Name: Black Hat Interview: Cyware on the Need to Connect the Dots
Start: 2023-08-04T22:04:00Z
End: 2023-08-04T22:04:13.000Z
Location: BrightTALK

Cyware helps enterprises transform security operations while breaking through silos for threat intelligence sharing, collaboration, and automated threat response. Its unique Cyber Fusion solutions enable lean security teams to proactively stop threats, connect the dots on security incidents, dramatically reduce response time, and reduce analyst burnout from repetitive tasks. Cyware improves security outcomes for enterprises, government agencies, and MSSPs, and provides threat intelligence sharing platforms for the majority of ISAC/ISAO information sharing communities globally. For more information, visit cyware.com.

Valuable threat intelligence is at the core of any strong security program. But to truly reduce risk, Cyber Threat Intelligence teams must be able to operationalize that intel through scalable workflows, context-rich analysis, effective hunting and robust automation.

Join Cyware and Google for a deep dive into how security teams can unlock the full potential of Google Threat Intelligence by operationalizing it within Cyware’s Threat Intel Exchange Platform. This session will explore how GTI seamlessly integrates into the CTIX threat intelligence lifecycle, including:

- Ingestion: Aggregate intel from Google Threat Intelligence, multiple external and internal sources
- Enrichment: Traditional enrichment and graph-based pivoting for deeper investigation.
- Collaboration: Share intel across teams to reduce silos and ensure faster response
- Automated actions: Accelerate response, eliminate repetitive tasks, and ensure timely mitigation

Whether you’re just beginning your threat intelligence journey or looking to mature your existing capabilities, this webinar will offer practical insights into maximizing the impact of Google Threat Intelligence using Cyware’s Threat Intel Exchange Platform.

Operationalizing Google Threat Intelligence in the Cyware Threat Intelligence Exchange Platform

The dynamic and evolving landscape of cybersecurity necessitates a proactive, risk-weighted approach to threat intelligence. This webinar will explore the methodologies and frameworks for enhancing the identification, assessment, and mitigation of risks associated with threat intelligence operations by leveraging risk attributes that are most impactful. This approach emphasizes the integration of machine learning, automation, and advanced data analytics to improve the precision and timeliness of threat detection. 

By addressing challenges such as geo-political conflicts, threat actor and malware family tracking, incident response supported run simulation for risk properties, this session offers practical strategies to streamline threat intelligence workflows by introducing configurable weights to tailor your aggregated threat intelligence into a risk scoring framework, driving tactical indicator threat prioritization and clarity of risks to the business.

How Risk Scoring Drives Threat Intelligence Program Results

In an era of increasingly sophisticated cyberattacks, threat intelligence is more than a buzzword—it's a critical component of a proactive security strategy. By gathering, analyzing, and acting on real-time data about threats, organizations can anticipate attacks, prioritize vulnerabilities, and strengthen defenses.

This Hot Topics webcast dives into the essentials of building a robust threat intelligence program, exploring how to operationalize insights and leverage threat data to outmaneuver attackers.

This Event Will Explore:

- The Threat Intelligence Landscape: Trends in modern cyber threats, including APTs, ransomware, and supply chain attacks, and how intelligence can counter them.
- Operationalizing Threat Intelligence: Best practices for integrating intelligence into incident response, vulnerability management, and security operations.
- Advanced Tools and Techniques: How AI, machine learning, and automation are transforming threat intelligence capabilities.

Threat Intelligence Unleashed: Staying Ahead of Evolving Cyber Threats

Threat intelligence is only as valuable as the action it drives. Still many organizations struggle with volume and complexity, integrate intelligence effectively, and turn insights into meaningful security outcomes.

Join Cyware, Frost & Sullivan’s Martin Neydenov, and Health-ISAC’s CSO Errol Weiss for a deep dive into operationalizing threat intelligence—going beyond collection to process raw data, enable real-time collaboration, automation, and decisive action. 

Our expert panel will explore:
- The evolving threat landscape and why traditional threat intelligence programs fall short
- The biggest challenges in handling, managing, and actioning intelligence (hint: it’s not just data overload)
- How organizations can drive collaborative, AI-enhanced intelligence operations to improve threat response and reduce risk
- Best practices for integrating threat intelligence with SIEM, SOAR, and other security tools for maximum ROI

Expect a fast-paced, interactive discussion featuring industry insights, practical strategies, and real-world use cases—plus live Q&A to tackle your biggest challenges.

Don’t just collect threat intel—operationalize it. Reserve your spot today.

Redefining Operationalized Threat Intelligence: Driving Collaboration and Action

Join Cyware and Team Cymru for a practical deep dive into the daily challenges faced by CTI analysts and how to maximize the impact of threat intelligence. In this workshop, you’ll learn a point-by-point plan for integrating threat data into security operations, cutting through alert fatigue, and supporting critical business objectives. Walk away with actionable methods to prioritize the noise, streamline investigations, and enhance decision-making in your organization.

Learning Objectives:
-Identify common pain points for CTI analysts and how to mitigate them.
-Develop a systematic approach to collecting, prioritizing, and acting on threat intelligence.
-Implement best practices for collaborating with stakeholders to inform business objectives.
-Measure success in threat hunting by defining clear metrics and demonstrating ROI.
-Leverage threat intelligence to execute threat-hunting initiatives.

Taking Action in a Noisy World: A Day in the Life of an Intel Analyst

In this webinar we will hear from Dan Bridges, Technical Director International, and Raj Jethwa, Customer Solutions Advisor and Consultant at Paringa. The experts will discuss the challenges of a reactive cybersecurity strategy, the benefits of maturing to a proactive model and how this can be achieved with many of the existing technologies already in place, along with the process of enabling continuous improve to this model.

By watching you will gain insights into:
- Challenges with silo teams and cyber data.
- How to efficiently operationalise threat data.
- Effective collaboration across teams and supply chain.
- How to build a robust incident response framework.
- Benefits of embracing automation and orchestration across IT workflows.
- How to adopt and integrate a unified platform delivering Cyber Fusion for intelligence and response.

Transforming Cybersecurity Operations – From Reactive to Proactive

Healthcare organizations face unique and complex cybersecurity challenges in protecting sensitive patient data and critical systems while operating under significant resource constraints. 

In this webinar Rachel James, a seasoned cybersecurity professional with 13 years of healthcare cybersecurity experience, explores the unique challenges of cyber threat intelligence in the healthcare sector. 

By watching, you'll gain expert insights into four key areas, including: 
- Data ingestion challenges
- Analysis complexities
- Contextual understanding
- Operational implementation 

Rachel will also discuss her first-hand experience with healthcare-specific challenges for cyber threat intelligence teams. Tune in to learn how your organization can optimize threat management in healthcare.

Navigating Cyber Threats in Healthcare

The weaponization of unpatched vulnerabilities is one of the biggest challenges for security teams. Today, attackers weaponize vulnerabilities in less than eight days compared to the whole year it took five years back. 

Organizations need to move faster, and demand an easier way to manage vulnerability and exploit intelligence more efficiently - which means prioritization through evidence of exploitation that’s operationalized with mitigation in mind. 

How can you mine the gaps for emerging threats?

- Prioritize high-risk vulnerabilities so teams can easily share and collaborate
- Apply automation to ‘instantly available’ exploit intelligence to operationalize for TIP consumption and alerting
- Mitigate risk beyond vulnerabilities by implementing continuous exposure management
- Build efficient workflows that remove human interference so intelligence is consumed quickly

Mining the Gaps for Emerging Threats

Multiple studies have reported that in the past three years there is nearly 30% increase in organizations with a dedicated threat intelligence team, with 75% of organizations reporting a dedicated CTI team at the end of 2023. Why has this function, once considered a luxury afforded only to the most mature of cybersecurity departments, now considered a critical requirement?

In this webinar, we discuss:

- The evolving role of cyber threat intelligence in aligning and prioritizing cybersecurity investments and business outcomes
- How threat intelligence is increasingly a critical strategic asset which supports key risk-based decision making and measurably reduces the financial impact of a data breach
- How to identify the common opportunities for cyber threat intelligence to provide immense operational benefits to the entire business.

At this end of this webinar you will have the materials to understand the different models of cyber threat intelligence frameworks for organizations; how to incorporate cyber threat intelligence into multiple operational teams for maximum impact; and what it means to make information actionable so your organization can adapt resources and teams to meet a increasingly sophisticated and challenging threat landscape.

The Dawning of the Age of Intelligence

Embarking on a cyber fusion journey involves a comprehensive approach to transforming traditional security operations centers into modern, integrated Cyber Fusion Centers. Done effectively, organizations are able to enhance their ability to protect against evolving cyber threats and improve overall cybersecurity resilience.

Join Cyware CISO, Terrence Driscoll, as he discusses how he operationalized a Cyber Fusion Center at a major Fortune 50 company.

Key Takeaways:
- Operationalize and lead the transformation to a modernized SOC through smart security operations
- Understand the intricacies of establishing and maintaining robust security operations that can withstand the unique challenges of any industry

Smarter SecOps: Insights to Efficiency from Cyware's CISO

To stay ahead of sophisticated cyber adversaries, Managed Security Service Providers (MSSPs) must continuously enhance their Security Operations Centers (SOCs). Determining when to strategically integrate a threat intelligence platform (TIP) within a SOC can elevate security operations and help Service Providers gain a competitive advantage. 

This webinar delves into the strategic integration of Threat Intelligence Platforms (TIPs) within SOCs, offering valuable insights on when it makes sense to adopt this technology and how to effectively monetize it.

Join us as we explore the critical indicators that signal the need for a TIP, including the scale of operations, the complexity of threats faced, and the demands for faster incident response. Stephan will also discuss the practical steps for seamless TIP integration, ensuring minimal disruption and maximum benefit.

Moreover, this webinar will highlight innovative strategies for MSSPs to monetize their TIP investments. From enhancing service offerings and creating new revenue streams to improving client retention and satisfaction, learn how to leverage TIP capabilities to drive business growth and profitability.

Key takeaways include:
- Critical indicators that signal the need for a TIP.
- Best practices for implementing and optimizing TIP solutions.
- Innovative strategies for MSSPs to monetize TIP investments.
- Real-world case studies demonstrating successful TIP adoption and monetization.

Don't miss this opportunity to gain a competitive edge and elevate your SOC operations.

Optimizing Security Operations: How to Integrate a TIP for Service Providers

Managed Security Service Providers (MSSPs) stand as the first line of defense for businesses across the globe. How can MSSPs revolutionize their cyber defense strategies in the face of evolving threats?

Join Cyware’s Head of Managed Security Service Providers, Stephan Tallent, as he discusses how MSSPs can elevate their security services and provide their clients with unparalleled protection against cyber threats by integrating AI-enhanced threat intelligence with security operations automation to go from reactive to proactive. Don't miss this opportunity to stay ahead in the cybersecurity landscape.

Key takeaways from this webinar:
- Real-world applications and success stories of MSSPs leveraging threat intelligence for proactive cyber defense.
- Strategies for integrating threat intelligence into security operations for enhanced automation and efficiency.
- Practical guidance on utilizing threat intelligence for risk scoring, threat anticipation, and automated incident response.

Operationalize Threat Intel to Reverse the Attacker Advantage with MSSPs

Incident response is typically reactive, as analysts rush to identify ongoing security incidents, triage a barrage of alerts, enrich data with available threat intel, and communicate critical information to downstream stakeholders.

The problem is that this process relies too much on manual processes and is far too slow in getting the right information to the right decision makers. While detection tools may be rapid, the end-to-end process of aggregating, prioritizing, disseminating, documenting, alerting, and finally taking action to stop attacks can take days to weeks to months to never…

Join Richard Conley from Cyware for a discussion of practical ways to improve incident response by incorporating threat intelligence and automation into your processes from the outset – rather than as an afterthought. An intelligence-driven process can help you proactively get ahead of threats, anticipate possible attacks, prepare detection rules in advance, address vulnerabilities and help your organization respond quickly and effectively when incidents occur. Combining this with effective orchestration, automation, and collaboration tools can dramatically reduce response time and improve outcomes. This discussion will include:

• How to break through silos to connect people, technology, and data
• The need to orchestrate security tools, cloud apps, and data sources
• Ways to effectively consolidate, and prioritize threat and incident data
• Connecting the dots across threats, incidents, tools, and teams
• Automating alerts to stakeholders so they can make decisions quickly

The Need for Intelligence-Driven Incident Response

Silos happen. In many security organizations, threat intelligence analysts and incident responders work in different teams, use different tools, and have gaps in how they communicate and collaborate. These fragmented silos of data, technology, and people are pervasive, and increase overall risk.

While Threat Intelligence promises to anticipate and prevent cyberthreats, it is often run in isolation, hindering real-time sharing of threat data, and delaying response to emerging threats. And when threat intel is shared, it typically takes too long, provides too much extraneous information, and lacks the context required by downstream decision makers.

It's time to break through silos and bring together multiple teams, security disciplines, and tools through orchestration, automation, and better human collaboration.

Join security experts from Cyware for an interactive discussion of practical strategies and real-world case studies of SOC teams connecting the dots across tools and effectively integrating threat intelligence into security operations. Topics will include:

• How to connect people, technology, and data across security silos
• The need to orchestrate security tools, cloud apps, and data sources
• Ways to effectively consolidate, and prioritize threat and incident data
• How threat intelligence can be used to build better detection rules
• Getting the right information to the right people, right away

Using Threat Intelligence to Break Down Security Silos

Our incremental approach to cybersecurity has resulted in far too many point solutions that don’t play well together and are too difficult to manage. It’s time to reboot our security strategy with an intelligence-driven approach and orchestration across existing tools to provide the context and clarity we need to stop threats proactively.

Join Rick Howard, noted security expert, host of The CyberWire podcast, and author of Cybersecurity First Principles, for a discussion of how we got here, and how to rethink and modernize our approach to security. Participants will be eligible to win a free copy of Rick’s insightful book.

Improving Security by Reducing Complexity

With any good football team, both the offense and defense huddle, communicate, collaborate, and react in a coordinated way. If the eleven defenders all acted alone, without coordination, to individually try to stop the front line, the results would be a disaster.

Cybersecurity should be no different, yet most defenders operate in disconnected silos, unable to work together, call coordinated plays, or form any coherent line of defense. It’s time for a different approach to change the game.

Join security expert Jason Keirstead from Cyware for a discussion of the importance of Collective Threat Defense, and practical ways we can all start sharing intelligence and collaborating across organizations and industries to disrupt and defeat well organized attacker game plans.

Winning in Football Requires Collective Defense. So Does Cybersecurity

The idea that we should leverage AI to “automated everything” sounds great, but security practitioners are rightfully skeptical. Obviously, you should automate much of the manual, repetitive drudgery that Tier 1 security analysts face, but we can’t forget that humans must remain in the loop and in control. In fact, where automation can help is in making sure that actionable intelligence is automatically delivered to the right humans, at the right time – so that they can make critical decisions and act immediately.
Join security experts for a discussion and real-world case studies of how to leverage AI to automate prioritizing, communicating, and acting on critical security information. This discussion will include:
• Cyber threat intelligence extraction, scoring, and clustering
• AI-driven guided orchestration
• Using AI to improve the analyst experience 
• Enhanced incident response processes
• Building detection content
• Engineering detection content

AI Security Automation that Keeps Humans in Charge

We’ve long known that there are far too many threats and security alerts, for overstretched analysts to respond to. But as enterprises have piled on new layers of security, especially during the COVID era, the sheer number of disparate tools is making the problem worse – not better. Recent estimates are that large enterprises average over 100 discreet security tools, many of which don’t play nicely together.
Today’s security challenges are less about detection, than connecting the dots. This presentation will cover strategies to empower your security team through orchestration, automation, and collaboration tools, to connect systems across platforms, and connect the right people across silos to take intelligence-driven action. 

Join experts from Cyware and ISSA as they discuss:
• How to connect people and systems across security silos
• The need to orchestrate disparate security tools
• Strategies for effective automation with humans in the loop
• Integrating collaboration and threat intel sharing across organizations

We Have Plenty of Security Tools – Now we Need to Connect the Dots

As part of the Black Hat conference, Willy Leichter, VP at Cyware was interview by Chuck Harold from SecurityGuy.TV
The discussion covers an overview of Cyware, and the need to make better use of the security data we already have through threat intelligence management, orchestration, automation, collaboration, and threat intelligence sharing.

Black Hat Interview: Cyware on the Need to Connect the Dots

BlackHat

Threat Intelligence

security automation

Automation

SOAR

Cyber Incident Response

Orchestration

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Unified communications improve collaboration and increase productivity among employees through technologies such as VoIP, instant messaging and social media. Join this community to learn how to benefit from the full value of unified communications and collaboration technologies.

Collaboration and UC

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Black Hat Interview: Cyware on the Need to Connect the Dots

Presented by

About this talk

Cyware