Name: Mastering Browser Security for Enterprise Defense
Start: 2024-06-03T19:36:00Z
End: 2024-06-03T19:36:29.000Z
Location: BrightTALK
Rating: 5

Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity - seamlessly securing human and machine identities accessing workloads from hybrid to multi-cloud, and flexibly automates the identity lifecycle all with continuous threat detection and prevention – protecting organization’s identities and most critical assets by enabling Zero Trust and enforcing least privilege.  

Enterprises have an abundance of machine identities to secure, both on-premises and in the cloud, and that data has become increasingly difficult to secure.  Faced with growing volumes of machine identities—particularly driven by DevOps, public cloud services, and the emerging wave of agentic AI—security teams struggle with visibility, management, and security for machine identities. This conversation highlights Enterprise Strategy Group research findings on machine identity breaches, examines CyberArk's approach to discovery and mitigation across diverse enterprise environments, and offers practical advice for CISOs seeking quick wins in this complex security domain.

This video features an in-depth conversation between Todd Thiemann, Principal Analyst at Enterprise Strategy Group, and Uzi Ailon, VP of DevOps Solutions at CyberArk, exploring the critical yet underappreciated challenge of machine identity security.

The Next Frontier in Identity Security: Machines, Secrets and AI

Take an in-depth look into the journey toward a passwordless future, examining both its benefits and the challenges organizations face during the transition. We’ll outline the necessary steps and the critical milestones, to ensure progress and results.  

Through customer stories and practical examples, dive into the most common roadblocks and effective strategies for overcoming them. We’ll also detail a high-level implementation plan and timeline to help guide your organization's transition. Join us to gain actionable insights and a clear path to a passwordless experience.

Why Passwordless Adoption Stalls: Strategies to Overcome Roadblocks

In this expert-led keynote, learn how the CyberArk Identity Security Platform is reshaping how organizations protect human, machine and AI identities. Explore groundbreaking innovations like Cora AI for anomaly detection and automation, zero standing privilege and streamlined multi-cloud security solutions. Gain actionable insights to simplify complex environments, mitigate emerging threats and future-proof your organization. Don’t miss this dynamic keynote packed with cutting-edge tools, real-world demos and strategies to redefine identity security

Come see us at IMPACT World Tour! Taking place in more than 30 cities around the world, IMPACT World Tour will feature curated content and sessions most relevant to your geography, along with local customer and industry speakers. Join us at a city near you! Visit: https://www.cyberark.com/impact-world-tour/

Innovation in Action: CyberArk Identity Security Platform

Hybrid cloud is now the default IT model—but truly unlocking its potential requires more than just connectivity. It demands modern identity security strategies that match the pace of cloud-native development. In this EcoCast, Brooke Jameson will share actionable strategies to secure access controls without slowing innovation.

Learn how to streamline operations with automation, eliminate excessive privileges through Zero Standing Privileges, and provide developers secure, native access across multicloud estates. Whether you’re expanding or refining your hybrid architecture, this session will show you how to balance agility with control.

Best Practices: Supercharging Your Hybrid Cloud Environment

Cloud environments are prime targets for cybercriminals, with mismanaged access often being the weakest link. The Codefinger ransomware attack is a stark reminder of the risks associated with persistent credentials and insufficient monitoring. In this webinar, we’ll analyze how attackers exploited AWS keys to encrypt data and demand ransom—highlighting the need for granular access control. More importantly, we’ll explore how Zero Standing Privileges (ZSP) and Time, Entitlements, and Approvals (TEA) frameworks can proactively mitigate such threats while maintaining developer productivity. Join us to learn how to secure cloud access without slowing innovation.

Preventing Cloud Access Mismanagement – Lessons from the Codefinger Ransomware Attack

In a galaxy not so far away, securing communications and protecting sensitive data is as crucial as outrunning an Imperial Star Destroyer. Join us for a thrilling webinar where we discuss optimizing Public Key Infrastructure (PKI) to run like the legendary Millennium Falcon - Han Solo's trusted ship known for its speed, security, and reliability.

Just as the Millennium Falcon navigates through hyperspace with unmatched precision, PKI provides the backbone for secure, encrypted communications in today's digital world. In this session, we’ll explore fine-tuning your certificate lifecycle management (CLM) strategy to ensure data travels safely across networks, much like the Falcon escaping danger at lightspeed.

Through this Star Wars-inspired session, you’ll learn how to:

- Use PKI as Your Hyperdrive Booster: See why PKI isn’t just security - it’s a business enabler that accelerates your mission.
- Fine-Tune Your Ship’s Navigation System: Automate certificate lifecycle management like the Falcon’s precise hyperspace calculations.
- Avoid Asteroids and Imperial Blockades: Conquer common security challenges, compliance roadblocks, and expiration dangers.
- Make the Kessel Run in Record Time: Deliver certificates faster, securely, and at scale - just like captaining the Falcon through hyperspace.

Whether you're a seasoned or novice hyperspace navigator, this webinar will help you calibrate your PKI for speed and security. Successfully pilot your Millennium Falcon across today’s digital galaxy.

Prepare for Lightspeed: How to Build Your Certificate & PKI Strategy for the Kessel Run

The CA/Browser Forum has approved sweeping changes to the TLS certificate lifecycle, reducing the maximum validity for public certificates to just 47 days, down from today’s 398. Starting in 2026, these changes will roll out in phases, forcing teams to renew certificates more frequently and rethink how they manage risk and compliance.

In this 45-minute session, certificate security experts George Parsons and Ryan Hurst will break down what’s changing, the operational risks of delayed action, and how organizations can use automation and policy alignment to adapt at scale.

Many teams today still rely on manual processes to check TLS certificate expiration, increasing the chances of missed deadlines and unexpected outages. Shorter certificate lifespans mean even a single expired TLS certificate can disrupt critical systems. Whether you're managing five or 10,000 certificates, knowing how to maintain visibility is essential.

You’ll leave the session with a clear understanding of how to:

- Modernize your TLS certificate lifecycle management strategy
- Communicate risk across technical and business teams, leadership, and the Board
- Build this change into your budget now (and quantify inaction to frame your business case)
- Ensure your infrastructure is ready for 47-day renewal cycles — mandatory for public PKI, and increasingly valuable for internal PKI as well.

Join us to get ahead of the transition and bring resilience to your TLS/SSL certificate lifecycle.

The Countdown to 47 Days: Are You Ready for the Biggest Change in TLS Certificate Lifecycle Management?

Traditional approaches to workforce identity security are no match for today's evolving threats.  This session introduces a defense-in-depth strategy that reimagines how to secure workforce identities effectively. Dive into practical techniques and frameworks designed to strengthen your organization's security posture, mitigate identity-based risks, and adapt to modern attacker tactics. Learn how to layer controls for a more resilient approach that extends beyond perimeter defenses, empowering your team to stay ahead of threats.

A Defense-in-Depth Approach to Workforce Security

Don’t miss this webinar focused on the critical security of Linux and Windows servers, the backbone of your enterprise operations. With cyberattacks on the rise, it’s more important than ever to understand the unique vulnerabilities these servers present. We’ll discuss effective strategies for mitigating risks, including the implementation of best practices and leveraging cutting-edge security solutions. Our expert speakers will provide valuable insights to help you fortify your organization’s defenses. Join us to learn how to protect your most valuable assets and ensure a robust security posture!

Securing Server Identities: Strategies for Linux and Windows Environments

Phishing and compromised credentials remain the leading causes of security breaches. Traditional passwords are not only vulnerable—they’re also cumbersome for users and expensive to manage. In this webinar, we analyze common credential attacks, including phishing, brute force and MFA bypass, through real-world examples and proven prevention strategies. 

We’ll also explore the transition to a passwordless experience, demonstrating how it enhances security and simplifies user access from endpoint, to application and beyond. Join us for actionable insights that empower cybersecurity professionals, CTOs, and CISOs to defend their organizations against credential-based threats.

How to Prevent the Most Common Password-Related Attacks

In today’s rapidly evolving digital landscape, organizations are increasingly adopting multi-cloud environments to enhance innovation, agility, and scalability. Yet this transformation brings significant challenges, particularly in managing and securing secrets across disparate platforms. While cloud-native tools offer some support, they often fall short in providing the visibility and compliance controls necessary—even within a single cloud, let alone across multiple. High-profile breaches, such as the 2022 Uber incident involving hard-coded secrets in scripts, and the U.S. Treasury attack exploiting exposed API keys, highlight the severe consequences of poor secrets management and the urgent need for more robust, unified solutions. 

Join cybersecurity experts as they delve into the intricacies of multi-cloud secrets management. This session will explore: 
· Unified secrets management strategies: Discover methods to synchronize and control secrets across AWS, Azure, and GCP using centralized tools like CyberArk Secrets Hub. 
· Automated secrets rotation: Learn how to implement automatic secrets rotation for all secrets to minimize exposure and give time back to developers and security engineers.  
· Governance and compliance: Understand how centralized secrets management aids in meeting regulatory requirements and enforcing consistent security policies. 
· Live demo: Learn how to create, deliver, and manage secrets across clouds (AWS, Azure, GCP), manage shared federated resources, visualize secret rotation workflows, and unlock the operational value of Secrets Hub. 

Whether you're a security leader or a cloud architect, this webinar will equip you with the knowledge to secure your secrets and simplify multi-cloud governance. 

Don’t miss this opportunity to turn cloud complexity into confidence.

Multi-Cloud, One Mission: Locking Down Your Secrets

In this webinar, we explore how a modern identity security program serves as the foundation for proactive audit readiness and continuous compliance. We'll examine practical strategies for aligning identity management practices with multiple frameworks and standards including PCI DSS, SOC 2, ISO 27001, NIST, NIS2, and DORA. 

Transform your identity security from a reactive checkbox exercise into a proactive program that strengthens your security posture while streamlining audit processes. Our experts demonstrate how centralized identity governance, automated access controls, and continuous monitoring can help you: 

Establish a single source of truth for identity-related audit evidence 

Reduce audit preparation time and costs 

Detect and remediate access-related risks before they impact compliance 

Build sustainable processes that adapt to evolving regulatory requirements 

Whether you're preparing for your next audit or looking to mature your identity security program, you’ll learn how to achieve and maintain compliance while enhancing overall security effectiveness.

Effective Identity Security Strategies for Audit-Ready Compliance

Agentic AI—systems powered by large language models (LLMs) that can act independently—are becoming increasingly common in modern workflows. From reviewing code to managing tickets and automation tasks, these systems introduce powerful capabilities and a radically new attack surface. 

This webinar breaks down how these agents work, what makes them vulnerable, and how attackers can exploit them using nothing but clever text. We’ll cover both the traditional attack surface and the new LLM-specific risks—and explore a demo agentic system to show these attacks live.

Agents Under Attack: Threat Modeling Agentic AI

Technology is a primary enabler of business growth, and according to March 2025 Forbes Research,* the C-Suite’s top priority (52%) is to speed up digital transformation. No surprise tech investments in Artificial Intelligence (AI) and cybersecurity are on the rise.   

As AI both accelerates innovation and emboldens attackers, organizations seek new defense paradigms that can protect the surge in machine identities, business adoption of AI agents and the entire range of human identities."

Is your business resilient enough? 
•Machine identities are outpacing humans by a ratio of 82:1 
•79% of identity-related breaches were caused by phishing
•87% of organizations experienced at least two successful identity-centric breaches in the past 12 months

In this session, we break down the top identity security trends identified in the CyberArk 2025 Identity Security Landscape Report and offer insights on how to reduce risk. 

Get insider’s view into: 
•Securing AI, including shadow risk and the explosion of machine identities
•Human behaviors undermining enterprise security — from password reuse to privilege sprawl
•Breaking security silos with integration and automation to maximize risk reduction

Modernize your identity security strategy, reduce risk and avoid costly breaches.

AI, Human Behavior and the Identity Security Risks You Can’t Ignore

There is an ever-widening gap between the threats to identities and access control and our ability to defend against those threats. Bad actors know it, and they exploit gaps in traditional, outdated security controls. Without a new identity security paradigm to meet new challenges, defense will fall behind and risk will increase. This new paradigm must protect a full spectrum of identities, break silos with unified discovery, policy creation and management across environments, grant privileges based upon context and risk, include ITDR and pre and post authentication projection. Learn how organizations build comprehensive security programs to meet today’s threats.

Securing the Future: The New Identity Security Paradigm for Cyber Leaders

AI agents are multiplying fast—outnumbering humans. Learn how to discover, prioritize, and secure them before they become a security risk.

AI agents are transforming enterprise operations, taking on critical tasks in security, IT, development, and beyond. But with projections suggesting that 50,000 employees would manage 100M AI agents - per department - organizations face an unprecedented identity security challenge. How do you discover, prioritize, and secure Agentic AI as machine identities increasingly outnumber human?

These new ‘digital workers’ are continuously learning and interacting with other systems, creating opportunities for unintended permission escalation and access to resources beyond their initial scope.

Join us in this live session to explore:
- An introduction to the unexpected security challenges with Agentic AI
- The security challenge scale brings to the table
- New approaches to minimize and reduce risk
- Live demos & labs research to establish your foundation to maintain control

Unexpected Security Challenges With Agentic AI

IT and security teams are overwhelmed by password chaos—resets, weak credentials, outdated policies, and security workarounds. Join CyberArk to learn why consumer-first password managers fall short for enterprises and what to look for in an enterprise-ready solution. 

Discover how to reduce IT burden, strengthen security, gain deeper visibility into workforce credentials, and deliver a seamless user experience with a robust password management solution.

The Enterprise Security Gap: Not all Password Managers are Created Equal

In this keynote session, Jen Easterly, former Director of the US Cybersecurity and Infrastructure Security Agency (CISA), takes you on a journey through her experiences in the military and cybersecurity, highlighting the transformative power of AI. She explores the dual nature of AI: its potential to revolutionize cybersecurity by detecting and mitigating threats at unprecedented speeds, and the inherent risks it poses if not properly secured. This keynote is essential viewing for those eager to explore the profound impact of AI on our digital security landscape and the critical steps needed to harness its power responsibly.

Come see us at IMPACT World Tour! Taking place in more than 30 cities around the world, IMPACT World Tour will feature curated content and sessions most relevant to your geography, along with local customer and industry speakers. Join us at a city near you! Visit: https://www.cyberark.com/impact-world-tour/

The Promise & Peril of Emerging Technology: Operating at the Intersection of Artificial Intelligence & CyberSecurity

While “Identity is the new and last standing security perimeter” isn’t unfamiliar, not all organizations have fully embraced it in practice. Today many still rely solely on MFA to secure their workforce identities and fail to properly manage and secure privilege at endpoints. This creates a much wider attack surface for threat actors to work with, and a false sense of security for organizations looking to reduce risk at and beyond the Identity perimeter. So how can organizations take their risk mitigation practices to the next level?  

In this session, CyberArk experts deep dive into advanced strategies and capabilities, including implementing phishing-resistant end-to-end passwordless authentication and Endpoint Identity Security, to reduce the attack surface and thwart potential threats at and beyond the Identity perimeter.

Advanced Strategies for Reducing Risk at and Beyond the Identity Perimeter

Cybersecurity professionals are tasked with the responsibility of mitigating cyber risk and implementing strategic initiatives, such as Zero Trust. Establishing foundational identity and privilege controls on the endpoint are key to a successful Zero Trust strategy and are vital to prevent privilege abuse (including tampering). Join our webinar to learn why Zero Trust on endpoints should start with Endpoint Identity Security. Discover how enforcing role-specific least privilege can form a strong foundation for the adoption of Zero Trust, Identity-First Security, and other strategic cyber security initiatives.

The Principle of Least Privilege: Accelerate your Zero Trust and Compliance Strategic Initiatives

"• Enterprise have struggled to deliver remote secure access to all their enterprise resources generally, even more today with business-critical data in cloud native services and SaaS apps. and secure browsing in particular for both employees and third parties. BYOD and unmanaged devices make this challenge particularly acute. Rise of social engineering identity centric attacks, with session hijacking and cookie-stealing attacks has further exacerbated this challenge. In this world, striking a balance security and productivity is critical, and the key to doing that is the paradigm of identity-centric secure browsing.  This webinar discusses enterprise secure access challenges, the security threats, and how identity-centric secure browsing helps solve these challenges. "

Secure Browser: Bringing Identity Security to the Endpoint

Cybercriminals are increasingly targeting browsers to steal stored passwords, cookies and other information as a pathway to access sensitive data. To help defend against such attacks, CyberArk recently released CyberArk Secure Browser, a gateway to securing every identity. But what makes the CyberArk browser different from other enterprise browsers on the market? 

Join us for this webinar as Amy Blackshaw, VP of Product Marketing, CyberArk, sits down with Melinda Marks to discuss CyberArk’s unique identity-centric approach to the browser and how it can thwart cyberattacks right from the first click.

This session will cover:
• The role of a secure browser in enabling end-to-end identity security
• Why cookie-less authentication matters
• The difference between identity access management and identity security

You Had Me at First Click: The Critical Role of the Secure Browser

Join us to explore the crucial role of securing privileges, credentials, and the web browser on endpoints in identity protection, using CyberArk Endpoint Privilege Manager. Our expert will discuss how CyberArk EPM becomes a cornerstone in your security strategy by eliminating local admin rights, enforcing role-specific least privilege, combating ransomware, and creating an audit trail.

Learn how to approach least privilege for various identity groups, define application control policies, fortify your organization against cyber threats, and enable a seamless user experience. This webinar is a must-attend for IT and security professionals seeking to enhance their organization’s security posture.

Endpoint Privilege Security: The Cornerstone of Identity Protection

Secure Your Desktops and Servers

Learn how an identity-centric web browser can enhance enterprise defense by countering evolving threats. Despite robust authentication measures, attackers often exploit vulnerabilities in the widely used enterprise application – the web browser. Discover proactive strategies to defend against browser-borne threats, secure access across devices and improve end-user experience while maintaining privacy. The CyberArk Secure Browser demonstrates effective integration with security measures to ensure comprehensive oversight and control.

Mastering Browser Security for Enterprise Defense

Endpoint Security

Web Security

Credential

Malware

Data Breach

Cyber Threats

Phishing

Threat Detection

Vendor Access

Authentication

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Mastering Browser Security for Enterprise Defense

Presented by

About this talk

CyberArk