Name: Red Team Presents: Bypassing MFA - the Good, the Bad and the Ugly
Start: 2021-09-10T10:00:00Z
End: 2021-09-10T10:17:15.000Z
Location: BrightTALK

CyberArk channel offers you regular insights and latest news on Privilege Access Management from the global undisputed leader in privileged access management. 
You'll find here live webinars, on demand webinars and videos!

$10 and a stolen cookie, a recipe for bypassing your MFA and SSO

The techniques, tactics and procedures used by nefarious characters to bypass security controls continue to evolve at a rapid pace. A technique that has proven to be effective in greasing the tracks in gaining the initial foothold is the theft of web session cookies.

Like updating passwords on a regular basis, clearing web browser cookies is a cyber hygiene practice neglected by most. If hijacked, these cookies will enable attackers with the necessary login details to bypass Multi-Factor Authentication (MFA), Single Sign-on (SSO) and gain access to critical business applications such as Jira or Slack. Threat actors can use this technique as a jumping point to deploy malicious code, social engineer and further carry out their attack.

Watch this webinar to learn how cookies and session IDs can be stolen with ease and how CyberArk Endpoint Privilege Manager (EPM) threat protection can prevent this and many other emerging techniques from being used in the wild.

Attendees of this webinar will walk away with:

Knowledge of various cookie theft tactics
An example of how gaming company EA was breached when attackers bought stolen cookies on the dark web
How CyberArk EPM threat prevention policies prevent cookie theft on your endpoints and product demo

How to Prevent Cookie Theft – A CyberArk Labs Webinar

Prevention is the priority in winning the race against Ransomware. 
Ransomware is one of the most concerning cybersecurity threats today. According to CyberSecurity Ventures, Ransomware attacks a business, consumer, or device every 11 seconds and that frequency is only expected to increase. While there is no silver bullet to prevent and protect against ransomware and other types of malware, a defense-in-depth approach to endpoint security can significantly mitigate the risk of a successful attack.

In this webinar, CyberArk’s solution specialists will dive into the rapidly evolving, very pervasive types of malware and mitigation strategies. Using simulated attack scenarios and product demos, he’ll demonstrate how least privilege and application controls are critical to preventing endpoint attacks and winning the race against ransomware.

Attendees of this webinar will walk away with

A new perspective on holistic endpoint protection and how layered security controls signifincantly mitigate the risk of an attack
Knowledge on how to proactively defend against cyber attack leveraging recent attack examples
An understanding of how CyberArk Endpoing Privilege Manager prevents ransomware and other endpoint attacks

Who should attend?

Security and desktop team
Endpoint manager
Workstation manager
Security operations

Winning the Race against Ransomware

Prevenire è la priorità per vincere la corsa contro il Ransomware. 
Il Ransomware è oggi una delle minacce più preoccupanti per la sicurezza informatica. Secondo CyberSecurity Ventures, ogni 11 secondi un ransomware attacca un'azienda, un consumatore o un dispositivo, e si prevede che tale frequenza aumenterà. Sebbene non esista la bacchetta magica per prevenire e proteggere dai ransomware e dalle altre tipologie di malware, un approccio di difesa approfondito per la sicurezza degli endpoint può ridurre significativamente il rischio che un attacco abbia successo.

Nel corso di questo webinar, il solution specialist per l‘Italia di CyberArk parlerà in modo approfondito di alcune delle diverse tipologie di malware, concentrandosi su parte di quelle in rapida evoluzione ed estremamente pervasive, e delle strategie di mitigazione. Utilizzando scenari di attacco simulati e demo di prodotto, dimostrerà come least privilege e application control siano fondamentali per prevenire attacchi agli endpoint e vincere la corsa contro il ransomware.

I partecipanti a questo webinar avranno modo di raccogliere informazioni relative a

Una nuova prospettiva sulla protezione olistica degli endpoint e su come i controlli di sicurezza a più livelli riducano in modo significativo il rischio di un attacco
Maggiori conoscenze su come difendersi in modo proattivo dagli attacchi informatici basandosi su esempi di attacchi recenti
Un migliore comprensione di come CyberArk Endpoint Privilege Manager previene i ransomware e gli altri attacchi agli endpoint

A chi si rivolge?

Security e desktop team
Endpoint manager
Workstation manager
Security operations

Vincere la corsa contro il Ransomware

Ransomware is widely known to be one of the most pervasive and dangerous cyberthreats. Even though it has been around since 1989 it’s managed to become the fastest growing type of cybercrime during the COVID-19 pandemic. 
 
Research firm Cybersecurity Ventures predicts that the global annual damage costs of ransomware to businesses will top $20 billion in 2021. Dynamic ransomware attacks can quickly spread throughout a company, impairing user productivity and disrupting business. 
 
The first step in the fight against ransomware is to expose it – to explore the different strains, what they have in common and what it is that makes them unique. The team at CyberArk Labs analyzes 100s of new ransomware samples each day and in this webinar, Andy Thompson and Brandon Traffanstedt disclose their findings of evaluating more than 3 million samples to-date. 
 
Here’s what is covered: 

The surge and types of ransomware prevalent during the COVID-19 pandemic 
How ransomware has evolved over the years to become such a formidable threat, including the role of Bitcoin 
The kill-chain and path to encryption of today’s modern, dynamic ransomware 
A review of mitigation strategies and recommendations

Ransomware Exposed: Key Learnings from Examining 3 Million Samples

The convergence of automation and Identity Security is rapidly gaining momentum.  HR is leading the charge, requiring IT to leverage HR systems as the "source of truth" to create new users and identities as part of the employee onboarding process.  CyberArk Identity automates HR-based workflows with our Lifecycle Management service by integrating with leading Human Capital Management (HCM) organizations such as BambooHR, SAP, UKG and Workday.

How to Unify your IT and HR Workflows with CyberArk Identity

Recent attacks have demonstrated attackers' growing creativity, confidence and precision.  But have you ever wondered how they go about finding new flaws?  We'll review several significant vulnerabilities in technical detail, analyzing each of them from an attacker's perspective.  You'll gain insights on tactics, techniques and procedures (TTPs) used to pinpoint areas of weakness.

A Journey Through the Mind of a Hacker

Phishing, ransomware and other endpoint attacks can disrupt your business, damage your company's reputation and lead to steep regulatory fines and costly lawsuits.  To stop attackers in their tracks, consistent least privilege enforcement is key.  CyberArk Endpoint Privilege Manager gives you the tools and techniques to get there quickly and confidently - but it doesn't stop there!  Explore the first critical stage of controlling privilege on the endpoint, as well as CyberArk capabilities that enable continued expansion of your endpoint security program.

EPM - More Than Just Least Privilege

Traditional perimeter-based IT security models are ill-suited for today's world of cloud services and mobile users.  Savvy attackers can breach enterprise networks and fly under the radar for weeks or even months.  Threat actors always find new and innovative ways to penetrate networks, steal data and disrupt business.  It's not a question of if - but when.  It's time to adopt an "assume-breach" mindset to help detect and isolate adversaries before they traverse your network and inflict serious damage...

How to Stay One Step Ahead in an Assume-Breach World

Forward-looking organizations adopt the Zero Trust approach to security to address the challenges of hybrid IT infrastructures, on-the-go employees and cloud-delivered services.  A Zero Trust security model eliminates the concept of the static network-based perimeter and treats every actor and vector inside and outside the network as a potential threat.  CyberArk Identity applies this methodology to securely enable access for various users - employees, partners and customers - regardless of their location, device or network for various assets and resources.  We'll explore the key Zero Trust concepts, explain stages of Zero Trust maturity and provide examples of how CyberArk Identity can help you on your own Zero Trust journey.

CyberArk Identity - An Essential Component of your Zero Trust Security Model

Whether opportunistic or targeted, ransomware attacks start on the endpoint.  Inadequately protected desktops, laptops and servers are pervasive - and each one provides a potential entry point for attackers to steal and encrypt data.  A defense-in-depth approach is critical for strong ransomware protection, achieved by layering a variety of security controls to eliminate gaps, reduce exposure and strengthen overall security posture.  Experts from Proofpoint, Crowdstrike and CyberArk will outline best practices for adopting a defense-in-depth across people, process and technology.

Stop Ransomware Before It Stops You with a Defense in Depth Approach

Have you ever wondered how other organizations are using CyberArk Identity to optimize their operations?  What have they successfully implemented to secure their users and resources?  In what ways has CyberArk enabled their digital business?  Join our roundtable discussion to hear customers share their journey with CyberArk, unique use cases they are solving and lessons learned.

Transforming Security with Identity and Access Management

As digital transformation has opened new doors for business, it has also left the door wide open for attackers.  With physical and network barriers dissolved, any identity can be an attack path to an organization's most valuable assets.  While cyber attacks are inevitable, loss is not.  This session outlines how Identity Security is used to secure individual identities throughout the cycle of accessing critical assets.  Identity Security Achieves a Zero Trust approach to secure the rapidly expanding number and types of identities within business applications, across cloud workloads and throughout the DevOps pipeline.

What is Identity Security and Why You Need It Now!

Endpoint security remains a major challenge for organizations, and in November 2020, Cybersecurity Ventures predicted that global cybercrime costs will reach $10.5 trillion USD a year by 2025. That’s more than triple the amount that it was in 2015. With remote working still very much the norm, and hybrid workforces emerging, it is becoming increasingly difficult to keep track of multiple endpoints and the risk they carry.

With the threatscape continuing to evolve and cyber attacks becoming even more sophisticated, experts are here to share how security leaders can take the complication out of endpoint security.

Join us for a replay of our panel discussion to learn:
- Common endpoint threats from the first half of 2021
- Emerging endpoint threats and what to prepare for going forward
- Leading endpoint protection strategies and how they can be integrated into your existing security solutions
- And more

Moderator: Masha Sedova, Co-Founder & President, Elevate Security
Panelists: Ian Goodhart, Director of Security Operations, Maryland Department of Information Technology (DoIT)
Matt Balderstone, Cybersecurity Advisor, CyberArk

Remote and Hybrid Workplace Endpoint Security

Learn how CyberArk’s integrated PAM and IAM solution can help you to:

Manage the lifecycle of the workforce and privileged identities across the organization
Control access to business applications and infrastructure
Provide VPN-less and passwordless remote access to cloud and on-premise resources
Enable users to elevate their workstation privileges with strong authentication
Protect high-risk web application sessions with continuous authentication and auditing

Why integrating PAM and IAM is essential to your Identity Security Strategy

Integrating PAM and IAM into your Identity Security Strategy - Session 2 of 2

Over 37 billion records were exposed in breach events in 2020 - by far the most records exposed in a single year, according to a recent report by Risk Based Security. How has remote working impacted your organization's security posture? What lessons can security professionals learn from the recent wave of breaches and what steps can enterprises take to strengthen security in 2021?

This keynote panel of security experts and industry leaders will explore the best practices for breach prevention, as well as share real-life lessons from the frontlines on what works and doesn't work.

Viewers will learn more about:
- The reality of data breaches
- Why data breach severity is rising
- Ransomware attacks on the rise (doubling from 2019 to 2020) and the threat to businesses
- Technologies that help with breach prevention, detection and response
- Why security awareness matters and best practices for educating employees to be cyber secure

Moderated by:
Michelle Drolet, CEO, Towerwall
Nico Fischbach, Global CTO, Forcepoint
Micheal Meyer, Chief Risk and Innovation Officer, MRSBPO 
Andy Thompson, Research Evangelist, CyberArk
Satya Gupta, CTO & Founder, Virsec

Preventing the Big One: Staying Ahead of the Breach

Access Management (AM) is an essential component of cybersecurity and a central pillar of the enterprise technology portfolio. Security leaders, including CIOs and CISOs, deploy Access Management solutions as part of their Zero Trust and defense-in-depth security strategies to defend IT systems against cyberattacks, identity-focused security breaches and data loss. At the same time, business leaders leverage AM technologies to enhance productivity, improve operational efficiency, and enable business initiatives dependent on reliable identity-based access control mechanisms.  
 
As IT environments evolve, business drivers change and cybercriminals increasingly target identities, Access Management capabilities must advance to address the new challenges and threats. In this webinar, we will help Security and Identity pros understand emerging trends in the Access Management space, demonstrate how AM can secure hybrid IT environments, and preview the next generation of CyberArk’s AM capabilities.  
After attending the webinar, you will be able to: 
•	Understand how changes in IT environments and business drivers are shaping Access Management space    
•	Determine which security-focused capabilities are becoming increasingly important  
•	Evaluate CyberArk Identity against legacy and modern IAM solutions  
•	Gain insight into the next generation of CyberArk’s Access Management capabilities

The Future of Access Management - Session 1 of 2

Multi-Factor Authentication (MFA) is rightfully considered a strong technical control for protecting against credential theft.  Yet this Zero Trust building block is also susceptible to weak points.  When implemented incorrectly, it can become compromised and used in the attack chain.  In this session, the CyberArk Red Team will demonstrate several attacks performed against MFA during real adversarial simulation engagements last year.

Red Team Presents:  Bypassing MFA - the Good, the Bad and the Ugly

Access Management

Cloud Security

Cyber Attacks

Cyber Defence

Cyber Incident Response

Cyber Security

Identity Management

Identity Security

Privileged Access Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Red Team Presents: Bypassing MFA - the Good, the Bad and the Ugly

Presented by

About this talk

More from this channel