Name: Threat Intelligence Today: Securing Endpoints Against Malware
Start: 2022-07-19T19:00:00Z
End: 2022-07-19T19:00:45.000Z
Location: BrightTALK
Rating: 4

Built on our decade plus of experience with malware detection and remediation, ThreatDown (formerly known as Malwarebytes for Business) offers best-in-class endpoint security solutions designed to protect organizations. 

We're on a mission to overpower threats and empower IT by removing the complexity of detecting and stopping today's most advanced threats. ThreatDown pairs technology with services to streamline security and provide robust protection that's efficient and cost effective. With a channel first mindset across the globe, we empower our partners to help resource-constrained IT organizations.

Just like any video game, navigating the ransomware landscape requires strategy and awareness to succeed—and sometimes, the right "cheat codes" too. In this webinar, we’ll equip you with common indicators of compromise to recognize and combat ransomware threats when it matters most—early-on. 

Some of the ransomware cheat codes you’ll learn in the webinar include:
'Tool Hunter': Learn how to detect unexpected IT admin tools like PsExec or AnyDesk that are often exploited by attackers for access. 
'Credential Guardian': Understand how to identify and counteract credential dumping tactics using tools like Mimikatz, ensuring your login-info remains secure. 
‘Spotlight Mode’: Master the techniques to recognize reconnaissance commands such as nltest and net user, allowing you to identify and respond to early-stage threats. 

Whether you're a cybersecurity novice or a seasoned pro, this webinar will provide you with war stories and playbooks to defeat ransomware foes and protect your organization. Don't miss this opportunity to level-up your cybersecurity game!

Ransomware Cheat Codes: Mastering the game of defense

At present, Insider threat issues are a significant risk to organizations. In this talk, I will cover the  methods of educating employees on mitigating risks from insider threats. 

Key Take-Away:  
• Insider Threat and Types? 
• Indicators of Insider Threats 
• Mitigation Techniques to prevent Insider Threats

A Discussion on Mitigating Risk from Insider Threats

According to Forrester, 25% of breaches resulted from internal incidents, and almost half of those were categorized as malicious. Due to current events, insider threats have evolved, and organizations have more to consider than data leaving the organizations and privileged users. 
Employee stressors, disengagement, and potential attrition pose a serious risk and are challenging for organizations to detect and mitigate.
But even considering the risks, an average of only 31% of internal users are currently covered by behavior analytics monitoring solutions, according to the most recent ThoughtLab "Cybersecurity Solutions for a Riskier World" survey.

This session will show how Behavior Analytics can be incorporated into an Insider Threat program to reduce the number of alerts and make investigations faster and easier. From simple enrichment of DLP-generated alerts to a new set of use cases to identify risky insider behavior, advanced analytics can expand the efficiency of insider threat programs and boost risk mitigation strategies.

Learn how behavior analytics solutions can:
- Provide context to alerts generated by DLP solutions
- Identify anomalies related to insider threat activity
- Accelerate and simplify investigations

Help! My Insider Threat Program Is Drowning In Alerts!

There are many facets to minimising the risk companies face from insider threats. In this presentation, In this talk, cyber security lead Martin Nash will present a self-styled, strategic risk-based approach to managing the insider threat. This approach is easy to break down, easy to understand and, ultimately, easy to implement. 

Attendees will come away with the strategic basis for a modular approach to support ongoing and effective risk-based management of the insider threat.

Strategic Approach to Managing the Insider Threat

The social, economic and technological shifts of the past two years prompted cyber attackers to refine their methods, becoming more sophisticated and aggressive. This resulted in the business community suffering a series of high-profile attacks with far-reaching repercussions. Threat actors continue to exploit vulnerabilities across endpoints and cloud environments, and are ramping up use of stolen identities and credentials to bypass legacy defenses.

This panel of security experts will discuss the top threats of the moment and look toward what to expect in the next 12 months. They'll provide best practices and recommendations for security measures that can offer the best level of defense.

Join us to learn about:
--The most prevalent attacks today
--Emerging attacks that will threaten your business tomorrow
--How to take a proactive approach to threat detection
--How to prepare for continued global disruption

Moderated by:
Tamara Prazak, Senior Director | Appgate

Panelists:
Pete Wood, Partner | Naturally Cyber LLP
Seema Sewell, Assistant CISO | Office of Enterprise Technology, Maricopa County
Greg Kraft, Director- EMEA | OBS Global
Ian Goodhart, Director of Security Operations | Maryland Department of Information Technology (DoIT)

The Cyber Threat Landscape: Get Ready for 2023

Digital Business is here to flourish. It is hard to find an industry or sector in the economy that is not disrupted by software. Right now, businesses are having to deal with a modern, frictionless experience across all channels and the right level of security for their customers and themselves.

Okta is identified as a leader in access management by analysts such as Gartner, Forrester, and others. Their success is due to a unique methodology developed over time that can deliver this frictionless experience while still achieving security at scale.

In this session, you will learn:
- How to achieve this frictionless experience without compromising on security and other business processes and objectives;
- How to simplify customer acquisition and access while protecting their sensitive data at the same time with the right customer identity and access management. You can stop identity-driven attacks and engage with users across all channels.
- How organisations like JetBlue & Australian Red Cross use identity to create secure, seamless, digital experiences.

Building Trusted Digital Experiences with Customer Identity

In this session, we will detail how to re-calibrate your CISO strategy to gain traction in your enterprise domain and change the executive perception to accelerate business.  

Key Takeaways:
• Establish the fundamentals.
• Enable a simple message.
• Harden your ecosystem.

Re-calibrate Your CISO Strategy

Cybersecurity has not only become a regular boardroom topic, but may soon be a requirement. If proposed SEC legislation takes hold, all publicly traded companies must have a process in place to disclose cybersecurity incidents and more importantly, must actively identify and manage cybersecurity risks with board of directors’ oversight.  This legislation will likely have a trickle-down effect on many private companies as well. 

While some organizations have already undergone this journey, we expect that numerous companies are late to the party and haven’t begun to determine what this change means for them. This session will help you develop a game plan to right-size security for your organization by addressing the following key issues:

• Who should fill this role?
• Where to start?
• The art of incident response and reporting.
• What are some of the functionalities the SEC will be looking to include:
      o Controls to prevent unauthorized access
      o Monitoring
      o Measures to detect, mitigate, and remediate cybersecurity threats
      o Third-party risk management
• Coordination with legal counsel and financial advisors.

Coming Soon -- CISO Observability in the Boardroom

Attackers are trying everything they can to break into your environment.  As a result, CISOs need to ensure that they are protecting as much of that environment as possible using people, process, intelligence, and tools and the focus should be in that order.  In this discussion, we’ll look these elements and how CISOs can layer them in order to provide the most effective cyber security program.

Implementing a Multi-Layered Security Program to Protect & Defend Your Business

At present, Cyberattacks are not limited to any particular industry. Academia and industries must work  together to determine solutions to protect the organization from Cyberattacks. This talk will cover the  hacks of Academia and Industry partnerships to address Cyberattacks and Cybersecurity skill gaps. 

Key Take-Away:  
• Collaboration Strategies between Academia and Industry to address Cyberattacks  • Mitigation Strategies to address Cybersecurity skill gaps  
• Strategies of community involvement to mitigate cyber attacks

A Partnership Initiative of Industry and Academia

Following a turbulent two years, former-CISO and Distinguished Analyst at the ISF Paul Watts, is considering key recommendations for CISOs to improve or maintain their (and their team's) prominence and relevance to their stakeholders.

In this session, Paul reflects on where CISOs find themselves today, and what changes they should be looking at to ensure their role continues to add value to an increasingly technically competent digital enterprise.

Paul Watts is a Distinguished Analyst of the ISF and joined in August 2021.  He has worked in cyber security for over sixteen years as a security executive and CISO in several industry sectors including financial services, retail, critical national infrastructure, food and beverage, data analytics and market research. A certified information security professional holding credentials from both ISC² and ISACA, he has previously spoken and written on many security leadership topics including engaging with the board, building and sustaining robust enterprise security cultures, sustaining high-performing security teams and managing mental well-being in the cyber security industry. Paul is also a Chartered IT Professional and a  member of the British Computer Society.

The Future CISO: Securing the digital organisation of the future

At present, small businesses face greater impact from cyber attacks than larger businesses. There are many reasons for this which include insufficient implementation of cyber security programs, lack of practicing security culture, staff shortages and ineffective mitigation policies. 

Tune into this talk to learn best practices around threat detection and mitigation approaches specifically for small businesses and come away with a better understanding of:
- Best threat detection approaches for small businesses;
- Mitigation strategies to address cyber attacks;
- Resources for small businesses to create, implement and evaluate their threat and mitigation strategies.

Threat Detection and Mitigation Strategies for Small Businesses

Endpoint Security can either be the first or the last line of defense. From the beginning, it has primarily been accomplished by adding some type of shielding such as a simple anti-virus program but has since evolved into EDR (endpoint detection and response) and XDR (eXtended detection and response). Ensuring the endpoint is hardened against threats is the most effective mechanism to secure endpoints as the vast majority of breaches are caused by known vulnerabilities that exploit unpatched devices.   

This presentation will provide information on how to create peace of mind regarding all your endpoints by increasing overall vulnerability and patch management.

Join this discussion to learn:
- Why EDR, XDR, and MDR are not enough for complete endpoint security management;
- Understand the overall damage caused by unpatched vulnerabilities;
- How to increase overall visibility into the status and behaviors of endpoints and the value this provides to the organization;
- Explore how the endpoint security solutions must include all types of endpoints including mobile and virtual;
- Ensure all endpoints are up-to-date with patches, how to automate the process, and what to do when they are not;
- Encourage collaboration between IT and security teams in regards to endpoint security management.

The Endpoint Security Alphabet Stew Must Include VM and PM

As the methods and practices used to attack digital assets become more refined, the security tools to combat the threats must evolve, shifting from reactive to proactive methods. This change means security teams must learn about and assess a slew of acronyms, including endpoint detection and response (EDR), network detection and response (NDR), managed detection and response (MDR) and extended detection. and response (XDR). They also must consider new methods for addressing and preventing alert fatigue, such as using AI or cloud-based services.

In this panel, experts discuss the types of endpoint detection and response available and how to tease out which is best for your organization.

Join us to learn:
--Why EDR alone is not enough
--How to inventory your endpoints and their protection needs
--How to evaluate MDR options including MEDR, MNDR and MXDR
--The difference between hybrid XDR and native XDR
--Operational benefits of XDR
--How SIEM and SOAR compare with XDR

Unpacking Endpoint Detection and Response

What you’ll learn:
Outlining the various solutions in the cybersecurity market
Today’s top security challenges
The differences between Product (XDR) and Service (MDR)
How to select the right solution for your organization
An overview of Secureworks ManagedXDR
Answers to questions that our speakers received during the live webinar

EDR. XDR. MDR. If you’re looking at the cybersecurity market today, there are a lot of acronyms floating around – leading to a lot of confusion.

How do you filter through the alphabet soup and find the solution that solves your unique security challenges? Please join Secureworks® and Frost & Sullivan for a discussion that will clear the confusion in the market and help CISOs understand what to consider in discovering the right solution based on their organization’s needs.

EDR, XDR, MDR: Filtering Out the Alphabet Soup of Cybersecurity

Endpoint protection alone used to be good enough for companies. But now we have too many alerts, from too many systems along with “the Fog of More” making it more difficult to locate and address security threats. 

How do you cut through all these alerts to pinpoint real threats to your environment? Can MDR or XDR actually help you focus on what is important or are these just buzzwords? In this session, we will review real world examples to see how MDR helped a small security team focus their limited time available to cut through the fog and effectively address the critical alerts and incidents in their environment.

Cutting through the Fog of More: Use MDR or XDR to Find Real Threats

High-impact cyber attacks frequently make news headlines for all the wrong reasons and can cause significant financial, operational and reputational damage. Managing the crisis can be the difference between survival and destruction. 

As cyber threats become more sophisticated, incident response, crisis management, business continuity and disaster recovery plans will be pushed to breaking point. One way of preparing the organisation for a cyber crisis is stress-testing these plans by performing cyber security exercises, which can increase awareness, empower the workforce and improve resilience.

Watch this session from ISF Senior Solutions Analyst, Daniel Norman, where he details how you can: 
- increase awareness amongst key stakeholders about the nature and scale of cyber incidents
- design realistic, impactful cyber attack simulations and playbooks
- effectively stress-test crisis management, business continuity and disaster recovery plans.

Preparing for a Cyber Crisis: The ISF approach

Cobalt Strike (CS) is the most widely used advanced adversary simulation and threat emulation software. It's very powerful, for both good and bad actors.

CS delivers a post-exploitation framework that was developed to emulate the greatest features of late-stage malware ecosystems and allow its users to simulate adversary actions. The adoption of Cobalt Strike by global threat actors, and the framework’s use in hundreds of genuine intrusions, ransoms, and data breaches, shows that Beacon has fought its way to the top. It currently sits on the throne as the reigning champ of all malware toolkits. If it works, it wins.

In this session, you will learn: 
• How security and threat intelligence community can proactively prevent their organisations from falling victim to the growing threat of Cobalt Strike Beacons and Team Servers.
• How to turn the tables on APT groups and malicious threat actors - become the hunter instead of the hunted.

Finding Beacons In The Dark - A Guide To Stopping Cobalt Strike Attacks

Cybersecurity megatrends -- including zero trust, XDR, a pandemic-induced increase in remote workers, and the move to public cloud -- are influencing the way organizations think about endpoint security. These megatrends add new requirements for endpoint security, while requiring new levels of integration with other core security controls. Further influencing endpoint security strategies is the massive growth and device diversity driven by both mobile and IoT device usage.

In response, IT and security teams are thinking differently about endpoint security platforms, what they must include, and how they fit into the broader security stack. ESG Principal Analyst Dave Gruber will discuss strategies and best practices for modern endpoint security to secure this growing attack surface.

Adapt Your Endpoint Security Strategy

Successfully Securing Endpoints & Mitigating Threats

Malwarebytes' 2022 Threat Review reported 77% more malicious software detected in 2021 than in 2020. Cyberattacks are vicious, causing millions of dollars in losses as organizations scramble to recover stolen data, identities, and reputation. As malicious threats continue to breach network and endpoint defenses, organizations need to prioritize their endpoint detection and response strategy. 

In Threat Intelligence Today: Securing Endpoints Against Malware, Malwarebytes Security Evangelist Adam Kujawa will delve deep into how organizations can secure their hybrid and remote environments against the ongoing rise in malware. Tune in to learn more about real-world protection and incident response techniques as well as:

- The latest attack trends and prevention strategies as well as tool kits available to help organizations balance prevention and resilience for real-time continuous cyber protection
- How Malwarebytes and other third-party resources can keep organizations secure while saving them time, money, and resources 
- Drawbacks and benefits of using Security Operations Centers to investigate security breaches real-time

Threat Intelligence Today: Securing Endpoints Against Malware

Threat Detection

Endpoint Security

Ransomware

Cyber Attacks

Cyber Crime

Cyber Security

IT Security

Incident Response

Cyber Defence

Cyber Threats

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Threat Intelligence Today: Securing Endpoints Against Malware

Presented by

About this talk

ThreatDown, the B2B division of Malwarebytes