Name: Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle
Start: 2022-08-31T14:00:00Z
End: 2022-08-31T14:00:29.000Z
Location: BrightTALK
Rating: 0

Learn how to achieve 100% cloud security coverage and visibility across AWS, Azure, GCP, Alibaba Cloud, and Kubernetes. Content covers topics including attack path analysis, vulnerability management, API security, and more.

With many organizations deploying multiple cloud accounts and providers, new opportunities arise for bad actors to exploit the increased attack surface and security loopholes.

In this webinar, we explore the phenomenon of cross-account and cross-provider cloud attacks, how multi-cloud attack path analysis can detect these security gaps, and how teams can prioritize attack paths, remediating the most critical ones first.

You’ll learn:
 •  How bad actors can ‘hop’ from one cloud provider to another to reach their end target
 •  The role of multi-cloud attack path analysis in detecting these threats
 •  How Orca can help teams prioritize attack paths and remediate strategically

Defend Against Multi-Cloud Attack Paths

As the cloud security landscape evolves and threats become more complex, Cloud Security Posture Management (CSPM) vendors continue to innovate. But what sets these security solutions apart? And which features are most impactful?

Join Orca Security’s Keith Mokris, VP of Product Marketing and Neil Carpenter, Principal Technical Evangelist as they meet with special guest Chris Ray, Cyber Security Analyst, GigaOm, to discuss what’s driving companies to adopt CSPM, as well as the advanced security features and trends to start tracking now. 

You’ll walk away with an overview of:
- GigaOm’s 2023 CSPM market analysis
- Key criteria for evaluating CSPM solutions
- How Orca’s approach is differentiated

Curious about how your team can benefit from deploying CSPM? Don’t miss this webinar.

Born in the Cloud: Cloud Security for the Modern Organization

We'll discuss the benefits of cloud security democratization and how generative AI and large language models such as ChatGPT and Azure OpenAI are contributing to this important initiative. By making cloud security accessible to not only security teams, but also developers, DevOps and governance and risk teams, organizations can empower stakeholders to make security-driven decisions, leading to reduced friction and improved cloud security postures. 

You'll learn:
  •  Why cloud security democratization is important
  •  How AI-driven cloud security empowers stakeholders across the organization
  •  Practical use cases where AI is helping improve cloud security postures

We’ll also demo how the Orca platform democratizes cloud security by delivering intuitive, AI-driven cloud asset search, remediation and user permissions management.

Bring your burning AI questions!

Democratizing Cloud Security With Generative AI

Melinda Marks, Senior Analyst at Enterprise Strategy Group (ESG), reports that, in a recent cloud security posture management (CSPM) study, 1 in 7 businesses are placing 40% of their applications in public clouds—and that number is expected to double in 2 years.

This wave of continuous cloud adoption necessitates a revised security approach, as managing risk, mitigating visibility issues, and establishing consistency of controls becomes more difficult as you grow your CSP ecosystem. 

This forthcoming Fireside Chat with Melinda Marks, Orca’s VP Product Marketing Keith Mokris, and Principal Technical Evangelist Ashley Ward will illuminate current CSPM trends, as well as top challenges and best practices for managing cloud security risk.

Register for the session—live on September 14th at 1pm EST—to join the discussion, which also covers:
• How can you strategically manage security risk during cloud migration?
• Cloud infrastructure entitlement management (CIEM) trends
• Explanation of how Orca is helping customers with CIEM and CSPM
• And much more

How to Build a Cloud Security Strategy That Scales

Financial services and technology organizations are the stewards of sensitive personal and financial data, and protecting that data is a common concern when it comes to cloud adoption. With the right combination of cloud provider and security, you can deliver financial services in the cloud that are secure and compliant without impacting performance or end-user experience.The Orca Cloud Security Platform delivers comprehensive coverage and visibility of risks across every layer of your AWS estate, enabling financial services and financial technology organizations to quickly prioritize risk, achieve compliance, and keep their businesses secure.

Join us to learn:
- About the threat landscape impacting the financial services & technology sector
- How to protect sensitive financial data, PII, and infrastructure in the cloud
- How to achieve continuous industry-standard compliance 

As the AWS Global Security Partner of the Year, Orca is committed to working closely with you and AWS to secure your cloud estate with our single unified platform. Find out more: https://orca.security/partners/technology/amazon-web-services

Protect Sensitive Financial Data and Achieve Compliance with Orca Security & AWS

Industry reports show that organizations waste as much as one-third of their cloud spend. Often, that wasted spend lines up with risky, unmanaged, or unused assets. As cloud usage grows, this problem is only going to get worse: many organizations don’t have a full grasp of all the assets they are running in the cloud and what they are being used for, let alone what they are paying for them. 

In this webinar, we will explore the various strategies and best practices for optimizing cloud costs and reducing cloud waste on AWS, Azure, GCP, and Alibaba cloud. We will also demonstrate, in real-time, how the Orca Cloud Security Platform continually detects unused, underutilized, and unattached compute resources to help you reduce unnecessary cloud spend and decommission those risky unused systems.

In this session, you’ll learn:
 • How cloud resources are billed by each provider, and what you may not be aware of.
 • How Orca can alert you to unnecessary cloud resources that can be removed
 • How security can be improved by removing unnecessary assets

Master Cloud Cost Optimization: Improve Security and Reduce Costs

According to Gartner®, “By 2026, 80% of enterprises will have consolidated security tooling for the life cycle protection of cloud-native applications to three or fewer vendors, down from an average of 10 in 2022.” What does the unification of siloed tools like CWPP, CSPM, and CIEM mean for security teams? 

Join Neil Carpenter, Principal Technical Evangelist, Orca Security, and Vivek Menon, VP & CISO, Digital Turbine, to learn how Digital Turbine uses a CNAPP to secure its cloud estate. They’ll cover:
- Challenges in securing cloud native applications
- How CNAPPs continue to evolve to offer different features and functionality
- Requirements for evaluating CNAPPs

Neil and Vivek will also discuss findings from the 2023 Gartner Market Guide for Cloud Native Application Protection Platforms. Curious about how a CNAPP can provide complete and centralized visibility of your cloud infrastructure? Don’t miss this webinar!

Gartner, Market Guide for Cloud-Native Application Protection Platforms, Neil MacDonald, Charlie Winckless, and Dale Koeppen, 14 March, 2023.

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Oh CNAPP! What to Know About Securing Cloud Native Applications

Bad.Build is a critical vulnerability discovered by the Orca Research Pod in the Google Cloud Build CI/CD service, which enables attackers to gain unauthorized access to code and images in Artifact Registry. The flaw presents a significant supply chain risk since it allows the injection of malicious code into applications, which could then be downloaded and installed by customers and partners.

Learn from our speakers as they deep-dive into the anatomy of Bad.Build and provide practical recommendations on how to fortify your defenses around the use of the Google Cloud Build service.

In this webcast, we’ll cover:
 •  The steps that led to the Bad.Build discovery
 •  A live demonstration of the Proof of Concept exploit, which includes Privilege Escalation and Remote Code Execution
 •  Recommendations on how to reduce exposure to this risk

How a Google Cloud Vulnerability Creates a Severe Supply Chain Risk

Gartner® predicts that “by 2025, nearly half of cybersecurity leaders will change jobs.” Is a new role in your future? Whether you are ramping up at a new role or you want to re-evaluate your existing cloud security program, this webinar is for you!

Andy Ellis, Advisory CISO, and Christina Shannon, CIO, KIK Consumer Products, will help you assess your cloud security program and score some quick wins, including how to:
- Evaluate your security risks by function
- Understand the gaps in your security programs
- Make clear decisions on which initiatives are most important
- Soothe organizational friction and create a successful path forward

Make the most of the next 91 days, register today! 

(1) Gartner, Gartner Unveils Top Eight Cybersecurity Predictions for 2023-2024, 28 March 2023

Mind the Gaps: How to Assess Your Cloud Security Program in 91 Days

With the acceleration of cloud adoption and cloud consumption in Media and Entertainment sector enterprises, cloud security becomes vital to protecting your media investments and cloud infrastructure. The Orca Cloud Security Platform delivers comprehensive coverage and visibility of risks across every layer of your Google Cloud estate, enabling TMEG organizations to quickly prioritize risk, achieve compliance, and keep their businesses secure. 

Join us to learn:
- About the threat landscape impacting the media & entertainment sector
- How to protect your media assets and infrastructure in the cloud   
- How to achieve industry-standard compliance and content security guidelines

As a Google Cloud ISV Accelerate Partner, Orca is committed to working closely with you and Google Cloud to secure your cloud estate with our single unified platform. Find out more: https://orca.security/partners/technology/google-cloud-gcp/

Protect Your Media Investments and Achieve Compliance

With more and more sensitive information and critical systems residing in the cloud, it's essential for organizations to implement robust security measures to safeguard their cloud assets. However, to do this in an effective manner, it’s critical to understand what attackers are looking for and how they operate.

In this webinar we will discuss the results from the Orca Security ‘2023 Honeypotting in the Cloud Report’, offering important insights into what attracts potential attackers as well as the tactics and techniques they use. 

In this session, you’ll learn:
 •  How quickly discoverable vulnerable assets are on GitHub, HTTP, SSH, S3 Buckets, etc.
 •  Resources bad actors are more likely to attack
 •  Advice on secrets management, authentication, malicious process monitoring, and more.

What We Learned From Honeypotting Attackers in the Cloud

In this webinar, we will present new research from Orca Security that highlights the top 5 cloud security risks of 2023, from insecure secrets and vulnerabilities to overly permissive identities. Analyzing billions of real-world production cloud assets across AWS, Azure, Google Cloud, Kubernetes, and serverless functions, we will present essential insights on cloud risks that are surprisingly common in the cloud environments we analyzed, along with recommendations on how to fix them with minimal effort.

In this webinar, cloud security practitioners and DevSecOps will learn:
 • The most common and critical cloud security risks that organizations are facing today
 • Why these particular cloud security risks need to be on your radar
 • Practical steps on how you can easily reduce your cloud attack surface and mitigate risk

How To Fix 5 Critical & Common Cloud Security Risks in 2023

Cloud Cost Optimization: Improve Security and Reduce Costs

Security flaws, hackers and data breaches are the new normal. It’s not just those of us in the industry facing these foes every single day; it’s everyone. Whether you’re online or offline, you simply cannot exist today without your personal information being digitized in systems which are often left vulnerable and exploited at the whim of attackers. But who are these people — the ones who seek to break through our defenses and exploit our data? And how are they continually so effective at doing so, despite our best efforts?

Hear from the creator of “Have I Been Pwned” about the lessons he’s learned after processing more than 12B records of breached data. You’ll get a glimpse behind the scenes of what caused some of these devastating incidents and how they continue to wreak havoc today, despite how much more aware the industry is becoming. It’s a frightening, eye-opening and entertaining look at infosec and data breaches.

Speakers:
Troy Hunt, Founder and CEO of Have I Been Pwned, Microsoft Regional Director & MVP
Bar Kaduri, Threat Research Team Lead, Orca Security

Lessons From Billions of Breached Records

Does visibility into your AWS environment rank at the top of your priorities? Join Paul Vixie, VP/DE, Amazon Web Services (AWS) and Gil Geron, CEO and Co-Founder, Orca Security, to learn what customers are doing to achieve comprehensive visibility across their AWS Cloud while building a security-focused culture. Paul and Gil will discuss the increasing accessibility of cloud security; the role of community tooling and collaboration; and the evolving shared responsibility model. Don’t miss the chance to hear from two of cloud security’s leading innovators!

Speakers:
Paul Vixie, VP/DE, Amazon Web Services
Gil Geron, CEO and Co-Founder, Orca Security

Better Together: How AWS and Orca Are Making Cloud Security More Accessible

It’s no secret that security teams are overworked and understaffed in 2023. So how can you create a cloud security plan that’s simple to execute but comprehensive enough to protect your organization’s unique risks? We asked a panel of security experts, “What are the most important steps you can take now to keep your cloud environment safe in the future?” Join our session to hear their answers. From industry-specific risks to auto-generated attack paths, this discussion will provide you with the information you need to tackle your plan and increase the security of your own cloud environment.

Speakers: 
Rich Friedberg, CISO, Live Oak Bank
Omer Singer, Head of Cybersecurity Strategy, Snowflake
Justin Somaini, Chief Security Officer, Unity Technologies
Andy Ellis, Advisory CISO, Orca Security

What Security Leaders Are Doing Now to Keep Their Cloud Environments Safe

It’s been a busy year in cloud security. We’ve seen data breaches, tens of thousands of new vulnerabilities, ambitious attacks, and a shortage of cybersecurity talent. Google Cloud’s Chief Information Security Officer Phil Venables will join Orca’s Chief Innovation Officer and Co-Founder Avi Shua for a deep dive into how these cloud security trends are evolving in 2023. They’ll discuss exciting new capabilities and integrations, megatrends, in-demand security skill sets, and recent innovations to help you keep your cloud environment secure.

Speakers:
Phil Venables, CISO, Google Cloud
Avi Shua, Chief Innovation Officer and Co-Founder, Orca Security
Deborah Galea, Director of Product Marketing, Orca Security

Cloud Security: Where We Are Headed in 2023

Learn more about how AI and ChatGPT can significantly enhance cloud security remediation in multi-cloud environments and reduce the daily workloads of security practitioners and DevOps teams.

We’ll demonstrate how the Orca Cloud Security Platform leverages GPT-4 to automatically generate high-quality cloud security remediation steps while ensuring that requests are anonymous and that any sensitive information is masked. We’ll also show how Orca’s AI-powered IAM Policy Optimizer analyzes usage data to recommend the optimal AWS policy configurations that ensure adherence to the least-privilege principle.

In this webinar, you will learn:
 •  Best practices for utilizing ChatGPT to accelerate remediation
 •  What’s new in GPT-4 and what this means for cloud security
 •  How Orca leverages AI and GPT-4 in the platform
 •  What’s in store for further AI, ML, and GPT applications in the Orca platform

How To Use ChatGPT & AI in Multi-Cloud Security

Development teams continue to leverage cloud native technologies and deploy applications faster than ever. But, existing security solutions and a plethora of point solutions cause friction between teams and leave even less time for deployment. 

In this webinar, Keith Mokris and Lior Samuni will explain the benefits of shifting security left and share best practices for integrating security across the full development lifecycle, including:
- Scanning container images and IaC templates
- Guardrail capabilities to consider, including how to block builds as part of your workflows
- Creating tight integrations and communication between different applications and teams within your organization

You’ll walk away with detailed recommendations about how to address risks earlier in the software development lifecycle and ship more secure code in production.

Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle

Cyber Security

Cloud Security

Cloud Applications

Cloud Architecture

Application Development

Application Lifecycle Management

Digital Transformation

DevOps

Lifecycle

Software Development

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle

Presented by

About this talk

More from this channel