Name: Actionable Threat Intelligence at Google scale
Start: 2024-08-05T07:54:00Z
End: 2024-08-05T07:54:16.000Z
Location: BrightTALK
Rating: 0

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

Il Report M-Trends 2025 offre un'analisi approfondita delle ultime tendenze globali in materia di cyber sicurezza e delle tattiche degli aggressori. Basato sulla risposta agli incidenti in prima linea e sulla threat intelligence di Mandiant dal 1 gennaio 2024 al 31 dicembre 2024, questo report aiuta i lettori a rimanere aggiornati, fornendo approfondimenti sul panorama delle minacce informatiche in evoluzione nella regione EMEA.

Unisciti al nostro esperto, Davide Di Lecce, che analizzerà queste metriche di tendenza e i comportamenti significativi degli avversari, e scopri come questi risultati possono migliorare la tua strategia di sicurezza contro futuri attacchi.

Gli argomenti includeranno:

*Metriche di risposta agli incidenti, incluse le principali fonti di rilevamento e i vettori di infezione iniziali
*Tendenze di targeting industriale

M-Trends 2025: dati dietro le principali tendenze e minacce informatiche odierne

El informe M-Trends 2025 analiza en detalle las últimas tendencias mundiales en ciberseguridad y las tácticas que utilizan los atacantes. Se basa en la experiencia directa de Mandiant respondiendo a incidentes e investigando amenazas entre el 1 de enero y el 31 de diciembre de 2024. Este informe ayuda a los lectores a estar al día, ofreciendo información sobre cómo está cambiando el panorama de las amenazas cibernéticas en Europa, Oriente Medio y África (EMEA).

Te invitamos a escuchar a nuestro experto, Jose Alemán, quien explicará estas tendencias y los comportamientos más importantes de los atacantes. Aprenderás cómo estos descubrimientos pueden ayudarte a mejorar tu estrategia de seguridad para defenderte de futuros ataques.

Los temas que se tratarán incluyen:

*Datos sobre la respuesta a incidentes, incluyendo las principales formas en que se detectan los ataques y cómo empiezan a infectar los sistemas.
*Tendencias sobre qué industrias son los principales objetivos de los ataques.

M-Trends 2025: Descubre las claves de los últimos ataques y tendencias en ciberseguridad

Der M-Trends 2025 Bericht bietet einen tiefen Einblick in globale Cyber-Sicherheitstrends sowie Taktiken und Methoden der Angreifer. Basierend auf den Erkenntnissen aus den Mandiant Incident-Response Untersuchungen des vergangenen Jahres sowie ergänzenden Google Threat Intelligence Informationen ermöglicht es der Bericht Lesern, ein besseres Verständnis über die aktuelle Cyber-Bedrohungslage in Europa zu entwickeln.

Jochen Klotz wird in seiner Präsentation auf relevante Kennzahlen des Reports eingehen und auf signifikante Vorgehensweisen von Angreifern hinweisen. Dies soll Ihnen eine Weiterentwicklung Ihrer Cyber-Sicherheitsstrategie ermöglichen mit der Zielsetzung, besser auf mögliche künftige Angriffe vorbereitet zu sein.

Themen werden sein:
*Kennzahlen zur Reaktion auf Vorfälle, einschließlich der wichtigsten Erkenntnisquellen und anfänglichen Angriffsvektoren.
*Trends hinsichtlich angegriffener Industrien.

Aktuelle Einblicke in die wichtigsten Cybersicherheits-Trends und Angriffe 2025

Le rapport M-Trends 2025 offre une analyse approfondie des dernières tendances mondiales en matière de cybercriminalité et des tactiques des attaquants. Basé sur la réponse aux incidents de première ligne et la veille des menaces de Mandiant du 1er janvier 2024 au 31 décembre 2024, ce rapport aide les lecteurs à garder une longueur d'avance en fournissant des informations sur l'évolution du paysage des cybermenaces dans la zone EMEA.

Rejoignez notre analyste expert, David Grout, qui décortiquera ces indicateurs de tendances et les comportements significatifs des adversaires, et découvrez comment ces conclusions peuvent améliorer votre stratégie de sécurité contre les futures attaques.

Les sujets abordés comprendront :
*Les indicateurs de réponse aux incidents, y compris les principales sources de détection et les vecteurs d'infection initiaux
*Les tendances de ciblage par secteur d'activité

M-Trends 2025: Les principales tendances et attaques en matière de cybersécurité

The M-Trends 2025 Report offers a deep dive into the latest global cyber trends and attacker tactics. Based on Mandiant's frontline incident response and threat intelligence from January 1, 2024 to December 31, 2024, this report helps readers stay ahead of the curve by providing insights on the evolving cyber threat landscape in EMEA.

Join our expert threat analyst, Jamie Collier, as he unpacks these trending metrics and significant adversary behaviours, and learn how these findings can enhance your security strategy against future attacks.

Topics will include:
*Incident response metrics, including top detection sources and initial infection vectors
*Industry targeting trends

M-Trends 2025: EMEA By the Numbers

In today's rapidly evolving digital landscape, startups and scaleups often face the dual challenge of accelerating growth while managing limited resources. This dynamic environment makes them prime targets for sophisticated cyber threats. Join experts from Google Threat Intelligence and Mandiant as they delve into the most pressing cybersecurity challenges confronting digital-native businesses.

Securing the Digital Frontier: Navigating Cyber Threats in Startups and Scaleups

In this session Mandiant Consultants will share some of the lessons learned during TIBER tests both from the perspective of the Threat Intelligence and the Red Team provider.

Key topics covered in this webinar will include:

- Common pitfalls and challenges encountered during TIBER assessments
- Best practices for integrating threat intelligence and red teaming into your assessment strategy
- Innovative methodologies and tools for maximising the effectiveness of your TIBER assessment
- Actionable takeaways and expert guidance for ensuring a smooth and successful TIBER assessment experience

TIBER-EU: Lessons Learned from the TI and RT Perspective

This webinar, the final session in The Defender's Advantage virtual series, focuses on how Google Cloud Security can help organizations of all sizes activate their defender's advantage by guiding them through the activation of the six critical functions of cyber defense.    

You will learn about:
*The Defender's Advantage methodology and its benefits    
*How Google Cloud Security solutions map to the six critical functions of cyber defense  
*Real-world examples and case studies of how organizations have successfully implemented The Defender's Advantage with Google Cloud Security    

Join us to discover how to make Google part of your security team. 

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked.  Learn more here: https://cloud.google.com/security/resources/defenders-advantage

Activate the 6 critical functions of cyber defense with Google Cloud Security [The Defender's Advantage series, part 4]

Modern applications increasingly rely on AI, introducing unique security challenges that demand a holistic approach to security architecture. This webinar dives deep into securing AI-powered applications, moving layer by layer from data security to infrastructure, model protection, and application-level defenses. We'll examine Google's Secure AI Framework (SAIF) as a blueprint for building robust security into each component of your AI systems, ensuring resilience against evolving threats.

Protecting AI-Powered Applications: A Deep Dive into Security Architecture

In a world where critical infrastructure is increasingly reliant on digital technologies, cybersecurity for OT (Operational Technology) and ICS (Industrial Control Systems) has become a crucial factor. In this webinar, we will discuss, among other topics, the significance of Red Teaming as part of a comprehensive security strategy.

Topics Covered include:

- Industrial cybersecurity, and why is it so important
- The types of OT attacks that have occurred in the past
- The challenges industrial cybersecurity face today
- Solutions and best practices available for protecting OT/ICS systems
- The role Red Teaming plays in a comprehensive security strategy

Together, we will analyze the challenges of industrial cybersecurity and present concrete solutions to address them.

Industrial Cybersecurity: Red Teaming as Part of a Comprehensive Security Strategy

Security operations is notoriously difficult and most organizations fall short of their expected security outcomes when it comes to threat detection, investigation, and response (TDIR). Why is that? There’s the standard answers of lack of data and context, limited attacker insight, and manual and complex processes. But there’s an additional challenge - the ability to use metrics to demonstrate the value that security teams bring to the larger organization.

Security leaders have struggled to identify metrics that demonstrate the value that the SOC delivers and how it performs, as the standard metric of success in the SOC is avoiding a breach or stopping it quickly. Thanks to the vast array of tools security pros use everyday, it’s also very difficult to build a system to properly track metrics in the SOC.

So how do you choose the metrics that matter? Join Google’s Anton Chuvakin and guest speaker, Forrester’s Allie Mellen and dig into the paradox of metrics; the easy metrics versus the metrics you really want, why we can’t agree on metric recommendations and more.

The SOC Metrics that Matter…or Do They?

Cyber defense is not just about preventing attacks; it's also about effectively responding to and recovering from incidents. This webinar will focus on the critical cyber defense functions of Validation, Response, and Mission Control, examining how they contribute to a comprehensive and resilient cyber defense program.

What you will learn:
*How to rigorously test and validate your entire cyber defense program to identify areas of improvement, and ensure preparedness against real-world threats.
*How to build and implement an effective incident response plan, from preparation and containment to eradication and recovery.
*How centralized coordination and management can enhance your organization's overall cybersecurity posture.

Join us to gain practical knowledge and actionable strategies for elevating your organization's cyber resilience through robust validation, response, and mission control capabilities.

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked. Download The Defender's Advantage ebook here: https://cloud.google.com/security/resources/defenders-advantage

Activate continuous security testing to improve cyber response [The Defender's Advantage virtual series, part 3]

Security operations teams have their hands full, especially as both data volumes and cyber threats continue to increase across on-premises data centers, endpoints, and clouds. Traditional security information and event management (SIEM) systems have evolved over the years for greater integration and visibility, and yet they remain complex beasts to manage. Meanwhile, cybersecurity talent gaps persist. In this webinar, experts from IDC and Google Cloud discuss security and SIEM trends for 2025. They also offer best practices to create a proactive security operations environment that results in greater business value, including improved productivity, a data- and intelligence-led security posture, scalability, and cost benefits.

Best practices to boost security operations in 2025

SIEM's complicated evolution has resulted in unsustainable cost increases, scope creep, and the occasional declaration that the product space is essentially dead. Thanks to deep expertise in search and data management, access to OSINT and frontline intelligence, and AI-infused features, Google SecOps demonstrates that the SIEM still has plenty of gas in the tank. Discover how SecOps is ushering in the "SIEM's Third Act" by addressing the limitations of traditional SIEMs and empowering security teams with cutting-edge tools for threat-informed defense.

What You’ll Learn:
 - The Evolution of SIEM: We'll examine the challenges posed by the increasing complexity and scope of traditional SIEMs, highlighting the need for a more streamlined and effective approach.
 - Introducing Google SecOps: Learn how Google SecOps redefines threat detection and response by leveraging the power of Mandiant and VirusTotal threat intelligence, robust SOAR capabilities, and AI-enhanced workflows.
 - Deep Dive into Key Features: We'll explore the core functionalities of Google SecOps, including data collection, threat detection, automation, and case management.
 - Differentiation in a Crowded Market: We’ll conclude by discussing key differences in Google’s approach as compared to traditional SIEM platforms, and why SecOps is well worth a look.

Google SecOps: The SIEM’s Third Act

Cryptography underpins the security of sensitive data, ensuring its protection during storage, transit, and authentication processes. However, the rapid advancements in quantum computing present a looming threat to modern cryptographic protocols. The emergence of Cryptographically Relevant Quantum Computers (CRQCs) could render current encryption methods obsolete, exposing data to potential compromise and weakening foundational security controls like digital signatures.

In this insightful webinar, Dr. Stephen Begley, Mandiant UKI Red Team Lead, will explore:

- The Quantum Threat: How CRQCs will disrupt today’s cryptographic standards.
- Post-Quantum Solutions: Insights into NIST’s Post-Quantum Cryptography (PQC) standards and their potential to safeguard future security.
- Actionable Steps: Best practices for organisations to transition to quantum-resistant technologies and initiate a post-quantum cryptographic transformation.

This session is ideal for cybersecurity professionals, IT leaders, and decision-makers who want to stay ahead of evolving threats and secure their organisations for a post-quantum future.

Prepare today to protect your secrets tomorrow.

Defending Today’s Secrets from Tomorrow’s Attacks

Join Mandiant's leading experts from Incident Response, Strategic Services, Cyber Threat Intelligence, and Security Transformation for a unique webinar that dissects the ransomware threat landscape from all angles.

Gain invaluable insights into:

- The Attacker's Perspective: Our Intelligence team reveals the latest TTPs (Tactics, Techniques, and Procedures) employed by ransomware groups, their motivations, and evolving attack patterns.

- On-the-Ground Response: Hear firsthand experiences from our Incident Response team, who will share lessons learned from the front lines of ransomware attacks and discuss strategies for effective containment and recovery.

- Proactive Defense: Our Strategic Services experts will guide you through proactive measures to bolster your organization's defenses and reduce your ransomware risk profile.

- Building Resilience: The Security Transformation team will delve into building a robust security posture and implementing effective remediation strategies to minimize the impact of a ransomware attack.

This webinar is a must-attend for CISOs, security professionals, IT leaders, and anyone responsible for protecting their organization from the growing threat of ransomware.

Deconstructing Ransomware: A Mandiant and Google Threat Intelligence perspective

A crucial aspect of effective cyber defense is the ability to produce and disseminate actionable intelligence into the hands of various security functions, in a format and language they can understand and use to make decisions. This allows for informed decision-making and proactive threat mitigation. 

This webinar will delve into the critical functions of Intelligence, Detection, and Hunting, exploring how they work together to create a robust and resilient security posture. 

You will learn:
*How to effectively gather, analyze, and operationalize threat intelligence to inform your cyber defense strategy
*Best practices for developing and implementing high-fidelity detections that align with attacker tactics and techniques
*Methodologies and tools used to proactively hunt for threats and identify hidden adversaries in your environment

Join us to gain valuable insights and practical strategies for strengthening your organization's cyber defenses through an intelligence-led approach to detection and hunting.

Intelligence-led detection and threat hunting  [The Defender's Advantage virtual series, part 2]

Cyber threats are constantly evolving. Learn how to stay ahead of them in 2025 with security expert Jamie Collier.

Join this deep-dive session based on the Cybersecurity Forecast 2025 report, where we will cover key trends and insights to help strengthen your cyber defenses in the year ahead, including:

*Attacker use  of AI
*The evolving threat landscape from Russia, China, Iran, and North Korea
*Ransomware and multifaceted extortion as the most disruptive form of cyber crime
*The growing threat of infostealer malware

Google Cloud EMEA Cybersecurity Forecast 2025

Breakthroughs in building a risk-centric strategy for cloud security

Securing the Future: The intersection of AI and cybersecurity

The Secure Enterprise Browser: Your Endpoint's Best Defense

Work Smarter, Not Harder with Gemini in Security Operations

Security Talks June 2024 On-demand

Google Threat Intelligence brings together the frontline expertise of Mandiant, the VirusTotal intel community, and Google threat insights. This diversity of sources provide unmatched visibility into the threat landscape so you can get a panoramic view of the threat landscape, understand the "why" and "how" behind attacks, and turn insights into rapid action.

Actionable Threat Intelligence at Google scale

Threat Intelligence

Threat Analysis

Threat Detection

Threat Horizon

Cyber Attacks

Cyber Crime

Cyber Defence

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Actionable Threat Intelligence at Google scale

Presented by

About this talk

More from this channel