Name: The Billion Dollar Scam: Business Email Compromise in Healthcare
Start: 2024-07-18T14:55:00Z
End: 2024-07-18T14:55:38.000Z
Location: BrightTALK

We’re on a mission to empower small and medium-sized businesses (SMBs) to protect their endpoints, identities, and employees from today’s growing threat landscape.

We elevate small and medium-sized businesses to a level of threat protection only seen by enterprise organizations. Our platform combines fully managed protection for endpoints, Microsoft 365 identities, and employees, all with the human expertise of our 24/7 Security Operations Center. With Huntress, you can power your threat defense with around-the-clock management, award-winning support, and at a price built for the needs of SMBs.

Let's be real—how many of us learned more history from Hamilton than we ever did in school? Or know how to perform CPR thanks to The Office and the beat of 'Staying Alive'? That's the power of storytelling.

Storytelling is an integral part of human nature; it’s proven to be one of the most effective tools for learning. So why not apply it to something as critical as cybersecurity? 

In this webinar, we’ll showcase the power that storytelling can have in security awareness training to help users understand modern threats and how to identify them. We’ll cover: 
- Why storytelling is such an engaging and effective tool for learners
- How a fully managed solution like Huntress Managed SAT supports your training admins
- A look at fresh capabilities like Phishing Defense Coaching and gamification that make life easier (and safer) for everyone

Join us and see how you can turn cybersecurity training into a story everyone will remember—and actually enjoy.

Storytime with Huntress Managed Security Awareness Training

Every day, we’re bombarded by massive amounts of information. From daily news and stocks, to the latest box scores, keeping up with it all is a full-time job.

Your IT infrastructure is no different. Millions of logs circulate through your IT systems, including firewall data, system logs, and endpoint events to name a few.

Security Information and Event Management, or SIEM for short, was designed to make sense of it all. Centralizing logs is at the heart of what SIEM was meant to do. But does just having a SIEM and organizing your data help if there’s still too much noise to make sense of it all?

Come join us as we explore the origins of SIEM, the challenges it faces today, and how we’ll filter out the noise without compromising security.

In this webinar, we'll dive into:

How SIEM began: Get a deeper understanding of how SIEM started.
Where it went wrong: Dive into the issues legacy SIEM models face.
What needs to happen: Discover why most organizations and MSPs need a different approach to SIEM.
How we’re changing things: We’ve heard what our partners have asked for—we’re breaking down what we’ve come up with as a community to solve the SIEM problem.

Solving the SIEM Problem: A Hard Reset on Legacy Solutions

Ever seen those ROI calculators from MDR providers and thought, "Yeah, right!" Their sky-high costs to replicate their services can be laughable. But while we all need a reality check on the DIY numbers, there's one thing often missed: What's the cost of doing nothing?
We get it—priorities are endless, and security tools are everywhere. So, what happens if we don't sign up with a provider? What if we just roll the dice?
For healthcare providers, the stakes are higher than ever. The risk of doing nothing isn't just a number—it's a game-ender. Join us for a deep dive into real-world attacks on healthcare organizations and see how inaction plays out in harsh reality.
In this webinar, we'll uncover:
Connecting Risk to Reality: See what our Security Operations Data shows when it comes to the success of healthcare attacks
Context is King: Understand the unique healthcare factors that amplify risks.
Cracking the Calculator: Find out the critical inputs for your risk assessment, not just broad calculations.
Risk Made Simple: Get a user-friendly model to present the case of doing nothing to budget authorities.

Making the Financial Case for MDR

According to IBM's 2024 X-Force Threat Intelligence Index, the abuse of valid credentials was the top initial access vector in 2023. With the growing threat of credential theft and session hijacking, cybercriminals are finding new ways to infiltrate organizations of all sizes. 

In this webinar, we’ll introduce Huntress MDR for Microsoft 365’s new Unwanted Access capability, designed to shut down the primary methods hackers use to compromise accounts: session hijacking and credential theft. You’ll learn how our advanced detection and response capabilities can empower you to:

Analyze and organize Microsoft 365 events into actionable insights

Implement Unwanted Access configuration rules to regulate expected and unauthorized VPNs and locations

Learn how escalations flag unknown activity and help our SOC determine if login attempts are legitimate or unauthorized

Shutting Down Session Hijacking and Credential Theft

Have you been looking for a new EDR tool or maybe a managed solution? If so, you probably know that choosing one can be overwhelming—especially if you’re not an expert. We’d like to help with that.
Join Huntress EDR expert Seth Geftic for an EDR and MDR crash course built just for non-experts. They’ll break down the pros and cons of different EDR and MDR solutions in a way that anyone, expert or not, can learn something from.

In this webinar, you’ll learn:
What to look for when choosing an EDR provider
When to consider adding an MDR service on top of your EDR tool
What your optimal combination of EDR and MDR might look like
A quick overview of the differences between EDR, XDR, MDR, NDR, and AV

An Insider's Guide to Choosing an EDR

Join Huntress CFO Marcos Torres and Principle Security Researcher John Hammond to learn about the continuing financial complications following a cyberattack. The misleading understanding behind the thought, “I’ll pay the money, and everything will be fine,” will be debunked as we look further out and explore other cost implications beyond the initial impact, including:

-  Increases in cybersecurity insurance rates
-  Reputational losses
-  The cost of downtime
-  Recovery costs

The Financial Impact of a Threat - 2024

Since 2020, healthcare data breach costs have increased by 53.3%, overtaking the financial sector as the most breached industry. Why has healthcare become such a prime target for cyber bad actors looking to perpetrate BEC scams? And more importantly, what can healthcare do to combat it?

The Billion Dollar Scam: Business Email Compromise (BEC) in Healthcare

Welcome to the identity crisis!

In the case of Microsoft 365, the attack surface is about 345 million identities and counting, making it a tantalizing target for cybercriminals who want to cash in on the relative simplicity of these attacks. 

Let’s step into the attack lab to learn:

- How we can cut off attackers during one of the most critical phases of their attacks: initial access. 
- The high-level landscape of attacks and how they differ from their on-premise analogs. 
- How to identity attacks compared to their predecessors.
- The specifics of some of the most common and dangerous identity attacks that result in account takeover. 
- The detections and mitigations for the attack, paying special attention to the best telemetry sources that allow effective threat hunting against the attack.

Identity Crisis: Combating Microsoft 365 Account Takeovers at Scale

The repercussions of healthcare cyberattacks go well beyond financial fines — these increasingly common incidents endanger patient safety. With a huge attack surface, older technology and valuable PHI, healthcare is a lucrative target for hackers.

Recognizing the vulnerabilities is only step one. Join us for a candid discussion on the evolving landscape of cybersecurity in healthcare. We'll jump into the harsh realities of cyberthreats and their profound impact on patient safety and your organization's well-being. 

You will:

Outline a practical action plan to strengthen your defenses against a range of threats.

Explore insights that can help you navigate challenges and safeguard your institution.

Learn best practices to navigate issues from ransomware to social engineering to data breaches.

Building a practical action plan to protect patients + business

Hackers love the classics, and one of their favorites has evolved: Phishing. And as new tools get added to their arsenal, phishing is only getting more complex, more advanced, and even harder to spot. But you can avoid taking the bait.

Join us for a strategy-packed webinar to learn about some of the most common phishing tactics we’re seeing in the wild. Plus, we’ll be doing a live demo of our newest feature, Phishing Defense Coaching, to show you how you can make your phishing simulations even more impactful.

In this webinar, we’ll cover:

- The different strategies used in today’s phishing landscape
- How the Huntress team turns real-world security observations into training content
- A live demo of Phishing Defense Coaching and our findings so far
- Questions taken from the community

That Phishy Feeling: Learning to Spot Modern Phishing

Once a month, we host Tradecraft Tuesday—a live webinar blending breaking security news, hands-on demonstrations of offensive and defensive security techniques, and much more. 

Led by Huntress founders and members of our threat-hunting team, these sessions pull back the curtain to teach you how hackers hack—and what you can do to stop them.

The M365 Battlefield: Scriptable Offense, Planned Defense

Once a month, we host Tradecraft Tuesday—a live webinar blending breaking security news, hands-on demonstrations of offensive and defensive security techniques, and much more. 

Led by Huntress founders and members of our threat hunting team, these sessions pull back the curtain to teach you how hackers hack—and what you can do to stop them.

Tradecraft Tuesday: 500,000 Phishing Emails - In One Hour

Back in the day, Macs were “safe.” As Windows devices fought off malware, Mac users didn’t have to worry about a thing—at least that’s what the rumor was.

Today, Macs have more than their fair share of malware. And with macOS adoption surging across industries, from the creative arts to finance, the attack surface is expanding and cybercriminals are taking notice.

Join us for a webinar jam-packed with information on the hidden threats, strategies, and solutions you can use to secure your macOS systems. We’ll cover how macOS-specific malware is on the rise, debunk the myths surrounding macOS security, and reveal the dangers of misplaced confidence in your favorite OS.

Secure your spot and explore:

- The lightning-fast speed of macOS-specific threats and the hackers behind them
- Why relying solely on native macOS defenses is a risky bet
- Real-life incidents where unsuspecting companies fell victim
- How to distinguish true cybersecurity solutions from the pretenders
- We’ll also uncover practical strategies to combat the growing macOS threats and stop hackers in their tracks.

Stop Mac Hacks in Their Tracks

The repercussions of healthcare cyberattacks go well beyond financial fines — these increasingly common incidents endanger patient safety. With a huge attack surface, older technology and valuable PHI, healthcare is a lucrative target for hackers.

Recognizing the vulnerabilities is only step one. Join us for a candid discussion on the evolving landscape of cybersecurity in healthcare. We'll jump into the harsh realities of cyberthreats and their profound impact on patient safety and your organization's well-being. 

You will:
- Outline a practical action plan to strengthen your defenses against a range of threats.
- Explore insights that can help you navigate challenges and safeguard your institution.
- Learn best practices to navigate issues from ransomware to social engineering to data breaches.

Building a Practical Action Plan to Protect Patients + Business

No need to feel lonely in February, bad actors love everyone! This fireside chat will highlight tales of near misses from MSPs who were able to protect their customers from 'Mr. Wrong."

Fireside Chat: Bad Actors_3 Everyone (Even You)

Who is responsible for cybersecurity in your organization?  Cultivating a security first culture can help create a strong first line of defense, but encouraging a proactive and vigilant approach requires effort. Join this panel as we talk about building awareness, educating employees, and integrating security considerations in everyday workflows to adopt a security-first culture.

Fireside Chat: Building a Security First Culture

The Billion Dollar Scam: Business Email Compromise in Healthcare

Security Awareness

Detection and Response

Business Email Compromise

Email Security

ITDR

Cyber Incident Response

Cyber Attacks

Identity Theft

Social Engineering

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Billion Dollar Scam: Business Email Compromise in Healthcare

Presented by

About this talk

Huntress