Name: Key Findings from the 2023 Thales Data Threat Report
Start: 2023-06-06T14:00:00Z
End: 2023-06-06T14:00:49.000Z
Location: BrightTALK
Rating: 4.6

Thales is a global leader in cybersecurity, helping the most trusted companies, organizations and governments around the world protect critical applications, sensitive data, and identities anywhere at scale. Through our innovative services and integrated platforms, Thales helps customers achieve better visibility of risks, defend against cyber threats, close compliance gaps, and deliver trusted digital experiences for billions of consumers every day.

With 80-90% of data being unstructured and created in the cloud , Data Security Posture Management (DSPM) is becoming essential for organizations to understand what data they have, what the risks are to their sensitive data, and understand the journey data takes in their business environment. While this initial visibility and understanding about data and data risks are valuable, it's what comes next that helps you to achieve an outcome for a particular use case. 

Join our featured speakers, Todd Moore, Thales VP of Data Security, and featured speaker Heidi Shey, principal analyst, Forrester, as they discuss how organizations must evaluate automated data security technologies like data security posture management to track and protect data throughout its life cycle.

Attendees will learn:
• Where to look for security gaps in your organization’s current data protection strategy
• Which data security use cases should be prioritized for successful DSPM adoption
• Why DSPM needs to go beyond cloud-centric visibility and native controls
• How artificial intelligence (AI) and post-quantum cryptography (PQC) will impact your data security strategy.
• Plus, Todd Moore will share how Thales can help your team and organization proactively protect your most critical data and prioritize risk mitigation.

Whether you are planning a deployment or refining your current data security strategy, you’ll gain actionable steps to drive better security outcomes and maximize value.

From Visibility to Value: Leveraging DSPM to Safeguard the Data Lifecycle

AI技術の急速な発展により、これまで専門的なスキルを要したボット攻撃の実行ハードルが大幅に下がっています。その結果、悪性ボットによる通信量は前年比2倍以上に増加し、企業のWebサイトやアプリケーション、APIを狙った攻撃が急激に拡大しています。
本セミナーでは、AIを悪用したボット攻撃の最新動向や、その背後にある攻撃者の手口を解説するとともに、企業が今取り組むべきデータ保護・防御対策の最前線について紹介します。弊社が発行する「悪性ボットレポート」の最新データをもとに、検知・防御のポイントをわかりやすくお伝えします。

「前年比2倍超」悪性ボット通信の実態と、AI悪用ボット攻撃への対策最前線

This session in the NHS Cyber Assessment Framework (CAF) series explores the Identify function of the framework, focusing on how NHS organisations can uncover hidden risks, strengthen asset visibility, and build a clear understanding of their threat landscape. By identifying vulnerabilities early, healthcare providers can take proactive steps to protect critical systems and patient data. Join Thales experts to discover how to:
• Find and classify sensitive data based on regulatory and organisational requirements.
• Use machine learning to enhance risk detection accuracy and scoring.
• Inspect incoming requests to applications, identify malicious activity, and block attacks before they impact services.

NHS CAF Principles In Focus: Identifying Cyber Risk

Are you aware that 33% of critical infrastructure organizations are in advanced stages of AI adoption, but that 73% cited the fast-moving AI ecosystem as their top concern? Or that only 2% of critical infrastructure have encrypted 80% or more of their sensitive cloud data? Discover how to tackle these and other challenges in 2025 with insights from Accenture, S&P Global, and Thales. 

Join us as we delve into the latest data security trends, challenges and expert recommendations from our latest Thales Data Threat Report Critical Infrastructure Edition. This report includes the responses from 513 security leaders working for key energy, utilities, telecommunications and transportation organizations around the world.

The webinar will cover: 
• How AI changes the ecosystem and impacts security budgets. 
• The challenges of Quantum Computing  
• With an average of 2.1 IaaS and 102 SaaS platforms, complexity makes security more challenging. 
• The threat landscape, root causes and causes of breaches. 
• Recommendations and guidance. 

Attendees will receive a free copy of the 2025 Thales Data Threat Report Critical Infrastructure Edition, prepared by S&P Global for Thales.

2025 Critical Infrastructure Data Threat Report with S&P Global, Accenture & Thales

As the dawn of quantum computing rapidly approaches, today's cryptographic defenses face unprecedented challenges. Organizations must re-evaluate their security strategies to address emerging quantum threats that will render traditional encryption obsolete. At the same time, Artificial Intelligence (AI) is revolutionizing the cybersecurity landscape, offering both new defenses and unique integration opportunities.
Join industry leaders from Thales and Kyndryl for an exclusive webinar, "Navigating Quantum threats: the Good and Bad of the convergence of AI and PQC", where we will explore cutting-edge strategies at the intersection of AI and post-quantum cryptography (PQC). Discover how AI can help identify vulnerabilities, accelerate the transition to quantum-safe architectures, and fortify your organization's defenses against evolving threats.
This session will provide practical insights and actionable recommendations for CISOs, IT Directors, and Business Leaders looking to future-proof their security. Don’t miss this chance to get ahead of the curve in an era where quantum computing and AI define the new frontier of cybersecurity.

Navigating Quantum threats: the Good and Bad of the convergence of AI and PQC

As European organizations navigate evolving regulatory landscapes and increasing cyber threats, the need for digital sovereignty has never been more urgent. Join experts from Microsoft, Thales, and Avanade for a 45-minute session exploring how the Microsoft Cloud for Sovereignty empowers public sector and regulated industries - finance, healthcare, and government - to maintain control over sensitive data while meeting compliance and residency requirements.
This webinar will cover:
• The challenges European organizations face in securing sensitive data
• How Microsoft’s Sovereign Cloud, Avanade, and Thales’ cyber security solutions address these challenges
• Real-world examples of risk-based control and compliance in action

Enhanced Security and Risk-Based Control Over Sensitive Data in Microsoft Azure: A Sovereign Cloud Perspective

This session in the NHS Cyber Assessment Framework (CAF) series explores the Govern function of the framework, and how NHS organisations can establish clear oversight, accountability, and visibility across their digital environments — turning complex cyber data into actionable insight. Join Thales experts to discover how to:
• Gain visibility, control, and insight over sensitive data and compliance status.
• Produce a uniform data risk status and risk score by consolidating disparate risk metrics.
• Prioritise mitigation through clear, evidence-based recommendations for corrective action.
• Reduce third-party and supply chain risk by protecting applications, data, and identities in the cloud.
• Enforce consistent security policies and regulatory requirements over data, access, and identities.

NHS CAF Principles In Focus: Managing Security Risk, Governance, Assets and Supply Chain

Quantum computing’s potential to break traditional cryptographic algorithms poses an urgent threat to data security, trust, and operational resilience. At the same time, regional regulators are mandating organizations to adopt quantum-resilient cybersecurity infrastructures and ensure robust compliance.
In this webinar, Thales and ASTRI combine their cybersecurity expertise to provide strategic insights into the evolving quantum threat landscape. ASTRI plays a key role in post-quantum computing development, offering valuable guidance to governments and enterprises in the region. Their initiatives drive innovation, helping Hong Kong lead in quantum technology advancement.
Experts will discuss practical strategies to transform your security solutions to withstand quantum threats, integrating post-quantum protections seamlessly into your cybersecurity framework. This session is essential for IT professionals and cybersecurity leaders committed to future-proofing their organizations in the quantum era. 
Prepare to safeguard your data and applications against tomorrow’s challenges.
Agenda: 
• Quantum threat landscape and PQC Readiness
• Strategic framework for quantum risk mitigation
Remarks: The Fireside Chat will be delivered in Cantonese, with English terminology and presentation materials.

Fireside Chat x ASTRI: Navigating the Transition to Quantum-Safe Solutions [Cantonese]

Customer identity volumes in financial and insurance firms are growing rapidly, with typical stacks spanning four or more vendors. This complexity fuels friction, elevates security risks -- including emerging threats like AI-powered deepfakes and synthetic identities -- and increases regulatory exposure. 

In Thales’ latest survey, 70% of financial firms face platform sprawl, and over half struggle to balance security, customer experience, operational efficiency, and regulatory requirements. Left unchecked, these challenges put revenue, reputation, and compliance at risk during one of the busiest business cycles of the year. 

Join financial services leaders, strategists, and technologists for a peer-driven discussion on simplifying Customer Identity and Access Management. Hear real-world experiences, compare approaches across use cases, and gain actionable strategies to streamline identity management, enforce consistent security and compliance, and stay agile in a fast-evolving market.

Key Takeaways:
1. Identify architectural bottlenecks caused by CIAM sprawl across legacy and cloud environments.
2. Explore platform unification strategies to streamline identity orchestration and eliminate vendor overlap.
3. Discover how to enforce consistent security policies across hybrid infrastructure without disrupting UX.
4. Learn scalable, API-first CIAM design patterns to meet evolving compliance and customer demands.
5. Hear how financial institutions align CIAM modernization with business continuity and digital transformation.

Panelists: 
Marissa Schlagenhauf, Financial Services Senior Analyst and Risk Consulting Director, RSM US LLP 
Vaishnavi Vaidyanathan, Cybersecurity Leader, RSM US LLP 
Ammar Faheem, CIAM Product Marketing Director, Thales

Simplifying CIAM to Reduce Fraud, Strengthen Security and Elevate UX

AI is revolutionizing industries—but is your organization protected?
Join our exclusive three-part webinar series featuring Securing AI, and learn how to strengthen your AI security posture from evolving threats with enhanced visibility, control, and protection. Each session delivers actionable insights from our AI Security experts.

Episode 3 – Securing AI: Mitigating Cyber Risks from DevSecOps
As AI integrates into DevSecOps cycles, new vulnerabilities emerge—from poisoned training data and compromised model repositories to exploited runtime environments.
In our final session of the Securing AI webinar series, our experts reveal how to embed security without slowing innovation
- AI-Specific DevSecOps Challenges
- Built-in Protections
Secure Your Spot Now to ensure your AI pipelines are protected.

Securing AI: Mitigating Cyber Risks from DevSecOps

Many organizations plan on maintaining on-premises resources for the foreseeable future—either because of logistical or security reasons. Whether applications live in the cloud or on-prem, securing authentication and access is non-negotiable. However, security teams struggle to adopt MFA methods that are both resistant to modern attack tactics, while also maintaining a consistent and intuitive user experience, regardless of what (or where) your employees are accessing.  

In this webinar, we will discuss why some forms of MFA fall short, and how FIDO security keys have become the new industry standard for phishing-resistant authentication—now supported and supplied by Thales for all your applications in the cloud and on-prem. Get a first-look at these latest innovations and explore what’s possible with passwordless authentication.

Extending FIDO Authentication from On-Prem to the Cloud

Identity is no longer just about security in the Banking, Financial Services & Insurance (BFSI) sector — it’s a business-critical priority. 

As institutions grapple not only with AI-driven threats, third-party identity sprawl, eroding customer trust, and intensifying regulatory demands, but also with explosive growth in the number of identities to manage, identity now sits at the core of operational resilience, and if done right, can be turned into a profit center.

This webinar shares key findings from nearly 500 senior executives across the U.S., U.K., Singapore, captured in Thales’ latest survey conducted by ESG: “Identity & Access in Banking, Financial Services and Insurance:” This is one of the largest survey of its kind.

As 2026 roadmaps come into focus, discover how leading institutions are reframing identity, not just as a risk to manage, but as a lever for agility, compliance, and competitive advantage.

Key Takeaways: 

1. Industry Snapshot - An overview of how BFSI organizations are managing CIAM, workforce IAM, and third-party access, highlighting key maturity gaps.

2. Emerging Pressures - An exploration of evolving risks, including regulatory demands, AI-driven threats, and operational challenges impacting identity strategy.

3. Forward-Looking Priorities - Insight into where peers are focusing their identity modernization efforts, and the strategic drivers shaping the 2026 planning.

4. Strategic Guidance - Practical advice to help you refine your IAM roadmap, closing critical gaps while aligning identity with broader business goals.

How Leading Financial Institutions Are Eliminating Friction and Fraud in Digital Access

Data security has shifted from being a bit-part player among a broader cybersecurity discussion to become a standalone discipline, assuming its logical place as the foundation of a wider, multi-tier cybersecurity posture. When organizations can map out and understand their data landscape, they are more confident in their security measures to defend it and reduce the risk of non-compliance —resulting in significant sanctions or penalties from regulators.
In 2026, data security is projected to be the most critical aspect of a digital asset strategy. Data security posture management (DSPM) can provide a firm foundation as your organization builds out transformation projects, including AI and Quantum. 

Join our speakers as we discuss Omdia’s assessment of the DSPM market, qualified vendors, and real-world use cases, including:
• How Omdia defines DSPM into two capability areas: data security and posture management.
• Why AI and quantum introduce new complexities to IT and the DSPM infrastructure.
• What to look for when selecting a vendor.
• How Thales can help build customer-centric business value.

DSPM at a Turning Point: 2026 Outlook for Data Security Posture Management

Finance and insurance firms face a clear and present danger: expanding third-party and B2B risks are stretching identity perimeters to the breaking point. With 74% of organizations seeing surging third-party identity growth and 89% citing external access as a major risk, legacy IAM can no longer keep pace.

In this webinar, you’ll learn how modern B2B IAM serves as financial services’ shield, protecting against breaches while enabling business growth. We’ll explore how risk-based, adaptive IAM can secure vendors, partners, supply chain and external networks, bridging Zero Trust security with business continuity to protect without blocking. Through real-world case studies, expert perspectives, and a practical roadmap, you’ll learn how to balance resilience, compliance, and business growth by modernizing IAM for external and B2B use cases.

Key Takeaways
1. B2B IAM Maturity Assessment: Benchmark your organization’s readiness for modern IAM.
2. Risk-Based Access Insights: Practical guidance on moving from static roles to adaptive, context-aware controls.
3. Third-Party Security Strategies: Tactics for securing vendors, partners, and external networks.
4. Modernization Roadmap: Step-by-step approach to credential vaults, adaptive MFA, and identity orchestration.
5. Resources for Action: Exclusive eBook and whitepaper to reduce your B2B attack surface.

Clear and Present Danger: Securing Third-Party Access with Modern B2B IAM

Descubre cómo las instituciones financieras están transformando la experiencia de pago, combinando seguridad y fluidez. Exploraremos el caso práctico de Click to Pay y Passkey, mostrando estrategias de Autenticación Basada en Riesgo y medidas de prevención de fraude para proteger a todos los usuarios, dispositivos e interacciones frente a deepfakes impulsados por IA, mientras se ofrecen transacciones confiables y sin fricciones que mejoran la satisfacción del cliente y cumplen con los estándares de seguridad más exigentes.

Presentadores:
- Pedro Lara Perez, Identity Expert, Thales
- Rogelio Tejada Galindo, Digital Payment Expert, Thales

Lo que aprenderás:
- Lecciones del caso práctico de Click to Pay y Passkey que pueden aplicarse en tu institución financiera.
- Mejores prácticas para ofrecer pagos confiables y fluidos que mejoran la experiencia del cliente.
- Estrategias efectivas de prevención de fraude frente a amenazas emergentes como deepfakes impulsados por IA.
- Cómo implementar la autenticación con passkey para proteger usuarios, dispositivos e interacciones.

Este taller fue organizado por la Asociación de Bancos de México ABM, A.C.

Construyendo experiencias confiables y fluidas -  Caso Click to Pay & Passkey

En la industria de servicios financieros, proteger la información confidencial es fundamental para mantener la confianza y el cumplimiento. Exploraremos los desafíos únicos que enfrentan las instituciones financieras al administrar secretos, incluidas claves API, credenciales y claves de cifrado. Los expertos de la industria discutirán las mejores prácticas, los requisitos regulatorios y los estudios de casos que resaltan la importancia de la gestión de secretos para proteger los datos de los clientes y mantener la integridad operativa.

El papel fundamental de la Gestión de Secretos en los Servicios Financieros

No setor de serviços financeiros, proteger informações confidenciais é fundamental para manter a confiança e a conformidade. Exploraremos os desafios únicos que as instituições financeiras enfrentam no gerenciamento de segredos, incluindo chaves de API, credenciais e chaves de criptografia. Especialistas do setor discutirão as melhores práticas, requisitos regulatórios e estudos de caso que destacam a importância do gerenciamento de segredos na proteção de dados do cliente e na manutenção da integridade operacional. Os participantes obterão insights acionáveis para fortalecer seus processos de gerenciamento de segredos, garantindo conformidade e resiliência em um cenário em rápida evolução.

O Papel crítico da Gestão de Segredos em Serviços Financeiros

Dans un environnement numérique interconnecté, l’accès des fournisseurs, prestataires et partenaires à vos systèmes est devenu incontournable. Mais ces identités externes échappent souvent aux stratégies IAM traditionnelles, exposant votre organisation à des risques : intégration manuelle, responsabilités floues, suppression d’accès retardée, et manque de visibilité. 

Ce webinaire vous montre comment reprendre le contrôle sans ajouter de complexité. Découvrez des approches concrètes pour sécuriser l’accès externe tout en préservant l’agilité opérationnelle. 

Ce que vous apprendrez : 
- D’où vient réellement le risque lié aux identités externes, et pourquoi il est souvent sous-estimé 
- Comment structurer et sécuriser l’accès externe sans lancer un programme de gouvernance à grande échelle 
- Comment une plateforme IAM B2B peut renforcer votre posture de sécurité à l’échelle de votre écosystème partenaire

Risque lié aux identités externes: Comblez la faille de sécurité dans l’accès externe

The concept of cloud applications have gone a long way from the days of peer to peer file sharing to modern enterprise solutions hosted in massive data centers. Nevertheless, there are areas in cloud applications, especially security, that can benefit from internationally recognized standards such as the ISO set of IT security standards. In this presentation, industry thought leader Ralph Villanueva will leverage his knowledge and experience in working with ISO standards to share some insights which can strengthen the audience’s cloud application security posture.

Key takeaway:
- Learn about ISO standards relevant to cloud application security.
- Discuss pointers for implementing the relevant aspects of these standards.
- Highlight ways to secure buy in from key stakeholders for implementation of these standards.

Optimizing cloud application security through relevant ISO standards

Software as a Service (SaaS) applications bring the promise of business agility and enablement. But like any technology that provides significant benefit, there are often security implementations that become overlooked. As your business grows and scales, so does the risk imposed at the identity layer across the SaaS estate. In this session, we will highlight the identity problem in SaaS; from human identities (internal employees, external vendors, third party contractors, partners, etc.) to machine identities (application-to-application connectivity, 3rd party OAuth applications, etc.). Attend this session to better understand the risks imposed on every identity within the SaaS estate, and pragmatic approaches to improve your posture.

The Human and Machine Identity Problem in SaaS Environments

As more organizations adopt microservices, containers, Kubernetes, and serverless architectures, the complexity of their IT environments continues to grow, creating an expanded attack surface. Given the dynamic and complex nature of cloud-native environments, how confident are you in your development and security teams' ability to identify and prioritize the most significant security risks and remediate vulnerabilities in a timely manner to reduce the risk of a security breach? 
 
To secure cloud-native applications, organizations use multiple tools from different vendors. However, these tools are often not developer-friendly, creating a fragmented view of risk. This results in an excessive number of alerts that can waste developers' time and delay remediation efforts.
 
Join this fireside chat to learn why you need an end-to-end cloud application security solution in today’s dynamic and complex multi-cloud environment. And why it’s essential to address the most significant risks first, reducing the risk of a breach and saving valuable time and resources when time is of the essence.
 
Key takeaways:
 
• Improve Visibility: Gain real-time insights into security issues across cloud assets to reduce compliance violations and expedite deployment of cloud-native apps.
• Contextualize Risks: Prioritize vulnerabilities that can have the most significant impact on cloud apps.
• Enable Security through Collaboration: Prioritize vulnerabilities through collaboration among teams to develop effective remediation plans.

How to Prioritize Critical Vulnerabilities to Protect Your Cloud Applications

Security imposes a huge workload on app development teams.  Regardless of how many mobile developers or security professionals your organization has, there’s a good chance it’s not quite enough in today’s evolving mobile threat landscape.  
There is just no single fix for the mobile app security problem that developers are facing. 
Criminals are continuously developing new mobile-specific attacks, 3rd party audits take time and effort, and regulatory changes have an impact on mobile security. 
So, what’s the solution? 

In this webinar, an impressive team of mobile app experts will share strategies to help organizations follow a mobile first mindset, which includes app shielding that keeps apps protected from unknown attacks, thus making efficient use of developers’ time. 

Key topics will include: 
- How to speed up app releases without compromising security
- Preparing for a future when users will download apps from any app store
- Introducing user-friendly zero-code technology that requires no development skills


Dan McLoughlin, Field CTO OneSpan
Lucas Gibbons, Senior Product Manager
Alexander Kuznetsov, Solutions Sales Manager
Zlatan Cekro, Senior Experience Engineer

Enhancing Mobile App Security: Strategies for Conquering Business Obstacles

In the last 10 years, Azure has become one of the most popular cloud platforms for businesses and organizations of all sizes. As the platform has evolved, so has the threat landscape. To understand the present cloud security landscape and predict the future, let's take a trip down the memory lane!

In this session, cloud security expert Karl Ots will discuss how Azure's security controls have evolved over time. Throughout the session, he will share best practices for securing your Azure infrastructure, applications, and data, so that you can build an architecture that stands the test of time.

Top 10 Azure security tips from 10 years of securing Azure applications

Automation is a growing security problem that most organisations don’t recognise as many have no way of identifying which “users” are real humans and which are bots. Taking advantage of this blind spot, hackers can easily automate or scale attacks, imitate human mouse usage, or leverage AI tools like ChatGPT to assist in malicious coding and phishing campaigns.
 
And, because moderate and advanced bots can easily evade your defences by posing as human users, MFA, WAFs, and CAPTCHAs are no longer enough to mitigate this threat.

Watch this Fireside Chat featuring David Warburton, Director at F5 Labs, the threat research division of F5, and Editor in Chief at ComputerWeekly Bryan Glick to access an in-depth discussion on the state of attacker automation and learn how to shore up your app vulnerabilities against emerging threats.
 
Additional agenda items include:
 
• The type of attacks bots and automation are capable of
• Future trend predictions for AI-based attacks
• Why cloud migration complicates the bot defence process

The Future of Attacker Automation and AI

With cloud architectures, protecting both the application business logic and the underlying application infrastructure is paramount. However, as applications are deployed across multiple cloud environments, they often fail to deliver the desired app-to-app connectivity and security.  To simplify and secure your applications in an increasingly complex infrastructure, you need to deploy a Web Application and API Protection (WAAP) solution that enables consistent security across multi-cloud environments.

In this session, you will learn how you can:

•    Deploy WAF, DDoS, bot defence, and API security functions across multiple clouds
•    Combine WAAP with cloud workload protection to secure the cloud-native infrastructure
•    Gain valuable insights into application threats by leveraging AI and ML capabilities

By watching this webinar, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

Protect Your Apps and APIs to Thrive in a Multi-Cloud World

Current IT environments and the reality of modern business practices have left organizations with no choice but to consider new security models. The need for security resilience and the ability for business leaders to protect the integrity of every aspect of their businesses so that they can withstand - not just survive - and emerge stronger from unpredictable threats or changes has never been greater. 

In this webinar, Enterprise Strategy Group’s Senior Analyst John Grady is in conversation with Doug Browne, Director for Cloud Security and SSE, APJC at Cisco Systems, to discuss why security service edge (SSE) is the best way that businesses can forge this security resilience. 

Join them to learn: 

- The security challenges that are forcing businesses to consider new security models 

- Drivers for SASE interest and the challenges and opportunities that SSE brings 

- Practical advice for planning and getting started with security service edge and SASE expansion 

- SSE use cases in Asia Pacific region. 

- Considerations for choosing vendor partners

Prioritizing SSE to Protect the Modern Digital Business

Tune into this session from industry thought leader Vincent Amanyi for insight on how to simplify you application security tooling and enable agility in your ecosystem. 

Attendees will come away with the knowledge to:
- Eliminate assumptions.
- Identify how to perform a comprehensive assessment.
- Strategy of implementing tools-based on complexities and evolution.

Considerations in application tooling

Only 8% of organizations have secured at least 75% of their cloud-native apps using DevSecOps (Enterprise Strategy Group).
 
DevOps is enabling faster deployment of more secure software to devices by tightly coupling development and operations functions. However, to ensure security, the DevOps pipeline itself must be secure. At the intelligent edge, mission-critical systems require that security is built into the development process for a true DevSecOps environment.

What you will learn:

- New security approaches for the emerging intelligent edge
- Methods for full lifecycle security for mission-critical systems
- Must-have development tools for security validation
- Lessons learned in the journey to build security into a DevSecOps environment

Security and the DevSecOps Platform: Approaches, Methods, and Tools

In today's digital landscape, ensuring the security of software applications has become paramount. With the rise in cyber threats and the potential for devastating breaches, organizations must adopt robust application security measures to protect their sensitive data and maintain user trust. 

This presentation from TD Bank's Pankul Chitrav aims to shed light on the critical role of application security tools and testing in fortifying software defenses.

Explore application security tools and testing to strengthen software defenses

Whether it is a new web application architecture creating new threat surfaces, new zero-day attacks challenging traditional security mechanisms, or the just the shortage of cybersecurity staff to keep track of it, organizations today are straining to defend against web application attacks and vulnerabilities.  The traditional ways worked no longer applies, and a new web application security paradigm is required to protect organizations against an emerging wave of web attacks.
 
Join this presentation to learn:
 
* What are the key trends in web application security, and what are the key challenges facing organizations
* How modern web application design architecture is creating new threat surfaces
* What are the criteria that web application security tools should meet, in order to protect organizations
* And how radware helps organizations defend themselves against emerging threats

Web Application Security is Broken. What Comes Next?

If shadow and zombie APIs are climbing your AppSec priority list, you’re not alone. Software development teams are increasingly using APIs for web applications and other needs, and that’s motivating attackers to find ways to exploit them.

In fact, security experts are predicting that APIs will continue to experience a growing number attacks. It’s a gap in application security testing that has become a growing problem for many teams.

This webinar will introduce our solution. Checkmarx has found a way to shift API security way left, giving AppSec teams complete API visibility and helping them fix problems earlier in the SDLC – faster and at a lower cost. Our experts will cover:

-   An explanation of shadow and zombie APIs
-   How Checkmarx identifies and fixes vulnerable APIs earlier in the SDLC
-   Remediation that prioritizes the vulnerabilities that represent real risks

Understanding Growing AppSec Concerns Around API Security

Web applications are moving from traditional back-end and front-end architecture, deployed in an organization’s physical data center, to modern multi-cloud, microservices, and Kubernetes architectures, opening up new threat surfaces along the way. 
 
How are you to, for instance, secure application vulnerabilities from supply-chain attacks when your data is dispersed across multi-cloud applications? How do you protect from vulnerabilities in 3rd and 4th-party libraries?
 
Join our experts deconstruct the most essential requirements for complete web application protection in the following Fireside Chat and explain: 
 
• New web application attack vectors, beyond the standard OWASP top 10
• How usage of 3rd and 4th-party libraries and APIs increases app vulnerabilities 
• The security and liability implications of using client-side logic and code 
• How Radware helps organizations protect their modern web applications.

Tune into this session to discover how to protect your web apps from these, and other, vulnerabilities.

How the New Web Application Architecture is Changing Web Application Security

In this in-depth talk, University of Washington's Deveeshree Nayak will discuss the benefits of implementing DevSecOps in businesses, emerging DevSecOps frameworks, and their use. 

Tune into this webinar to learn:
- What is DevSecOps?
- Why is this role important?
- How to pursue career in DevSecOps?
- Hiring and execution.

Ensure security with DevSecOps

Enterprises are increasingly relying on applications to drive business growth and success in the age of digital transformation. However, the rise of cyber threats has made ensuring the security of these applications more critical than ever before. Security concerns can often slow down digital transformation initiatives, but application security controls can help enterprises reduce costs and improve speed of delivery.

In this webinar, we'll provide a CXO's guide to application security in the age of digital transformation. We'll explore 
- Latest threats to enterprise applications and how to mitigate them.
- Risks associated with cloud-based applications and how to secure them. 
- How application security controls can reduce costs and improve speed of delivery. 
- Strategies and technologies to improve the security posture of enterprise applications.
- Role of DevSecOps in application security and how it can accelerate digital transformation efforts
- Best practices for integrating security into the development process
- How to balance security concerns with the need for innovation and agility in digital transformation initiatives.

A CXO's guide to application security in the age of digital transformation

Effective Application Security

In this webinar you will get insights into the latest data security trends, threats and emerging topics in the 2023 Thales Data Threat Report. Based on a survey of more than 3,000 IT security professionals across 18 countries around the world, the 2023 Data Threat Report presents a number of findings on top data security topics, including leading sources of data threats, ransomware attack trends, digital sovereignty, the threats of quantum computing, and challenges of cloud security - just to name a few.

Attendees will receive a free copy of the 2023 Thales Data Threat Report and will be able ask questions following the presentation by 451 Research, part of S&P Global Market Intelligence, who wrote the report.

Key Findings from the 2023 Thales Data Threat Report

Data Security

Cloud Security

Cybersecurity

Encryption

IT Security

Ransomware

Data Breach

Data Privacy

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Key Findings from the 2023 Thales Data Threat Report

Presented by

About this talk

Thales - Cybersecurity Solutions