Name: Secure Browser: Bringing Identity Security to the Endpoint
Start: 2024-06-05T17:00:00Z
End: 2024-06-05T17:00:30.000Z
Location: BrightTALK
Rating: 0

Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity - seamlessly securing human and machine identities accessing workloads from hybrid to multi-cloud, and flexibly automates the identity lifecycle all with continuous threat detection and prevention – protecting organization’s identities and most critical assets by enabling Zero Trust and enforcing least privilege.  

Nowadays, everyone knows the risks of downloading pirated software—just look at all the memes about Limewire destroying computers. Yet, people still download these programs, only to find their computers infected with malware. In this session, we'll explore an exciting case of a previously unknown malware called MassJacker, found on a pirated software site. MassJacker is a heavily protected cryptojacking malware that uses a wide range of advanced anti-analysis techniques. As we go over the techniques, we’ll show how some of the code used to implement the techniques suggests a connection to another malware known as MassLogger.Once we’re done exploring the anti-analysis techniques used to protect MassJacker, we’ll look at the malware and the wallets it used. In addition, we’ll see how a flaw in how the malware uses AES encryption allowed us to recover crypto-wallets from previous campaigns totaling 778,531 unique addresses, with one worth over $300,000 USD!

Captain MassJacker Sparrow: Uncovering the Malware's Buried Treasure

Drawing from his personal experiences as a part of the Dallas Hacker community, Andy Thompson brings you this shocking presentation that peels back the layers of human psychology and coercion. Discover the methods used by master manipulators to exploit our trust and vulnerabilities, from ancient con artists to cutting-edge AI deepfakes. Andy's simple explanations of phycological concepts reveal how social engineers have evolved their craft to infiltrate our lives.

This talk doesn't just expose the dangers – it also arms you with powerful strategies to defend yourself and your organization against these cunning attacks. With real-world examples from Andy's encounters all over the world, interactive demonstrations, and expert insights, this presentation is a must-attend for anyone who wants to stay one step ahead in the high-stakes game of information warfare. Don't miss this opportunity to learn from Andy Thompson's unique experiences and transform from a potential victim into a savvy defender against the art of psychological manipulation!

Social Engineering: One time, on a pentest...

In today's digital landscape, securing every identity within your workforce is paramount. This webinar will explore five multifactor authentication (MFA) endpoint use cases, ranging from passwordless sign-ins to managing risky legacy applications. We'll discuss the importance of securing not just the general workforce, but also the more complex identities of developers and IT admins. 

Many initial attack vectors involve identity compromise and takeover, making continuous authentication crucial. By ensuring users are who they claim to be, we can significantly enhance security. Moreover, through a combination of continuous authentication and least privilege, we can achieve continuous authorization (AuthZEN). 

But security isn't the only focus. How can we enhance user experience while making it more secure? Imagine a passwordless desktop sign-in where your workforce no longer needs to type passwords. This not only frustrates attackers but also simplifies daily operations for every user. 

Join us to learn how to secure every human identity at the endpoint and make security seamless and user-friendly.

Secure Every Human Identity at the Endpoint

In this session, CyberArk Labs Senior Cyber Researcher, Andy Thompson, dissects the latest, high-profile breaches with insights you won’t find elsewhere. Learn about recent hacks, emerging attack methods, newly identified threats and essential mitigation strategies. 
Leveraging CyberArk Labs' cutting-edge research, we also examine the critical vulnerabilities in security programs that led to breaches and provide actionable insights to close those gaps. 
Key topics include:
• Third-Party Risk Management
• AI Security Concerns
• Browser-Based Threats
• Enhancing Multi-Factor Authentication (MFA)
This session equips IT professionals with current knowledge to build resilient identity security programs.  Learn about attacker behaviors and the ever-changing threat landscape.

Emerging Threats in Identity Security: What You Need to Know

Securing machine identities is critical, as recently evidenced by the breach of the U.S. Treasury Department. In practice, we see that machine identities are not getting the same security prioritization as human identities. Over 40% of respondents to our Identity Security Threat Landscape Report note that their machine identities have access to sensitive data. The top challenge in securing machine identities is that for any business, over time, secrets silos have been scattered across multiple teams, environments and business units.  Our customers often share that development teams are running their own instances of HashiCorp Vault, an approach that does not address the broader challenge of applying consistent security policies, providing a centralized visibility plane, and a clear audit trail for the entire organization.  

Moving from a siloed approach to a comprehensive machine identity strategy requires tools and organizational changes, regardless of whether teams are migrating from an individual free instance to HCP Vault Dedicated, Vault Enterprise, or to a completely different solution.
Join us for a webinar featuring a live demo on (Insert Date), to learn about our new CyberArk capabilities to protect your machine identities. If you do not have a comprehensive secrets management strategy, or if you are customer running HashiCorp security products in your environment considering alternatives, this session is for you.  
We will discuss and provide a live demo how CyberArk can:
• Secure secrets for your cloud native environments and business critical legacy applications
• How customers transparently manage secrets across development teams and integrate into production environments
• Maintain developer velocity 
• Provide immutable audit logging and secure storage for session recording
• Support business continuity and break-the-glass with secrets replication and automated failovers

Securing Secrets at Scale: Why Customers Are Moving Beyond HashiCorp

Are you ready for 90-day certificate lifespans? In March, Google announced their intention to reduce the maximum public TLS certificate validity to 90 days in “a future policy update or a CA/B Forum Ballot Proposal." This change won’t happen overnight, but it is coming—especially as threat actors continue to target machine identities. 

As the number of TLS machine identities you have to manage essentially quadruples, manual approaches aren’t going to cut it. How can your organization prepare for the coming shrinkflation? And where can you see efficiency gains or cost savings as you layer automation into your TLS machine identity management?

How Automation Overcomes the Growing Challenges of Shrinking Lifespans

In today’s evolving threat landscape, managing and securing identities—human and machine—is critical. But what’s the true business value of a robust identity security program?

Guest speaker IDC Analyst Jay Bretzmann, Research Vice President, Business Value Strategy Practice, interviewed CyberArk customers to find out.

In this session, Jay and CyberArk's Brandon Traffanstedt, senior director, Field Technology Office, delve into the findings of IDC’s whitepaper, “The Business Value of CyberArk” and other research insights from IDC. Get real world insights from Jay’s research on how leading organizations leverage the CyberArk Identity Security Platform to transform their operations, enhance security and achieve measurable ROI.

Key findings include:

309% ROI and a 10-month payback period achieved by CyberArk customers
67% reduction in account take over attacks  
49% boost in IT infrastructure team efficiency
35% increase in developer productivity
Learn how your peers are achieving remarkable results with CyberArk.

Reduce Risk & Boost ROI: The Power and Value of CyberArk Identity Security

In 2025, Kubernetes will remain a cornerstone of cloud-native infrastructure, yet it presents critical security challenges that organizations must address to scale and thrive.

Nearly half of organizations running a Kubernetes operation experienced a security incident within their operational environment. If platform operations teams are struggling to prevent security incidents affecting their production environments, it is likely security teams are exacerbating the situation by failing to build automated, policy-driven security controls which can be easily implemented by platform teams. This session will share practical strategies to bridge this gap between effective security controls and platform efficiency, and describe the steps needed to ensure a secure and resilient Kubernetes operation.

This live webinar, hosted by CyberArk and Red Hat, explores insights from the State of Kubernetes Security Report: 2024 Edition, which surveyed 600 global DevOps, engineering, and security professionals. The findings are stark: 67% of organizations reported delayed deployments due to Kubernetes security concerns, while 46% experienced revenue or customer losses stemming from container or Kubernetes security incidents.

Join us as we bring together leaders from the CyberArk Field Technology Office and the Red Hat Global CTO to discuss:

• Strategies for managing rising security incidents at runtime and the vital role of security teams to help mitigate these threats
• Rethinking your frameworks for security around network configuration and overprivileged containers
• More secure approaches for applications and workloads running in clusters
• Remove threats from cyber-attacks that target Kubernetes
• The workloads your containers should be accessing, and automating
• Preventing costly outages that cost you money due to poor Kubernetes security
• Achieving operational efficiency by taking a path that avoids unnecessary complexity

New Year = New Beginnings. How to Get Kubernetes Security Right in 2025.

Inspired by some 90’s rock, our very own Brandon Traffanstedt (BT) is getting the CyberArk band back together for another tour! 

Join us for a high-energy jam session, as BT and special guests explore how to tackle expired certificates, manual processes, and legacy PKI issues that can sink your organization with outages. We’ll bring some new tunes, new demos and a few new surprises you haven’t seen before. 

And most importantly, we’ll show you how to scale and automate your machine identity security strategy against one of the fastest growing threats in security.

Join us and we’ll show how to: 

• Automate your strategy 
• Adopt shorter-life certificates & remove complexity 
• Reduce risk and cost of operating legacy PKI systems 
• Eliminate insecure and error prone manual processes

Rage WITH The Machines: How to Rock Your Machine Identity Security Strategy

Watch this CyberArk Labs webinar for a detailed analysis of the December 2024 cyberattack on the U.S. Treasury Department, which stemmed from a compromised BeyondTrust remote management solution. This incident reinforces the critical nature of privileged access, API and machine identity security and the risk associated with supply chain compromise. 

Our expert speakers examine the root causes and lessons learned from the breach, including an in-depth analysis of the vulnerabilities, an attack chain reconstruction and actionable recommendations to help protect your organization. 

Key Discussion Points: 

- Timeline of the breach from Dec. 2 to what is known today 
- Analysis of the two zero-day command injection vulnerabilities disclosed during investigation 
- Implications of compromised unclassified data and educated speculation 
- Best practices and mitigation strategies: API security and secrets management, vendor privileged access and rapid incident response

The US Treasury Dept Breach: Analysis of the Attack

Executive Fireside Chat, Future proofing Identity Security Investments
The fireside chat featured Udi Mokady, founder and Executive Chair of CyberArk, and Robert Herjavec, founder of Cyderes and known for his work on Shark Tank, moderated by Dr. Stephenie Andal, Partner Manager at CyberArk ANZ.  

They discussed Robert Herjavec's move to Australia, the evolution of the cybersecurity industry, and Australia's role in the global cybersecurity landscape. The conversation highlighted the importance of proactive cybersecurity measures, the growing significance of identity security, and the rise of the Chief Identity Officer role. Udi Mokady shared CyberArk's journey and innovations, emphasizing the company's focus on privileged access management and its leadership in identity security. Insights on building a resilient business, the importance of innovation, strong company culture, and investing in emerging technologies like AI were also discussed. Both Mokady and Herjavec underscored the crucial role of people and culture in achieving business success.

Executive Fireside Chat, Future proofing Identity Security Investments

As the threat landscape continues to intensify, relying on traditional models to secure identities is a losing proposition. Udi Mokady, Founder & Executive Chairman of CyberArk, challenges conventional thinking and explains why we must rethink our security models to defend against identity-based cyberattacks. In today's world, characterized by the proliferation of identities and the double-edged sword of AI, every organization must embrace a set of new paradigms to secure every user - human and machine.

New Threats. New Paradigms

Discover how AI is transforming both security and operational efficiency. Explore CyberArk's innovative AI initiatives that enhance security, optimize actions, deliver personalized customer experiences, protect data privacy, and drive productivity with AI-powered, 24/7 support. 

Learn how to tackle the critical challenge of securing large language models (LLMs) by comparing top content moderation solutions—Amazon Bedrock Guardrails, Azure Content Safety, and OpenAI Moderation API. See how CyberArk integrates these tools with its proprietary LLM "judge" model for superior protection. 

Gain valuable insights from Chamandeep Singh, Sr. Security Partner Solutions Architect at AWS, as he shares how Amazon Bedrock Guardrails are shaping the future of AI security. Don’t miss out on the actionable strategies that will help you harness AI to future-proof your business.

Harnessing AI for Security and Productivity

In a constantly shifting digital landscape, organizational changes - whether from growth, mergers, regulations, or evolving workforce needs- can significantly impact security. The question is: can your identity platform keep pace?

Join CyberArk to discover how to build a robust identity security foundation that spans your entire workforce—from every employee to every endpoint.

Change is Constant. Five Ways to Evolve Your Workforce Identity Practice to Keep Up

Red Hat and CyberArk have a long history of collaboration around integration of automation and Privileged Access Management to meet a variety of needs, including management of access to resources from automation. This collaboration now extends to event-driven automation, where you can automatically respond to CyberArk alerts using the new Event-Driven Ansible capability through an event source plug in which CyberArk has developed and added to its existing Ansible certified Content Collection. This new plug-in works with syslogs and enables you to send these alerts to Event-Driven Ansible where your customized rulebooks can help you automatically act to save time and resolve issues faster and with less churn. 

Listen to this webinar to learn how you can use the joint solution to align activities and automation with the proper access and also learn how you can automatically respond to alerts and changing conditions.  

We will cover:

A brief overview of Event-Driven Ansible and its latest feature
Details of the new CyberArk event source plug-in
Additional CyberArk and Ansible Automation Platform use cases
A short demo of the solution in action

Automate CyberArk activities with the Ansible Automation Platform’s Event-Driven Ansible

AI and open source code is making waves in the development world, providing teams with the ability to speed up their development process to keep pace with the fast-paced digital economy. But at what cost - If security cannot keep up with development speeds, what risks are organizations putting themselves in? 

With AI and open source code being heavily utilized, it is important to understand the current state of modern development and security and how to mitigate risk.  

Join us to learn:  
• The benefits organizations see from AI and open source code tools  
• The concerns and potential risks of utilizing AI and open source code  
• Examples of attacks that can happen when utilizing these tools  
• Methods to stay secure when utilizing AI or open source tools

AI and open source coding- do the benefits outweigh the risks?

As the industry shifts towards a 90-day standard for TLS certificate lifespans, organizations must adapt quickly to minimize the risk of outages due to expired certificates. Join us for an insightful webinar where we delve into the top critical automations needed to ensure your enterprise is prepared for this significant change. Venafi experts will guide you through the essential steps to automate certificate management across key components of your infrastructure, helping you maintain security, compliance, and uninterrupted service delivery.

Top 5 Critical Automations to Minimize Outages from 90-Day TLS Certificates

Find out what’s driving the transformation to a shorter TLS certificate standard, and how soon you must be ready.

Venafi and Accutive experts will discuss when we can expect the changeover to 90-day TLS certificates, how shorter certificate lifespans will impact your business (including the types of certificates affected) and what steps you must take to get 90-day ready.

What you'll learn

90-day Certificate Overview: What’s changing, the business impacts and when we expect the shift to become official
Building your readiness roadmap: Practical strategies to prepare for 90-day certificates
Real client experiences: How other customers are overcoming certificate lifecycle management challenges through automation
Venafi’s 90-day TLS Readiness Solution: Discover the first step you can take today!

Your Playbook for 90-day TLS Readiness: Build An Action Plan Today

Advanced Strategies for Reducing Risk at and Beyond the Identity Perimeter

The Principle of Least Privilege: Accelerate your Zero Trust and Compliance Strategic Initiatives

Mastering Browser Security for Enterprise Defense

You Had Me at First Click: The Critical Role of the Secure Browser

Endpoint Privilege Security: The Cornerstone of Identity Protection

No More Cookies for You: Attacking and Defending Credentials

Safeguarding Servers

Practical Least Privilege

Mitigation of Zero Days Using Scripting and Dynamic Policy Application

Level Up Your Security Stack EDR vs Endpoint Privilege Management

Securing the Future: Exploring Emerging Trends in Endpoint Security

Secure Your Desktops and Servers

"• Enterprise have struggled to deliver remote secure access to all their enterprise resources generally, even more today with business-critical data in cloud native services and SaaS apps. and secure browsing in particular for both employees and third parties. BYOD and unmanaged devices make this challenge particularly acute. Rise of social engineering identity centric attacks, with session hijacking and cookie-stealing attacks has further exacerbated this challenge. In this world, striking a balance security and productivity is critical, and the key to doing that is the paradigm of identity-centric secure browsing.  This webinar discusses enterprise secure access challenges, the security threats, and how identity-centric secure browsing helps solve these challenges. "

Secure Browser: Bringing Identity Security to the Endpoint

Cloud Applications

SaaS

Secure Access

Security Threats

Data Center Efficiency

Access Management

Enterprise Cloud

Enterprise IT

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Secure Browser: Bringing Identity Security to the Endpoint

Presented by

About this talk

More from this channel