Name: The Hidden Cost of SMS Toll Fraud: Strategies to Defend Against Costly Attacks
Start: 2024-07-10T15:00:00Z
End: 2024-07-10T15:00:46.000Z
Location: BrightTALK
Rating: 4.7

Transform your cybersecurity with frontline intelligence, modern security operations and AI-powered cloud innovation.

The shift to cloud environments, particularly Google Cloud, introduces unprecedented agility and scalability, but also complex challenges in maintaining robust security and compliance. This session dives deep into the critical aspect of governance, addressing how organizations can establish and enforce effective controls to mitigate risks and ensure alignment with business objectives and regulatory mandates. We will move beyond theoretical concepts to explore practical, technical implementations within Google Cloud, empowering security professionals to design, implement, and maintain a secure and compliant cloud posture.

What you will learn:
> Understand the key components of a comprehensive access governance framework on Google Cloud, including defining policies, roles, and responsibilities, and leveraging cloud-first controls for policy enforcement.
> Explore practical techniques for implementing access such as Identity and Access Management (IAM) best practices (e.g., least privilege, security keys, service accounts), Organization Policies, and Security Command > Center for continuous monitoring and audit.
> Discover how to leverage Infrastructure as Code (IaC) with tools like Terraform, automated policy enforcement, and security orchestration to streamline governance workflows and reduce manual effort in your Google Cloud environment.

Join us to gain actionable insights and technical expertise to master governance in your Google Cloud security journey and build a resilient and compliant cloud architecture.

Security Foundation: Your Cloud Journey to Least Privilege - From Zero to Secure

Enterprise Strategy Group survey data shows us that 99% of organizations are reporting that AI is improving employees productivity and job satisfaction. This is true across security operations (SecOps) as well, where AI-fueled threat detection, threat intelligence, and SIEM can level-up your proactive security posture.

Dave Gruber, Principal Analyst of Ransomware, SecOps & Services at ESG, and Wendy Willner, Product Manager, Google SecOps, unpack the trends, practical use cases, and applications for AI in SecOps.

Join this webinar to learn more about:
 - The current state and future trends of Security Operations
 - How SIEM and AI technology are transforming the SOC
 - The implications of rapidly evolving AgenticAI in security

The Future of SecOps in AI-World

In an era where web properties are the primary venue for consumer transactions, businesses face the persistent challenge of fraud and abuse from cybercriminals, often eroding thin margins and profits. Join guest speaker Frank Dickson, IDC's Group Vice President, Security and Trust, for a comprehensive discussion on the newly released 'The Business Value of Google reCAPTCHA' whitepaper.

This webinar will delve into the critical findings of IDC's research, showcasing how organizations are leveraging Google reCAPTCHA to achieve significant returns on investment and protect their digital assets and enhance user experiences.

What you will learn:

> How Google reCAPTCHA helps organizations achieve an average annual benefit of $5 million per organization and a three-year ROI of 545%.
> Strategies to cost-effectively enhance website and application security operations to mitigate business risk.
> Ways to reduce fraudulent accounts, bot attacks, and account takeovers.
> Insights into improving business results and increasing annual net revenue through enhanced security measures.

Join us to discover how Google reCAPTCHA can help your organization enhance security, reduce fraud, and drive significant business value.

Unlocking ROI: The Business Value of Google reCAPTCHA

Building on the principle that "with great power comes great responsibility," this webinar focuses on empowering your AI deployments with robust data protection. Discover how confidential computing and confidential accelerators provide an unparalleled shield for sensitive data and algorithms, ensuring they remain protected even while in use. We'll demonstrate how to leverage this transformative technology to secure your AI workloads across their entire lifecycle, from development to deployment.

In this webinar, you will:

> Discover mechanisms that safeguard your sensitive data even while it's being processed, a critical vulnerability point for traditional security measures.
> Learn how specialized hardware enhances security for AI workloads and other data-intensive applications, providing a robust layer of protection.
> Gain actionable insights into applying confidential computing to protect your sensitive models, training data, and inferences throughout the AI lifecycle.

Join us to establish a strong security foundation for your sensitive data and AI initiatives.

Security Foundation: How to safeguard sensitive data with Confidential Computing?

A robust foundation of baseline security controls is paramount for a strong cloud security posture. We’ll share how Google Cloud’s Security Foundation and shared fate operating model can help  you to comprehensively secure your infrastructure, applications, and data.

In this session, we will focus on how secure enterprise blueprints help you build a layered defense architecture and maintain a secure and well-managed cloud environment. We will explore practical steps to leverage these blueprints for securing your infrastructure, applications, and data effectively across your cloud adoption journey.

Join us to understand how to get started with these blueprints to safeguard your assets throughout your cloud journey.

Security Foundation: How to get started with secure enterprise blueprints?

Security Command Center is the must-have risk management solution for Google Cloud. In this session, you’ll learn how to use Security Command Center to proactively manage threats, posture, data, and identities, and how to respond to security events to protect your entire cloud footprint.

Find and eliminate cloud risks with Security Command Center

Even cloud security experts can struggle with application and data compliance. Discover how Security Command Center is simplifying cloud compliance by bringing together configuration, monitoring, and evidence generation. Learn how a unified cloud compliance solution can make it easy to apply prebuilt and custom compliance frameworks, check compliance status with a centralized dashboard, and automatically generate audit reports to prove compliance.

Simplify compliance in the cloud

APIs dominate the web, accounting for the majority of all internet traffic. And more AI means more APIs, because they act as an important mechanism to move data into and out of AI applications, AI agents, and large language models (LLMs). So how can you make sure all of these APIs are secure? In this session, we’ll take you through OWASP’s top 10 API and LLM security risks, and show you how to mitigate these risks using Google Cloud’s security portfolio, including Apigee, Model Armor, Cloud Armor, Google Security Operations, and Security Command Center

AI security and APIs: Address OWASP’s top 10 LLM and API risks

Cloud environments can have hundreds or thousands of potential security issues. But which ones create the most risk? Security Command Center uses powerful virtual red team technology and a new security graph to continuously analyze your cloud resource configurations, software vulnerabilities, and identity and access policies – running at machine scale – to pinpoint the issues that could put your cloud workloads at risk.

Deploying a virtual red team to find cloud risks you didn’t know about

Traditional, static, rule-based methods for identifying cloud security risks often fail to detect complex, multi-stage attacks and "unknown unknowns," leaving organizations exposed.  And the sheer volume of alerts leave security teams struggling to prioritize the most critical risks.

Security Command Center's (SCC) delivers the best protection for Google Cloud. Its unique virtual red teaming feature solves the above problems by continuously simulating millions of attack permutations against a digital twin of your cloud environment. This proactive approach discovers the highest risk attack paths and vulnerabilities that are often concealed, providing prioritized, actionable insights and reducing alert noise, allowing teams to focus on the most significant risks and improve their overall cloud security posture.  Join us to learn:

> Why typical static posture rules and attack path analysis fail
> What is Virtual Red Teaming and how it works
> How Virtual Red Teaming is integrated into CNAPP
> How SCC delivers risk mitigation, AI protection, and threat detection
> Live demo of Virtual Red Teaming in action

Security Foundation: How to uncover hidden risk with virtual red teaming?

The AI era presents unprecedented opportunities and challenges, particularly for security professionals. This webinar, featuring Archana Ramamoorthy from Google Cloud, and Dave Gruber from Enterprise Strategy Group, explores the critical security concerns arising from the rapid adoption of generative AI and recommendations for how organizations can accelerate AI transformation securely.

Based on a recent Enterprise Strategy Group showcase report, we'll delve into the primary security risks organizations face, including data protection, regulatory compliance, and AI-specific threats like hallucination and prompt injection. Our speakers will discuss the three foundational building blocks of AI security: discovery and visibility; control mechanisms; and detection and response, and how these can be implemented to ensure secure, private, and compliant AI deployments. Viewers can also learn more about Google Cloud's new AI Protection solution, which provides end-to-end capabilities to help manage risk across the AI lifecycle. 

Join us to gain actionable insights on establishing robust AI security measures and understand how you can protect your innovations in the AI era.

Securing AI 101: Breaking down the building blocks to enable secure AI transformation

This webinar, the final session in The Defender's Advantage virtual series, focuses on how Google Cloud Security can help organizations of all sizes activate their defender's advantage by guiding them through the activation of the six critical functions of cyber defense.    

You will learn about:
*The Defender's Advantage methodology and its benefits    
*How Google Cloud Security solutions map to the six critical functions of cyber defense  
*Real-world examples and case studies of how organizations have successfully implemented The Defender's Advantage with Google Cloud Security    

Join us to discover how to make Google part of your security team. 

About The Defender’s Advantage:
Google Cloud Security published The Defender’s Advantage, a cyber defense framework to help all organizations prepare for and mitigate future security incidents. We believe that security teams like yours have the ultimate cyber defense advantage, the ability to control the environment being attacked.  Learn more here: https://cloud.google.com/security/resources/defenders-advantage

Activate the 6 critical functions of cyber defense with Google Cloud Security [The Defender's Advantage series, part 4]

Protecting your sensitive data in the cloud is paramount, and encryption at rest is a critical component of a robust security posture. However, navigating the various options and choosing the right strategy can be complex.

This talk provides an overview of encryption of data at rest in Cloud. We’ll review the factors that affect when you should own and control your own keys, and the differences between the different Google Cloud offerings. 

Join this webinar to  learn:
> How to choose your encryption strategy
> How to easily and continuously align with recommended encryption and key management practices

Security Foundation: Why your cloud keys matter and how to manage them in cloud.

In a recent blog post, Mandiant revealed a critical threat: a China-nexus espionage group, UNC3886, has been deploying custom backdoors on Juniper Networks' Junos OS routers. This sophisticated attack leverages vulnerabilities in end-of-life devices to gain unauthorized access and potentially compromise sensitive data.

Join Austin Larsen Principal Threat Analyst and Pete Boonyakarn Cyber Security Consultant for a live webinar as they delve deeper into this activity. We'll discuss the key findings of our investigation, including the techniques employed by UNC3886, the impact on affected organizations, and actionable steps to mitigate this threat.

During this webinar, we will cover:
 - The intricacies of the UNC3886 attack, methods used, and how China-Nexus actors targeted Juniper devices
 - The impact on organizations and mitigation strategies
 - Best practices for network security infrastructure, including device hardening, vulnerability management, and threat intelligence

Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers

Cybersecurity should be a team sport. Attackers are sharing tactics and sometimes infrastructure, so defenders need to work together as well. Sharing threat intelligence within trusted circles is no longer a "nice to have"—it's an essential component of a robust security strategy. Join our webinar to learn how Google Threat Intelligence empowers you to collaborate with internal groups, industry peers, MSSPs, and Mandiant experts to strengthen all of our collective defense.

Join Megan DeBlois, Google Threat Intelligence Product Manager, as she explores how private collections within Google Threat Intelligence can provide a secure and confidential space to share critical intelligence, including IOCs, TTPs, and strategic insights. Discover how these trusted circles enable you to:

*Proactively improve your organization's defenses
*Stop threats before they impact your systems
*Gain a deeper understanding of the evolving threat landscape. 

Don't miss this opportunity to learn how to build and share private collections within your trusted circle.

Don't go it alone: Use private collections in threat intelligence to strengthen your trusted circles

Security operations is notoriously difficult and most organizations fall short of their expected security outcomes when it comes to threat detection, investigation, and response (TDIR). Why is that? There’s the standard answers of lack of data and context, limited attacker insight, and manual and complex processes. But there’s an additional challenge - the ability to use metrics to demonstrate the value that security teams bring to the larger organization.

Security leaders have struggled to identify metrics that demonstrate the value that the SOC delivers and how it performs, as the standard metric of success in the SOC is avoiding a breach or stopping it quickly. Thanks to the vast array of tools security pros use everyday, it’s also very difficult to build a system to properly track metrics in the SOC.

So how do you choose the metrics that matter? Join Google’s Anton Chuvakin and guest speaker, Forrester’s Allie Mellen and dig into the paradox of metrics; the easy metrics versus the metrics you really want, why we can’t agree on metric recommendations and more.

The SOC Metrics that Matter…or Do They?

Streamlined security and compliance guardrails are essential for navigating complex global regulatory landscapes.

Building on our series of cloud security webinars, this webinar dives deep into Assured Workloads and how it enables you to rapidly build applications within secure, pre-configured environments designed to meet stringent global compliance requirements.

In this webinar, you will learn:
> The benefits of a software-defined regulatory cloud.
> A practical walkthrough of deploying and managing Assured Workloads.
> How Assured Workloads support compliance frameworks beyond U.S. regulations.

Register now to learn about the latest features and how to effortlessly achieve your data residency and compliance objectives.

Security Foundation: How to easily address compliance with Assured Workloads?

SMS toll fraud, also known as SMS pumping, is a sophisticated cyberattack targeting businesses worldwide. Malicious actors exploit vulnerabilities in your SMS systems, generating fraudulent charges by sending high volumes of messages to premium-rate numbers. This results in significant financial losses, often reaching thousands or even millions of dollars, leaving your business liable for the fraudulent activity.

Register for this webinar to gain a comprehensive understanding of SMS toll fraud and learn actionable strategies to protect your organization.

Key topics:
> Gain insights into the complex tactics and techniques used by fraudsters to exploit your SMS infrastructure.
> Understand the direct and indirect costs of SMS toll fraud, including financial losses, operational disruptions, and potential reputational damage.
> Discover industry-leading strategies and best practices to strengthen your overall SMS security posture and proactively mitigate future threats.

The Hidden Cost of SMS Toll Fraud: Strategies to Defend Against Costly Attacks

Fraud Prevention

Cyber Security

Financial Fraud

Cyber Attacks

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Hidden Cost of SMS Toll Fraud: Strategies to Defend Against Costly Attacks

Presented by

About this talk

Google Cloud Security