Attack Surface Management pour comprendre ce qu’elle offre: une visibilité qui vous aide à surveiller en permanence et de manière dynamique votre infrastructure, vos applications, vos services cloud et votre utilisation du SaaS, tout en garantissant le respect des politiques de sécurité appropriées à l'environnement.

Rejoignez David Grout, CTO EMEA, Mandiant, pour une séance exclusive d'information et de questions-réponses afin de découvrir comment ASM :

- S'intègre de manière transparente à la plateforme Mandiant Advantage.
- Permet une visibilité pour trouver, classer et gérer les actifs connus et inconnus.
- Accroît la sensibilisation aux risques pour connaître l'importance de chaque actif et hiérarchiser les vulnérabilités.
- Rend opérationnel le renseignement sur les menaces adapté à une surface d'attaque unique afin de réduire la fréquence et la gravité des incidents.

Ajoutez un système d'alerte à votre environnement de sécurité

A raíz de los ataques a gran escala contra software como log4j, Accellion, SolarWinds y Exchange, y con las infracciones a gran escala de la cadena de suministro que se están convirtiendo en algo habitual, la gestión de la superficie de ataque (ASM) ha dejado de ser una opción agradable, para convertirse en algo imprescindible para los equipos de seguridad.

Vea una demostración de Mandiant Advantage Attack Surface Management para comprender cómo proporciona visibilidad para ayudarle a supervisar de forma continua y dinámica su infraestructura, aplicaciones, servicios en la nube y uso de SaaS, al tiempo que garantiza el cumplimiento de las políticas de seguridad adecuadas en todo el entorno.

Únase a Jonathan Rendal, Consulting Sales Engineer, Mandiant, para una sesión informativa exclusiva para clientes y una sesión de preguntas y respuestas para aprender cómo ASM:

- Se integra perfectamente en la plataforma Mandiant Advantage
- Permite la visibilidad para encontrar, categorizar y gestionar activos conocidos y desconocidos
- Aumenta el conocimiento de las exposiciones para conocer la importancia de cada activo y priorizar las vulnerabilidades
- Pone en funcionamiento la inteligencia sobre amenazas adaptada a una superficie de ataque única para reducir la frecuencia y la gravedad de los incidentes

Añada un sistema de alerta temprana a su entorno de seguridad

In the wake of large-scale attacks against software such as log4j, Accellion, SolarWinds, and Exchange, and with large-scale supply chain breaches becoming common—Attack Surface Management (ASM) is no longer a nice to have option, but a must-have for security teams.

See a demonstration of Mandiant Advantage Attack Surface Management to understand how it provides visibility to help you continuously and dynamically monitor your infrastructure, applications, cloud services and SaaS usage while ensuring the proper security policies are adhered to across the environment.

Join David Grout CTO EMEA, Mandiant, for an exclusive customer briefing and Q&A session to learn how ASM:

• Integrates seamlessly into the Mandiant Advantage platform
• Enables visibility to find, categorize, and manage known and unknown assets
• Increases awareness of exposures to know the importance of each asset and prioritize the vulnerabilities
• Operationalizes threat intelligence tailored to a unique attack surface to reduce the frequency and severity of incidents

EMEA Tech Talk: Add an Early Warning System to Your Security Environment

2021 saw ransomware ascend to policymakers’ agendas, CISO’s darkest nightmares and real world pipelines, but what will the ransomware threat landscape look like over the coming 12 months? Join Mandiant's Cyber Threat Intelligence and Red Team experts who will explore emerging ransomware trends within the EMEA region and what to do about them.

Participants will learn:
- The breadth of ransomware threats active within the EMEA region.
- Common ransomware threat actor and defensive controls misunderstandings.
- Lessons learned from ransomware IR and Red Team engagements and implications for network defenders.
- Quick wins to improve an organisation's security and resilience against ransomware threats.

Ransomware's Unceasing Scourge: Lessons Learned within the EMEA Region

Alongside the continued tensions between Russia and Ukraine is the potential for increased cyber threat activity. Given historical Russian campaigns against Ukrainian and western targets previously, what might such activity look like now? Join John Hultquist, Vice President – Mandiant Threat Intelligence and Matthew McWhirt, Managing Director – Mandiant Consulting, for this special briefing to understand how these threats might evolve in the near future and how organizations can harden their infrastructure against destructive attacks. In particular this briefing will cover: 
• An overview of the Russia cyber capability, including actors who are likely to be employed currently and in future operations. 
• The targeting and TTPs to watch for from some of the notable threat clusters, such as Sandworm Team. 
• A close look at aggressive cyberattack and information operations which are more likely in the event of conflict.
• Steps organizations can proactively take to harden their environment against destructive attacks.

Anticipating and Preparing for Russian Cyber Activity

Log4Shell and other related Log4j vulnerabilities have dominated the cyber security media cycle in recent weeks.  
Log4Shell is a critical vulnerability that has the potential to be one of the most impactful organizations have ever seen. Governmental advisories have been issued and organizations are scrambling not just to patch but to try to understand where they might be vulnerable.  
In addition to patching vulnerabilities it’s important to measure how capable your security controls are in protecting you against exploitation attempts.
Are your security controls effective in protecting against these vulnerabilities?  Find out the answer with Mandiant Security Validation.

[Cyber Headline Briefing] Validating Security Controls Against Log4Shell

Join Dr Jamie Collier who will prise open today's information operation landscape. We have traditionally focused on only a narrow subset of information operations and with the majority of attention concerned about Russian interference in electoral processes. Yet, today's information operation landscape demonstrates that there is now a greater variety of players involved, a wider spread of victims, and a rich spectrum of aims and objectives. 

This webinar will explore how the landscape has evolved and the links between information operations and cyber security.

Prising Open Today's Information Operation Threat Landscape in EMEA

Cyber Attacks

Threat Analysis

Information Operations

Cyber Defence

Cyber Crime

Cyber Intelligence

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Prising Open Today's Information Operation Threat Landscape in EMEA

Presented by

About this talk

More from this channel