Name: Troy Hunt on ATO: Account Takeovers as the Hidden Threat
Start: 2022-10-18T15:00:00Z
End: 2022-10-18T15:59:53.000Z
Location: BrightTALK
Rating: 0

Learn more about new approaches to email security to stop advanced business email compromise attacks that bypass traditional, threat intelligence-based email security solutions.

Unlike legacy email security solutions, the Abnormal Security platform uses an innovative AI-based approach that deeply understands the people, relationships, and business processes to stop the most sophisticated and costly attacks.

When Florida Crystals Corporation, a prominent sugarcane company, consistently saw advanced email attacks slip through its existing defenses, the company’s security team knew it was time for a different approach. The combination of a secure email gateway (SEG) and native cloud email security proved inadequate against today’s advanced threats as well as the modern security team’s needs for investigation and reporting. The company chose to move away from the traditional SEG to Abnormal and improved its security while reducing email security costs by 40%. 

Join Florida Crystals’ CISO Ben Field at this live webinar as he shares:
- The lessons learned associated with Florida Crystal’s email security architecture
- The types of email attacks faced by the company’s global workforce
- How they stopped a BEC attack in progress during their Abnormal POV 
- The impact Abnormal has made on the company’s security and security team’s productivity

Join our conversation with Ben, a seasoned cybersecurity professional, as he explores what led him to move Florida Crystals beyond the traditional approach to email security.

Bucking Tradition:How Florida Crystals Ditched the SEG to Improve Email Security

As a leading insurance broker and consultant with a global reach and numerous acquisitions each year, NFP understands the critical importance of email security. However, the complexity of managing email threats, while integrating newly acquired companies, requires a new approach that dramatically simplifies administration, eliminates inefficient spend, and effectively stops advanced threats.

In this must-attend session, you’ll discover:
● What led NFP to reevaluate their legacy tools and consider replacing the SEG
● How the team is mitigating financial losses from advanced email threats
● Why they’re focused on keeping graymail out of executives' inboxes
● The process they use to integrate newly acquired companies with ease
● Why they turned to Abnormal to simplify and improve their email security

Don't miss the chance to hear directly from James Fritz, an industry expert with years of experience, as he shares his journey and offers recommendations for security teams seeking to move beyond the limitations of the SEG.

Register today!

Rethinking the SEG: How NFP Improved Threat Detection and Reduced Spend

Protecting your collaboration apps, streamlining deployment, and expanding data ingestion to stop attacks now and in the future.

While email remains the most common path into an organization, cybercriminals are steadily shifting their tactics and targeting additional entry points. Recent multi-channel attacks illustrate how attackers are moving laterally throughout the environment to gain access to email and other sensitive data through Slack, Teams, and other applications. 

We’re excited to unveil a series of new enhancements to Abnormal’s platform that will empower security teams to protect more, spend less, and secure the future. 

Join Product Management leaders Nicole Jiang and Vineet Edupaganti for this recap of all things new with Abnormal, where we’ll show you:  

- Three new products to detect suspicious user behavior, changes to user privileges, and malicious messages across Slack, Zoom, and Microsoft Teams
- Additional data ingestion capabilities so you can ingest signals from additional applications such as Okta and CrowdStrike
- The Abnormal App Store, a self-service marketplace within the Abnormal Portal 

This live event includes opportunities for Q&A so you can truly understand how Abnormal can help you better protect your cloud email. 

Register now and join us on May 18th!

Product Chat: Unpacking Abnormal's Latest Launch

As one of the world’s largest lodging franchisors, Choice Hotels has a duty to protect the data of its 50 million members, guests, and employees. Hospitality, like many industries, is targeted for advanced email attacks—many of which easily bypassed many different SEGs and other traditional security tools.

Threat actors launched phishing campaigns as well as invoice and payroll fraud attacks in attempts to exploit employees and vendors for financial gain and access to valuable personal data. The good news is that since Choice Hotels partnered with Abnormal, they’ve seen a large reduction in these sorts of attacks.

Join Choice Hotel’s CISO Jason Stead and VP of Engineering Jason Simpson as they recount their Abnormal journey on April 20. 

Register for the live webinar to discover:

- How Choice Hotels realized advanced attacks were bypassing their legacy email security solution
- How they quickly remediated BEC and vendor email compromise attacks
- How their security teams reclaimed time and resources for proactive security management
- The benefits of Abnormal VendorBase™ for combating supply chain fraud
- Best practices for improving security in the hospitality industry

Don’t miss this exciting session and the opportunity to learn firsthand from industry experts!

Register today.

Abnormal Demo Day with Choice Hotels

Wiz. Rubrik. Noname. Abnormal. You know them as security companies that were created to provide superior cybersecurity protection against the most advanced attacks for their customers. 

But how do their security leaders keep their own organizations protected from the huge number of threats targeting them? Join us for our CISO Fireside Chat series, where our four security experts will discuss: 

- What types of threats are targeting their organizations (and their customers) today
- Which emerging threats are top of mind and what keeps them awake at night
- How they prioritize the never-ending list of tools needed to protect their companies
- Why they are turning to automation in the midst of the cybersecurity skills shortage

Moderated by security expert Graham Cluley, this panel discussion will provide viewers with real-world insights into the top problems for leading security companies and give advice for how to prevent the attacks targeting organizations worldwide.

Register today!

How 4 Cybersecurity Companies Protect Against Cloud Vulnerabilities

Cloud email platforms are a cornerstone of an organization’s digital environment. The ability to integrate mission-critical third-party applications and improve the speed at which employees can communicate and collaborate can greatly improve organizational productivity. 

The drawback, however, is with more robust, complex cloud email platforms comes the potential for security gaps. Threat actors can exploit lax and misconfigured security policies to bypass MFA and abuse API integrations in order to breach cloud email platforms in ways that are difficult to detect.

Security posture management is more important than ever before. Join us for this fireside chat where Acrisure and Abnormal Security will discuss the problems effective posture management solves for email security, including: 

- Addressing the Rise of Email Platform Attacks
- Solving the Configuration Visibility Problem Security Teams Often Face
- Enhancing Investigation by Enriching Security Event Data

And doing it all without needing to add more budget or headcount!

Register today.


***Free Trials of Security Posture Management are now available for customers, sign up now.***

Abnormal Demo Day: Why Security Posture Management is Crucial for Cloud Email

Across the millions of mailboxes monitored by Abnormal, we have yet to see a company that has not been targeted by an attack. Our research shows that employees are becoming the fastest-growing target of advanced attacks. Employees typically open 28% of BEC attacks and also fail to report 98% of all known attacks. While this is evidence of a continuing rise in business email compromise, today’s threat landscape has forced most organizations to take a hard look at their security strategy. 

For this Demo Day, we’ll dive into the Abnormal platform and highlight the top five helpful tips that our customers have adopted to successfully mitigate these modern-day attacks. 

Register now and get the insider scoop on:

- Preventing account takeover: See how Abnormal can detect potentially compromised accounts and prevent them from being used to launch additional attacks.
- Automating user-reported emails: Are your security teams bombarded with managing “non-critical” emails? Save time (and headaches) by automating the user-reported email process.
- Improving employee productivity: Abnormal has an adaptive approach to managing spam or graymail and increasing efficiency while also improving employee productivity (executives included!).
- Curbing supply chain attacks: Too many vendors with too little coverage? There’s a better way to recognize an attack from a compromised vendor account.
- Stopping ransomware, everywhere: Discover how launching Abnormal’s behavioral AI baselines good behavior and detects anomalies to reduce ransomware.

Save your spot for this “lessons learned” session today!

Abnormal Demo Day: Top 5 Ways Abnormal Secures Your Email Environment

As organizations implement more advanced security tools, attackers have changed tactics. The email attacks of today are not what we saw a decade ago—or even last year. In this session, Crane Hassold of Abnormal Security will:

 •  Provide an overview of five types of email attacks recently seen by his team
•  Explain how his team engages with these attackers to learn about their methods
•  Give insight into what cybersecurity professionals can do to stop them

Using real-world examples from Abnormal Intelligence, this session provides a short overview of what to expect moving forward and how to stop these new-look emails in their tracks

5 Email Attacks to Watch For: How Threat Actors Are Targeting You

As a major regional transit provider serving about 200,000 customers daily, AC Transit must operate efficiently. To do so, they must  protect employees and partners from sophisticated email-borne attacks. 

Join this online event to see how they do it. Tas Jalali, Head of Cyber Security at AC Transit will speak with Abnormal about how he’s moving his security strategy forward in the new year. He’ll share his experience with: 

* Identifying email security solutions and judging their success. 
* Top ongoing account takeover attacks in motion and quickly remediating accounts.
* Improving executive productivity by filtering away time-wasting graymail messages.
* Plus, his tips on what they should focus on in 2023. 

Register today!

If you’re interested but unable to make it, please register, and we will send you a recording after the event!

Abnormal Demo Day: AC Transit Moves Security Forward with Abnormal

Abnormal Demo Day: AC Transit Moves [Webinar Recording]

Cyber threats continue to rise year over year and 2022 was no exception. In fact, cybersecurity remains a top priority for many organizations as increasingly sophisticated security breaches continue to make headlines. Now more than ever, companies are seeking innovative security solutions to protect their sensitive data.

Abnormal Security continues to lead the way, developing new features and capabilities to deliver the security that your organization, employees, customers, and supply chain need and deserve. 

Join us, as we recap the key updates and releases Abnormal delivered in 2022, from technical enhancements to entirely new solutions and partnerships. Some topics we'll cover include:

* Email Productivity, an add-on module that helps end-users and administrators manage graymail messages.   
* Three Knowledge Bases and Security Posture Management, an add-on to increase visibility into misconfigurations.
* Abnormal Intelligence, a go-to resource for expert insights into emerging cyber threats and email attack trends.

...as well as insightful customer feedback and lessons learned directly from the Abnormal community.

Register now to hear about our year's incredible highlights!

Abnormal Demo Day: A Red-Hot Recap of 2022

No matter how big your security operations team is, your employees are likely overwhelmed. There are hundreds (or thousands) of user-reported threats coming in every day, and the security of your organization depends on them prioritizing the right things.

Which tasks will help to mitigate risk the most? And how do they know what to focus on? 

Join Acrisure and Abnormal to hear how organizations are preparing their security operations team for new priorities in the new year. We’ll answer questions including: 

* What types of tasks take priority for your team, and what will always get deprioritized? 
* How do you respond to new attacks quickly and accurately? 
* What have you done to scale efficiency without increasing headcount? 
* And where do you see the SOC moving? What new roles are on the horizon? 

Register today!

A SOCcessful Team: How to Make Your Security Operations More Efficient

From the Nigerian Prince scams of late 1990s to the sophisticated invoice fraud of today, one thing remains the same: attackers know how to take advantage of human emotions. Whether the goal is to steal thousands from your Grandma Sue or millions from a tech giant like Google, social engineering tactics typically play a role. 

The closing session of Vision 2023 features two well-known hackers who are both intimately familiar with how social engineering can be used for evil. 

Join this session to hear from Rachel Tobac and James Linton as they talk about: 

* How they became successful hackers, with stories about their most notorious attacks 
* What information hackers can uncover, both on the impersonated victim and the target, to run their attacks 
* What security leaders can do to better protect their employees and their organizations
* And how the social engineering landscape is changing as we all become a little more aware of the threat

Hacking with Hackers: Uncovering the Human Element of Cybercrime

The 2013 Internet Crime Complaint Report released by the FBI didn’t even mention business email compromise. A year later it was the second most financially-devastating crime and starting in 2015, it took the top spot. Each year since, it has continued to outpace itself— accounting for $2.4 billion in losses last year.

Despite increases in security tools and awareness programs, these impersonation attacks are expected to grow again this year. And likely next year too. So what do we do?

In this session, Stephen Doughtery from the Secret Service will speak with Abnormal about:
* How threat actors continue to change their tactics to trick end users
* What new threats are emerging across email and other vectors
* Why business email compromise is still so successful
* And what organizations need to prevent these attacks from landing in their inboxes

The Art of the (Im)possible: Overcoming Business Email Compromise

Business email compromise is still the leading threat to organizations, and traditional tools simply can’t stop these attacks. Cyberattacks are becoming more advanced as cybercriminals find new ways around existing defenses—working to stay one step ahead of the security tools put in place to stop them. 

How can organizations better protect their users across the entire attack chain? And why does email security play such a large role? 

Join this session with speakers from Microsoft and Abnormal to hear: 
* Microsoft 365 is the most popular email platform on the market, it is a prime target for attackers
* How Microsoft’s comprehensive set of security services can prevent threats
* And why you may want additional layers of security to better protect your environment from the ever-evolving BEC threat 
 
With speakers from both Microsoft and Abnormal, this session will provide you with a practical understanding of how to better protect your Microsoft 365 users from the  increasingly sophisticated email attacks.

Protecting Your Microsoft 365 Environment from BEC and More

Lateral phishing. Invoice fraud. Payroll diversion. These threats have plagued us for years, but we’ve fortunately discovered how to manage the risk with new tools and security awareness programs. 

The next challenge is the one we’re not prepared for, as cybercriminals shift their tactics to bypass existing systems and take advantage of humans. Join us for this CISO session where our panelists will discuss topics including: 

* How their organizations have successfully mitigated threats to date
* Which threats they are seeing with increasing frequency 
* Where they are shifting their security practices leading into the new year
* And what other CISOs can do to successfully protect their own organizations, now and in the future

Preparing for the Threats of the Future: CISO Concerns for 2023

Known as the subject of Steven Spielberg’s Catch Me If You Can, Frank Abagnale committed check forgery in his early years while pretending to be a Pan Am pilot, a doctor, a teacher, and an attorney. Abagnale was eventually caught by the FBI and served five years in prison in France, Sweden, and the United States.  
 
Now a private consultant for enterprises worldwide, Abagnale uses his personal experience to provide deep insight into the inner thoughts of cybercriminals and how they run their schemes. During this opening keynote for Vision 2023, he’ll share: 

* Why some of the same tricks that worked three decades ago are still working today
* How scammers are shifting their tactics to be more successful in the modern age
* New scams you can expect to see in the coming year
* And why stopping these attacks is so important to your business
 
The FBI and more than 14,000 financial institutions, corporations and government agencies around the world have worked with Frank Abagnale to understand how to better prevent fraud. Don’t miss this chance to hear from him live.

Cybercrime, Identity Theft and Scams: Tips for Staying One Step Ahead in 2023

As more companies adopt cloud email solutions, one thing is certain—they require a cloud-based email security platform that can respond not only to the volume, but also the sophistication of today’s advanced attacks. Without it, companies that still rely on legacy tools and architecture, secure email gateways, or even inexperienced security teams, will always be playing catch up to cybercriminals.    

Noah Wallace, Director of InfoSec at Progress Residential, fully understood this dilemma when he partnered with Abnormal. For him, the immediate benefits of ‘saving time’ could not be overstated: from Abuse Mailbox Automation to threat analysis, Abnormal  gave Noah and his team time back to their day to focus on more critical matters.

Join Noah at Abnormal Demo Day on November 17 where you’ll learn the details behind his success, specifically:

* The importance of text analysis and why it is useful 
* Why partnering with Abnormal is critical to making the platform better
* How he leverages Abnormal as a community-based tool

Don’t miss this exciting session from a security leader on the front lines!

Register now.

Abnormal Demo Day with Progress Residential, a Study in Security Success

The average cost of a data breach is now $4.24 million. And 20% of all breaches are a result of compromised credentials. What makes matters worse is that it takes an average of 250 days to realize that the compromise has even occurred, and another 91 days to contain the breach.

It’s clear that account takeovers pose a significant risk to organizations and their employees. To learn more about this risk and how to best avoid it, join us for a webinar with Troy Hunt, the brains behind HaveIBeenPwned.com. 

He’ll sit down with Abnormal Security CISO Mike Britton to chat about questions including: 
• How do account takeovers occur, both for individuals and organizations?
• What can cybercriminals do once they gain access to even one email account?
• Why does the number of compromises continue to grow, despite increased security measures?
• What can you do to prevent your organization from becoming a victim of the next data breach?

And much more. With key insights from an expert in compromised credentials, you won’t want to miss this session in the Modern Email Attacks series.

Troy Hunt on ATO: Account Takeovers as the Hidden Threat

Breach Detection

Breach Prevention

Cyber Attacks

Cyber Defence

Cyber Crime

Attack Vectors

Security

Automation

breach

cyber

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Troy Hunt on ATO: Account Takeovers as the Hidden Threat

Presented by

About this talk

More from this channel