Name: Tales From the Frontlines - Threat Group UNC1945
Start: 2023-07-06T09:00:00Z
End: 2023-07-06T09:00:47.000Z
Location: BrightTALK
Rating: 5

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

Password leaks and data breaches are increasing, exposing user credentials to cybercriminals.

Protect your users and your business with proactive password leak detection.

Register now for this webinar to:
> Understand the scale of password leaks and how they're exploited.
> Discover how reCAPTCHA password leak detection provides insights into leaked credentials  before they're misused.
> Learn how to set up password reset and other mitigation steps empower users to protect their accounts immediately.

Register now to learn how to safeguard your users and business by implementing proactive password security measures that detect and respond to threats.

Beyond Bots: Protecting Your Users from Password Leaks with reCAPTCHA

Account takeover attacks are escalating, leading to financial losses, damaged reputations, and eroded user trust.  

Learn how reCAPTCHA can strengthen your defenses against account takeovers, protecting your users and your platform's integrity.  

Register now for this webinar to:
> Uncover the latest tactics used by fraudsters to hijack user accounts.
> Explore how reCAPTCHA’s multi-layered defense identifies and blocks suspicious login attempts.
> Understand how real-time threat detection and response helps you stay ahead of emerging fraud trends.

Register now to learn how to safeguard your users and business from account takeovers by proactively detecting and stopping attacks.

Beyond Bots: Protect your business from account takeovers with reCAPTCHA

Security Command Center, The industry’s first multi-cloud risk management solution that includes built-in response capabilities so you can take action on the risks that matter most - all supercharged by Mandiant expertise and Gemini AI at Google scale. 

In this webinar, learn how you can:

- Strengthen Google Cloud protection: Leverage 100+ specialized detectors and controls integrated into the cloud infrastructure, providing unmatched security visibility and control

- Find your greatest cloud risks: Use our one-of-a-kind virtual red teaming to continuously predict where and how external attackers could strike

- Streamline incident response: Resolve cloud security issues directly by automatically grouping security issues and applying remediation playbooks to improve your risk posture

- Find new and novel attacks with the latest threat intelligence: Get Mandiant frontline threat intelligence integrated so you can keep your cloud security defenses up-to-date

From Reactive to Proactive: Find and fix cloud security issues with Security Command Center

Account-based fraud, such as credential stuffing and account takeover, is a growing threat to businesses and their customers.

Learn how reCAPTCHA can be your first line of defense, protecting your users and your bottom line.

Register now for this webinar to:
> Discover the latest account-based fraud tactics and their potential damage.
> Learn how reCAPTCHA can stop unauthorized access and protect your users' accounts.
> Understand best practices for implementing reCAPTCHA to enhance security without compromising user experience.

Register now to equip yourself with the knowledge to combat account-based fraud effectively and safeguard your users' accounts.

Beyond Bots: Shielding Your Business from Account-Based Fraud with reCAPTCHA

Gli attacchi ransomware sono tornati prepotentemente alla ribalta, sfruttando strumenti comuni e insospettabili come software di accesso remoto e vulnerabilità note. Sorprendentemente, le statistiche rivelano che gli exploit hanno superato il phishing come principale metodo di intrusione nelle reti aziendali. Conoscere le nuove strategie adottate dai criminali informatici è fondamentale per le aziende e i loro Cyber Defense Center, che possono così indirizzare gli investimenti in sicurezza e implementare un monitoraggio mirato per individuare tempestivamente le minacce ransomware.

Ransomware Landscape - Il punto di vista di Mandiant

Dans un monde où les infrastructures critiques dépendent de plus en plus des technologies numériques, la cybersécurité des technologies opérationnelles (TO) et des systèmes de contrôles industriels (SCI) est un enjeu crucial. Nous sommes ravi(e)s de vous convier à notre webinaire sur La cybersécurité industrielle et ses enjeux le jeudi 12 septembre à 13 heures. 

Notre présentation abordera les points suivants : 

- Définition et importance de la cybersécurité industrielle 
- Panorama des attaques TO passées 
- Enjeux et défis de la cybersécurité industrielle 
- Solutions et bonnes pratiques pour protéger les TO/SCI 
- Ensemble, nous allons démystifier la cybersécurité industrielle et comprendre ses enjeux.

La cybersécurité industrielle et ses enjeux

Learn how you can quickly and easily build applications in environments with predefined controls and guardrails to meet global regulatory requirements and maintain digital sovereignty. In this session, you’ll hear about the wide variety of options available that allow you to align cloud controls with risk and regulatory mandates worldwide.

The power of choice: Addressing diverse global regulatory requirements on Google Cloud

The key to maintaining a strong cloud security posture is to build from a robust foundation of baseline security controls. In this session we will highlight our latest innovations in IAM. Join us and learn how to enforce the principle of least privilege for your identities using Privileged Access Management and how to mitigate data exfiltration risks with Principal Access Boundary.

Security foundations: What’s new in Identity and Access Management

Browsers are no longer just a portal to the internet, they are the new endpoint where almost every high-value activity or interaction in the enterprise takes place. In this session, learn how you can create a new nexus of security, privacy, control, and visibility for users on managed and unmanaged devices using Chrome Enterprise.

Simplifying and strengthening endpoint security

Is clinging to the "safe" choice of legacy productivity tools actually putting your organization at risk? We believe there's a better way: Google Workspace's cloud-first architecture minimizes security risks by eliminating data storage on user devices, dependence on desktop apps, and on-premises infrastructure.

At the breaking point: Is your work email safe against ransomware and state-sponsored attacks?

Major shifts in the SIEM market are driving security operations teams to migrate from legacy to modern platforms. In this session, Etsy will share best practices from its journey to fast and effective migration and SecOps modernization.

Etsy and the art of SIEM Migration

Cyber attacks are inevitable. When they happen it’s important to stay calm and have a plan. For many that plan is to enlist help from outside the organization. Join Jibran Ilyas, a seasoned security consultant and incident response expert as he dissects the strategies his team employs in recent high profile breaches and how the threat intelligence is applied in investigations to speed up analysis and for swift containment and remediation. This session is essential for anyone seeking to strengthen their incident response capabilities and safeguard their organization against the ever-evolving landscape of cyber threats.

The symbiotic relationship between incident response and threat intelligence

The practice of security in highly dynamic cloud environments begins by discovering where you are most vulnerable to attack and identifying high-value resources that could be exposed to adversaries. Google Cloud Security advancements help pinpoint the risks and vulnerabilities that matter most so you can directly respond and reduce exposure. Join this session to learn about the latest technologies that can help keep your multi-cloud environment safe.

The indispensable technologies for reducing cloud risk

You can’t spell “action” without “AI,” and in this session, we’ll show you five ways you can take action today to stay ahead of threats using generative AI. Our team of product experts will demo new features, cover use cases with a customer from Apex Fintech Solutions, and share best practices that empower security professionals to unleash the potential of AI and transform their operations.

From detection to protection: Five ways to use Gemini, Google’s AI assistant, in Security

Today’s fragmented and static approach to managing cloud risks makes it nearly impossible to prioritize security issues. What if you could count the issues that matter on just one hand? Join us to learn about our advanced Virtual Red Team capability that runs thousands of simulations against a digital twin of your cloud environment, and pinpoints where and how cloud defenses could be compromised to expose high-value resources. It’s time to make attack path technology useful.

Breakthroughs in building a risk-centric strategy for cloud security

Google Threat Intelligence brings together the frontline expertise of Mandiant, the VirusTotal intel community, and Google threat insights. This diversity of sources provide unmatched visibility into the threat landscape so you can get a panoramic view of the threat landscape, understand the "why" and "how" behind attacks, and turn insights into rapid action.

Actionable Threat Intelligence at Google scale

AI is rapidly changing the way we work and security professionals are not only thinking about how to apply generative AI to help them in their jobs, but also how to safeguard AI systems in their organizations as these tools become more prevalent. This session will outline how Google Cloud can support both of these efforts. Join us as we unpack our Product Vision for AI-Powered Security, as well as share how we are equipping defenders with strategies  and services to secure your AI data, models, applications, and infrastructure.

Securing the Future: The intersection of AI and cybersecurity

The modern workplace relies on web-based applications and cloud services, making browsers and their sensitive data a primary target for attackers. While the risks are significant, Chrome Enterprise can help organizations simplify and strengthen their endpoint security with secure enterprise browsing. In this session, we will explore the strategic advantages and best practices of integrating security directly into the browser with Chrome Enterprise Premium. You'll also learn how this approach offers proactive protection, enhanced visibility, and streamlined policy enforcement.

The Secure Enterprise Browser: Your Endpoint's Best Defense

The webinar is a summary of the activity that Mandiant captured while doing incident response and enterprise forensics on different entities targeted by the group UNC1945. 

Please join Mandiant’s Luis Rocha, Principal Consultant, Mandiant; Google Cloud, for an in-depth look at UNC1945, including the group’s:

- Demonstrated access to exploits, tools, and malware for multiple operating systems
- Exploitation of an Oracle Zero-day
- Disciplined interest in covering or manipulating their activity
- Advanced technical abilities during interactive operations

Tales From the Frontlines - Threat Group UNC1945

Cyber Attacks

Cyber Crime

Incident Detection

Incident Resolution

Incident Response

Threat Defence

Threat Detection

Threat Analysis

Cyber Incident Response

Cyber Defence

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Tales From the Frontlines - Threat Group UNC1945

Presented by

About this talk

More from this channel