Name: Kaspersky SOC in 2025: Key Observations and Findings
Start: 2025-06-27T04:25:00Z
End: 2025-06-27T04:25:19.000Z
Location: BrightTALK

Modern cars are no longer just a means of transportation. Their built-in services can manage everything for drivers and passengers alike from seat heating, to using voice-controlled GPS to find a coffee, or make theater ticket reservations. Along with the development of consumer services, driver safety services have also been developed – distance sensors to neighboring cars, speed limit recognition and the eCall safety system, to name a few.

These hi-tech solutions designed to improve the user experience and make your journey safer, are architecturally based on algorithms and technologies that in themselves carry threats to information security. The wider the user experience, the wider the attack surface for an attacker. 

In this webcast, Cyberthreats to modern automotive industry, Sergey Anufrienko and Alexander Kozlov, security researchers at Kaspersky ICS CERT will discuss:

• Threat landscape: how has changed and evolved over the last 10 years
• Top threats the automotive industry is exposed to
• Standards of automotive security
• Trends in automotive security

Cyberthreats to modern automotive industry

From web portals and email gateways to cloud platforms and local storage, modern businesses depend on a multi-layered IT environment. But each layer can also become a potential entry point for cyberthreats. That’s why having a unified, robust security solution across your entire infrastructure is critical.

Kaspersky Scan Engine is designed precisely for this challenge. Whether your systems are on-premises, in the cloud, or somewhere in between, it delivers powerful threat detection wherever you need it—ensuring consistent protection across your environment.

Join our upcoming live webinar to go beyond product specs and see how leading organizations are using Scan Engine in real-world scenarios. We’ll walk through integration examples, explore common deployment patterns, and share success stories that show how seamlessly the solution fits into complex ecosystems.

In this session, you’ll learn:

- How Scan Engine fits into today’s diverse IT architectures
- Ways to integrate it with tools you already use
- Real-life case studies showing its flexibility and effectiveness

Discover how one powerful engine can secure every part of your digital landscape.

Kaspersky Scan Engine Built to integrate, engineered to protect

In the ever-evolving threat landscape of cybersecurity, true expertise is the key of robust protection. In 2023 alone, Kaspersky products thwarted over 437 million cyber attacks, while detected 411,000 new malicious files daily. What powers these formidable defenses?

Join Oleg Gorobets, Security Evangelist at Kaspersky, and Alexander Liskin, Head of Kaspersky's Threat Research, as they unveil the inner workings of Kaspersky’s five Centres of Expertise (Threat Research, Global Research and Analysis Team, AI Research, Security Services and ICS CERT). Discover their pivotal roles in safeguarding businesses and individuals, and explore real-world case studies demonstrating the impact of Kaspersky's expertise in defending against most complex cyber threats.

Whether you're a cybersecurity professional, a decision-maker, or simply interested in the dynamics of cyber defense, this webinar will provide valuable insights and practical knowledge.

The Cybersecurity Buyer's Dilemma Hype vs (True) Expertise

Cybercriminals tend to be secretive and act without disclosing their identity. However, when it comes to ransomware negotiations, the victim and the attacker have to “meet” face-to-face. Moreover, by the time the two sides meet to discuss the price, the attackers have already gained control of a company’s data or network – that puts the victim in a weak position.

What is it like to negotiate with someone who is trying hard to get a ransom whilst remaining in the dark? What can you expect from such negotiations? In this webcast, Insights to Ransomware Tactics and Negotiation, Marc Rivero, senior security researcher, GReAT at Kaspersky will observe various tactics used by ransomware groups, explain how the companies are trying to negotiate with these cybercriminals, and what outcome such negotiations may have.

- What Ransomware as a service (RaaS) model is
- What a data leak portal in RaaS terms is
- About ransomware negotiations: stages, means of communication
- What to do if you have been contacted by a ransomware group

Insights to Ransomware Tactics and Negotiation

Despite all the technological advancements, human factor remains one of the most significant vulnerabilities – as the evolution of the threat landscape is less about sophisticated code and more about ingenious scenarios. The problem is even more acute as there is a significant shortage of qualified cybersecurity specialists in the market. Our latest insightful webinar explores the critical role of human factors in cybersecurity and share strategies to mitigate these risks effectively.

Join Kaspersky expert Oleg Gorobets, as he shares valuable insights and practical advice on enhancing your organization’s defenses and will delve into the following topics:

● Human vulnerabilities: the most common non-IT and IT/InfoSec professionals’ errors and intentional information security policy violations that led to security breaches and how they can be exploited by cybercriminals;
● The impact of InfoSec professionals’ shortage on an organization’s cybersecurity;
● Monotonous work and burnout of InfoSec professionals as the obstacles to reliable company's cyber protection;
● Breakdown of common cyber incidents that occurred over the last two years due to human factors in companies around the world;
● Finding a fitting solution: attention turns to tech and automation.

Don’t miss this opportunity to enhance your cybersecurity knowledge and learn how to effectively mitigate human risks!

Cybersecurity's human factor – more than an unpatched vulnerability

In today’s digital world, securing your customers’ smartphones is absolutely essential. Malware infections, scams, and financial fraud erode customer trust.

Join this webinar Fortify Your Mobile Protection: Building Customer Trust with Advanced Security to discover how the Kaspersky Mobile Security SDK provides powerful protection. We will demonstrate key security features to safeguard user data and stop scams. You will also see how our partners from diverse industries successfully integrate Kaspersky’s technology with their own apps.

Learn to build a truly secure application that your customers can rely on to keep their devices safe, strengthening both security and brand loyalty.

Fortify Your Mobile Protection Building Customer Trust with Advanced Security

Hardly a day goes by without yet another organisation falling prey to a cyberattack or data breach that has led to reputational and financial losses. The security landscape will get even more tumultuous, with APAC organisations expected to continue facing tough security challenges arising from the shortage of talent, new cloud vulnerabilities and the proliferation of surreptitious malware. Against this backdrop, security operations have become more challenging, driving organisations to consider new approaches that improve the timeliness and accuracy of threat detection while automating response actions. 

Hear from the panel experts in Cybersecurity Frontiers: Crafting Future-Ready Defenses in a Connected World as the panellist shares how you can build a resilient culture and prepare for future challenges.

Cybersecurity Frontiers: Crafting Future-Ready Defenses in a Connected World

With the rapid expansion of cloud adoption, security teams are encountering ever-more intricate challenges. While securing the cloud is a critical first step, the focus must now extend to safeguarding workloads. Modern applications and services, frequently developed using containerized solutions, provide developers with enhanced efficiency—yet they introduce significant security complexities. To mitigate these threats, a holistic strategy is essential to protect both cloud environments and the workloads they host.

Mark your calendar for July 23 and join Anton Rusakov-Rudenko, Kaspersky’s Cloud & Network Security Expert, in an exclusive webinar where he will discuss:

• Global cloud migration trends backed by key statistics;
• Major security hurdles in cloud and container-based ecosystems;
• A comparison between emerging DevSecOps methodologies and conventional security models;
• How Kaspersky has advanced cloud workload protection over time;
• A live demonstration of Kaspersky Cloud Workload Security.

Seize this chance to acquire actionable strategies and expert knowledge for strengthening your cloud security!

Kaspersky’s way of cloud workload protection

In the past year, Kaspersky blocked close to 900 million phishing attempts. So, it’s not an overstatement to say their team is made up of experts on email-based threats.

In this webinar, you can hear from 3 of those experts, including Spam Analyst, Anna Lazaricheva, about the latest developments in email security. The group will cover:
• Exclusive highlights from the Kaspersky 2024 Spam and Phishing Report
• Modern email attack tactics 
• How, with advanced detection technologies and threat intelligence, you can identify even the most evasive threats
• Proven, practical defense strategies, including to bolster your email protection with Kaspersky Security for Mail Server 

Whether you’re a cybersecurity expert, IT decision-maker, or business leader, this session will equip you with the latest insights and tools to secure your email environment in today’s threat landscape.

Email Security: Lessons from Blocking 900 Million Phishing Attempts

Cybercriminals tend to be secretive and act without disclosing their identity. However, when it comes to ransomware negotiations, the victim and the attacker have to “meet” face-to-face. Moreover, by the time the two sides meet to discuss the price, the attackers have already gained control of a company’s data or network – that puts the victim in a weak position.

What does it like to negotiate with someone who is trying hard to get a ransom whilst remaining in the dark? What can you expect from such negotiations? In this webcast, Marc Rivero, senior security researcher, GReAT at Kaspersky will observe various tactics used by ransomware groups, explain how the companies are trying to negotiate with these cybercriminals, and what outcome such negotiations may have.

In this webinar, you will learn:
- What Ransomware as a service (RaaS) model is
- What a data leak portal in RaaS terms is
- About ransomware negotiations: stages, means of communication
- What to do if you have been reached by a ransomware group
- Q&A session

Ransomware groups negotiation tactics: what you need to know

Join us for an in-depth webinar that redefines how organizations approach threat detection in cybersecurity. Although detection remains the cornerstone of Security Operations Centers (SOCs), the absence of a formalized cybersecurity program often results in inefficiencies and missed opportunities for optimization.

This webinar will guide you through:
• Developing a structured detection engineering program to enhance efficiency (e.g., engineering lifecycle, best practices, the importance of data modeling, and more)
• Building an optimal team structure to manage and operationalize detections effectively.
• Identifying and leveraging key metrics to measure program success and ensure continuous improvement.

Led by Sarim Rafiq Uddin, a security services expert from Kaspersky SOC consulting, this session is ideal for cybersecurity professionals and SOC leaders seeking to elevate their threat detection capabilities. Don't miss this opportunity to transform your approach from ad-hoc processes to a comprehensive, strategic program.

From chaos to control: streamlining detection engineering in Security Operation Centers

As AI systems based on large language models become more powerful and widespread, more cybersecurity challenges emerge. From jailbreaks to indirect prompt injections, they are vulnerable to a wide array of LLM-specific threats. However, all these problems can be boiled down to one single issue: LLMs are probabilistic algorithms that are inherently unreliable, just like any other ML system. Does it mean they cannot be useful? Absolutely not! In this talk, we will discuss the challenges of secure and reliable LLM-based applications and the way to make them safer and more aligned with your business goals.

Unreliable AI: Addressing the Cybersecurity Risks of LLM-Based System

• Explore the power of Extended Detection and Response (XDR) as a proactive defense strategy against evolving cyber threats.
• Discover how XDR can fortify your defense mechanisms and enhance your cybersecurity posture.

Defend with XDR Strategies

Join us for an exclusive deep dive into the key insights from Kaspersky’s 2024 Incident Response Analyst Report! This webinar will unpack the most pressing cyber threats of the past year, drawing from real-world investigations and expert analysis.

You’ll gain a front-row seat to the latest trends in cyberattacks, including the most common attack vectors, high-risk regions, and industry-specific threats. Our expert speaker will break down critical data on attack timelines, adversarial techniques, and emerging tools, while offering practical strategies to strengthen your organization’s defenses.

Whether you’re an incident response specialist, a cybersecurity professional, or simply keen to stay ahead of evolving threats, this session will arm you with actionable knowledge to anticipate, mitigate, and respond to cyber incidents effectively.

Save the date: July 9th—don’t miss this opportunity to stay at the forefront of incident response intelligence!

In-depth analysis of cyberattacks: key findings from Kaspersky's Incident Response report

As cyber threats continue to evolve, mastering the art of digital forensics investigation is an essential for investigating security incidents and safeguarding critical systems. This webinar will focus on Windows digital forensics, offering an overview of the tools and techniques used to uncover digital evidence on Windows systems.

During the session, we will explore the key aspects of Windows forensics, including the major stages of the forensics process, beside a technical session on analysing Windows artifacts to reveal traces of cyber attack.

Additionally, we will provide an overview of our newly released online training course on Windows Digital Forensics. This course covers topics such as methods of obtaining diverse digital evidence, in-depth analysis of browsers and email histories, and the use of timestamps to restore incident scenarios, making it a valuable resource for cybersecurity professionals aiming to enhance their forensic analysis skills.

On the path to reveal the mystery with Digital Forensics

Modern cars employ a wide array of communication interfaces. Some, like Bluetooth and Wi-Fi, directly engage users, while others, such as RDS and GPS, provide user-facing services, and still others, like CAN and Ethernet buses, ensure the proper functioning of the car's internal systems. These interfaces contribute to the extensive flow of data within the car, forming its data flow graph. Within this graph, they serve as the "entry points" for malicious attackers seeking access to the vehicle. However, tampering with them does not necessarily lead to the loss of the car's security features.

In this webcast, cybersecurity experts, Alexander Kozlov and Sergey Anufrienko from Kaspersky's ICS CERT, will delve into the automotive security. Together, we will examine:

- We'll explore which interfaces attackers tend to favor when targeting cars and the reasons behind their choices.
- We'll focus on the techniques attackers employ when conducting attacks through specific interfaces, with an emphasis on classical techniques.
- We'll discuss how to defend against these threats and evaluate the feasibility of reducing associated risks.

Join us for this webinar, where we'll equip you with the knowledge and tools to not only comprehend the ever-evolving landscape of automotive security but also to safeguard your modern vehicle effectively.

Overview of modern car compromise techniques and methods of protection

The threat landscape is evolving rapidly—and not to your advantage.

According to the latest Kaspersky MDR Analyst Report, one in four companies faced advanced persistent threats (APTs) in 2024, with these attacks making up over 43% of all high-severity cybersecurity incidents—a staggering 74% increase in just one year.

But this isn’t just about statistics or a generic rundown of threats.

On August 14, join Kaspersky experts as they break down the operations of real-world APT groups. You’ll gain insights into attacker methodologies, explore the tactics they employ, and discover actionable strategies to detect and defend against them.

We’ll also showcase how the newest iteration of the Kaspersky Anti Targeted Attack (KATA) platform—now featuring integrated Network Detection and Response (NDR)—helps identify and neutralize advanced threats before they inflict damage.

Key takeaways include:

• How APTs breach networks—and early detection strategies to stop them;
• The latest tactics, techniques, and procedures (TTPs) used by today’s most sophisticated threat actors;
• Why conventional security measures fall short—and how KATA 7.0 closes those gaps.

This isn’t theoretical. It’s a real-time analysis of current threats—and how your organization can fight back.

What your security stack isn't catching: Identifying hidden threats

The sensitive data stolen from companies during a cyberattack often ends up on darknet markets. With the rise of the cybercrime as a service business model, we observe that not only data obtained from attacks is for sale but also for the information necessary to organize that attack.

Once an attacker gains access to the infrastructure of an organization, they can then sell that access to other advanced cybercriminals, such as ransomware operators. The price for accessing potential victims’ systems is relatively inexpensive when compared to the possible damage to the targeted business. In fact, the average cost for access to a company’s systems lies between the range from $2000 to $4000. Meanwhile, such attacks result in significant financial and reputational losses to the attacked organization and may even cause suspension of work and disruption of business processes. SMBs and enterprises are both key targets of such attacks.

Yuliya Novikova and Sergey Shcherbel, security experts at Kaspersky, shed light on how a company’s data and the information on their systems is sold on darknet markets.
In this webinar you will learn:
- Which types of company data are most widespread on dark markets
- Which criteria cybercriminals use to evaluate the price for organization’s data
- How to keep your data protected

Dark market for corporate data: how cybercriminals sell access to your company

In today’s rapidly evolving cybersecurity landscape, organizations face an ever-growing array of threats, making vulnerability management a cornerstone of any effective security strategy. This presentation will introduce Security Vision Next Generation VM - a comprehensive vulnerability management solution that serves as an integral component of the NG SOC ecosystem. We will explore how this innovative product helps organizations anticipate and block attacks before they happen, giving them better control over their risks.

Staying Ahead of Threats: Innovative Approach to Vulnerability Management

The practical use case demonstrating how Kaspersky SOC technologies work together to improve incident handling and how CTI supports better decision-making in cybersecurity operations.

Advance Threats Detection and Response with Kaspersky Solutions

AI is the new tool in our toolbox—and in adversaries’ arsenal alike. From supply chain attacks on machine learning engineers to risks of agentic AI, this new technology forms a threat landscape of its own. In this talk, we will look into today’s most pressing threats, as well as the risks of the systems to come.

AI-Related Threat Landscape: 2025 and Beyond

As the threat landscape continues to evolve in complexity and scale, Chief Information Security Officers (CISOs) are re-evaluating their Security Operations Center (SOC) strategies to stay ahead of advanced cyber threats. This topic explores the top priorities driving SOC investments and innovations from a CISO’s perspective, including the growing emphasis on AI-driven threat detection, SOAR integration, cloud-native security, and proactive threat hunting. It also highlights the increasing need for unified visibility, automation to mitigate talent shortages, and outcome-based security metrics. The study provides actionable insights into how CISOs are balancing technology, talent, and process improvements to build resilient, agile, and intelligence-driven SOCs.

Top Priorities Shaping SOC Investments & Innovations: A CISO Perspective

In this interactive panel discussion, industry experts will share innovative approaches to threat intelligence and proactive cybersecurity based on real world experience. This multi-faceted panel - with a mix of end-user, industry analyst, partner and technical expertise - has been formed to provide attendees with practical strategies to achieve proactive cyber security.

Panel Beyond the Perimeter: Practical Strategies to Leverage Threat Intelligence for Proactive Cybersecurity

Cybersecurity teams are overwhelmed. Every day brings a flood of alerts, forcing analysts to react to threats instead of anticipating them. But what if we could break free from this endless firefighting cycle? What if security operations could be smarter, more efficient, and more strategic?

We’ll explore how SOAR (Security Orchestration, Automation, and Response) helps organizations shift from reactive incident response to a proactive security strategy:
• Why constant firefighting is unsustainable and leads to analyst burnout.
• How automation and orchestration free up security teams for high-value tasks.
• How a strategic, big-picture approach improves threat detection and response.
• Real-world examples of organizations transforming their SOC with SOAR.

The future of cybersecurity isn’t about reacting faster and not needing to react at all, it's about effective team work, helicopter view and modern tools.

Less Firefighting, More Strategy: A Smarter Approach to Security Operations

Find out how a range of solutions can protect various elements of IT infrastructure from regular to advance threats. A platform for Security Operations Management, Cyber Threat Intelligence in different formats, integrated solutions for protecting OT segment, security assessment and consulting services, and many others.

Kaspersky enterprise solutions in action

In this keynote address, we will explore the progression of artificial intelligence on business transformation today, and its impact on cyber security strategy. As AI continues to revolutionize various industries with new business capabilities, it simultaneously introduces new challenges for cyber defense. This analyst session will delve into the latest trends in AI transformation and their implications for cyber security strategies involving protection, detection and response.

Redefining Cyber Security in the Age of AI Transformation: Frost & Sullivan industry analysis

This presentation will introduce the Next-Generation TIP based on MITRE ATT&CK connections. The new approach is based on Kaspersky Lab's streaming telemetry, which allows to receive hundreds of thousands of fresh TTPs daily and monitor fresh data about adversaries.

Know Your Adversary with the Threat Landscape

APAC Cyber Insights 2025

Global SOC incident statistics reflect the threat landscape around the world. We will analyze interesting observations from 2024 incident statistics and make a forecast for threats in 2025.

Kaspersky SOC in 2025: Key Observations and Findings

Threat Detection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Kaspersky SOC in 2025: Key Observations and Findings

Presented by

About this talk

Kaspersky APAC