Name: Discover & Assess the Risk of Open-Source Software (OSS) Vulnerabilities
Start: 2023-11-29T17:00:00Z
End: 2023-11-29T17:00:33.000Z
Location: BrightTALK
Rating: 4

Join us for this informative technology series for insights into emerging security trends that every IT professional should know. These brief sessions will give you an opportunity to discover best practices from market leaders as well as hands-on advice from industry experts on a variety of security and compliance topics.
 
Let Qualys help keep you up-to-date with cost-effective and efficient technology trends. Choose the topic that interests you or plan to attend the entire series to make sure you stay ahead of the curve.

Please join the Qualys research and product teams for the webinar “This Month in Vulnerabilities and Patches” on December 14, 2023.

We will discuss this month's high-impact vulnerabilities, including those that are part of August 2023 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

The significant vulnerabilities published this month:

Microsoft Patch Tuesday, December 2023 
Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

Learn how to use Qualys Patch Management to remediate vulnerabilities

This Month in Vulnerabilities and Patches, December 2023

Business success depends on a cyber security team’s ability to manage a constantly evolving attack surface. Organizations must have a plan to measure, communicate, and eliminate risk within the internal and external attack surface.

Join Kunal Modasiya (VP of Product Management at Qualys) and Beatrice Sirchis (VP of Application Security at IDB Bank) to learn how to use Qualys CyberSecurity Asset Management (CSAM) to achieve the following:

• Complete visibility across a constantly changing hybrid environment
• Proactively reduce tech debt, eliminate unauthorized software that poses risks, and identify missing security agents (such as CrowdStrike and Splunk Collector)
• Prioritizing using business context and TruRisk of assets
• Turbocharging remediation through a CMDB connector to automatically triage and assign tickets, closing them 95% faster

Attend this webinar to learn how to measure risk across the attack surface, communicate risk to business stakeholders, and eliminate risk with the greatest potential business impact.

Driving Business Outcomes with Unified Attack Surface Management

Please join the Qualys research and product teams for the webinar “This Month in Vulnerabilities and Patches” on November 16, 2023.

We will discuss this month's high-impact vulnerabilities, including those that are part of November 2023 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

The significant vulnerabilities published this month:

Microsoft Patch Tuesday, November 2023 
Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

Learn how to use Qualys Patch Management to remediate vulnerabilities

This Month in Vulnerabilities and Patches, November 2023

Watch Scheffler describe how Cintas transformed its cyber-related business risk from a state of disjointed and broken tooling into a TruRisk-based solution using Qualys VMDR, Cybersecurity Asset Management, and Patch Management.

Driving Down Risk with the Qualys Cloud Platform

Huffman describes how this Major League Football team uses VMDR, Qualys Agent, and Patch Management to automate patching Chrome and Firefox on laptops during weekly travel to games for no-touch protection outside its firewall.

Qualys Solutions Change the Game for the New Orleans Saints

Leach discusses evolving cloud security and risk, the rise of cloud-native and multi-cloud strategies, and what the future has in store cloud and generative AI.

Mariner Guide to Protecting Regulated Data in Cloud and AI

See how American Express gets full visibility and control of securing its cloud transformation with the Qualys TruRisk Platform approach for cloud security posture management and remediation, and PCI compliance.

Securing the Cloud While Navigating Business Growth and Transformation

Learn how General Electric eliminated 95% of a critical Oracle E-Business Suite vulnerability’s risk using a custom Qualys ID made with Qualys Custom Assessment and Remediation.

General Electric Custom Risk Measure & Eliminate with Qualys CAR

See Dickson discuss how complexity is introducing more cyber risk requiring more organizations to consolidate their security tools so they can focus on goals and metrics that drive better security.

Cloud Security 2024: Managing Complexity

Watch Qualys President and CEO, Sumedh Thakar, unveil the release of the new Qualys Enterprise TruRisk Platform that provides organizations with a unified view of their cyber risk so they can effectively measure, communicate, and eliminate risk with the tangible business context.

Cybersecurity at a Crossroads: New Approach to Managing Business Risk

Wilson details how global threat actors are evolving in their motivations and discusses the overarching impact on geo-political, financial, and tactical outcomes.

The Cyber Threat Landscape

Most endpoint detection and response (EDR) solutions only focus on endpoint activity to detect attacks, creating a tidal wave of alerts without any context or way to prioritize severity. 

Considering EDR is your “last line of defense” against malicious threats, isn’t it time to look at a dynamic detection and response solution that unifies multiple context vectors to shield your organization from known and unknown threats?

Join us on Thursday 2nd November to learn how to reduce the risk of compromise by integrating vulnerability management with endpoint threat detection and response. 

Don’t miss this special Technical Series where you’ll discover: 
• The importance of a holistic solution when IT and Security teams use numerous point solutions 
• How to orchestrate endpoint security, vulnerability management and remediation within your wider risk mitigation strategies 
• The value proposition of this process alignment
• How Qualys’ EDR solution provides comprehensive endpoint security with complete context

Register now and don't miss this opportunity to see how to build an integrated solution using the Qualys Cloud Platform.

Qualys Technical Series – The “hidden” value of EDR

Organizations using legacy tools should be concerned about the growing specter of sophisticated cyber threats – especially those with advanced malware. Many firms only focus on misconfigurations and vulnerability management, but detection and response of threats must be added for a more complete security solution. How can deep learning AI be used for threat detection in container security and cloud detection and response? 

Join us on Tuesday September 19 at 8 AM PT for the cloud AI cybersecurity fireside chat with a Qualys VP of Product Management. In this informative event, you'll learn how to leverage cutting-edge cloud technology to detect and combat the sophisticated challenges posed by malware and other threats. 

Here’s what you’ll learn during this event: 
• What are the limitations of traditional endpoint security tools in the cloud? 
• What are the latest escalating threats and malicious cloud activities, such as ELF malware?
• Why do cloud threat go undetected for long periods of time?
• How can you better manage and reduce cloud risks with deep learning AI?
• How can detect sophisticated malware in cloud containers?
• How can you protect your product environment with cloud detection and response at runtime?

Defeating Cloud Threats and Malware with AI

Any organization that accepts credit cards in the U.S. must comply with the new Payment Card Industry Data Security Standard (PCI DSS) v4.0. The consequences for non-compliance include:
• Fines up to $100,000 per month
• Increased transaction fees
• Termination of merchant agreements
• Fees and penalties for data loss
• Costs for potential lawsuits
• Brand damage and customer loss

Join us for a fireside chat with Gene Yoshida, Risk Consultant with a leading Financial Services Firm, on Tue Oct 17 at 8 AM PT to hear about key insights into the latest requirements under v4.0 and how you can ensure cybersecurity compliance. Here’s what you’ll learn by attending:

• PCI DSS 4.0 timeline and recommended milestones
• New v4.0 mandates as compared to previous versions
• Which industries are affected and how
• How compliance, IT, and security teams can collaborate to comply
• Which solutions will be effective to avoid audit failures, which won’t, and why

PCI DSS 4.0 Cybersecurity Best Practices Webinar

Please join the Qualys research and product teams for the webinar “This Month in Vulnerabilities and Patches” on October 12, 2023.

We will discuss this month's high-impact vulnerabilities, including those that are part of August 2023 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

The significant vulnerabilities published this month:

Microsoft Patch Tuesday, October 2023 
Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

Learn how to use Qualys Patch Management to remediate vulnerabilities

This Month in Vulnerabilities and Patches, October 2023

Join us on October 10th, 2023, for an online seminar review of the new GigaOm Radar Report for Continuous Vulnerability Management.
The Radar featured in our online seminar describes the value and progression of vulnerability management (VM) capabilities to help organizations build the best security and vulnerability management program to meet their needs, now and into the future. This new Report shifts its focus to continuous VM for traditional areas of coverage, with the addition of new modern requirements that support public cloud resources and IT / DevOps workflows. 

Cited as the Report’s only “Outperformer” among 11 providers, GigaOm notes: “Qualys is a well-established player in the vulnerability management field, offers vulnerability management, detection, and response (VMDR), a risk-based solution for managing vulnerabilities and misconfigurations. With the recent upgrades to VMDR 2.0 with its TruRisk capability, the platform has undergone significant upgrades, providing a range of SaaS-delivered features to effectively measure and reduce cyber risk.”  

Featured speaker is Chris Ray, GigaOm Analyst. Chris Ray is a seasoned professional in the cybersecurity field, bringing a wealth of experience from small teams to large financial institutions, as well as industries such as healthcare, financials, and tech. He has acquired an extensive amount of experience advising and consulting with security vendors, helping them find product-market fit as well as deliver cybersecurity services.

• Previously CISO at tech startup while providing vision for product development
• Consulting engineer with Bank of America, JP Morgan, Suntrust, and Wells Fargo
• Extensive experience in deeply technical network security fields

Survey of the GigaOm Radar Report for Continuous Vulnerability Management

To be able to understand what risks you have in your environment you need to ensure that the data quality within your Vulnerability Management solution is accurate, because Rubbish In = Rubbish Out. 

Join us to learn some best practices to ensure the data quality within Qualys subscriptions are as good as they can be.

Connect with us on Tuesday 10th October in our Qualys Technical Series to discover:

• How do you identify issues in your subscription
• How do you ensure your data is kept to a good standard
• The benefits that this will bring to your risk management program

Register now and don't miss this opportunity to optimize the quality of data within your Qualys subscription.

Qualys Technical Series Webinar - Best Practices to Optimize your Data Quality

Many organizations today run their businesses using proprietary or “First-Party” applications built on 80% open-source components to meet their unique needs. These applications have limited risk assessments performed against them, and even if they do, the lifecycle of these vulnerabilities (from discovery to prioritization to remediation) is rarely managed through a unified platform solution such as VMDR.

As a result, SecOps teams are either “blind” to this risk or do not measure it at all!

If potential security risks lurking unnoticed and unaddressed in custom, first-party applications are a concern to you, we invite you to the upcoming Qualys webinar. With this solution, Qualys unifies threat detection and remediation of both third and first-party applications/software to give expanded detection, and remediation capabilities for deep-embedded, open-source (OSS) in production like log4J, OpenSSL and more using the single powerful Cloud Agent.

Discover & Assess the Risk of Open-Source Software (OSS) Vulnerabilities

First-party software

Homegrown Software Risk

Custom Software

Custom Software risk

First-Party Software

Risk Management

Bespoke Software Risk

Tailor-Made Software

Custom Applications

Custom Application Risk

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Discover & Assess the Risk of Open-Source Software (OSS) Vulnerabilities

Presented by

About this talk

More from this channel