Name: Victories, Challenges, and Unknowns: Threat Landscape 2025
Start: 2024-10-08T17:00:00Z
End: 2024-10-08T17:00:59.000Z
Location: BrightTALK
Rating: 4.9

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

Organizations excel at documenting incidents but fail catastrophically at remembering them. Between audits, hard-won lessons evaporate, cultural knowledge resets to zero and enterprises find themselves vulnerable to the same predictable risks that should have been eliminated months ago.

This session reframes security culture as a living control system where organizational memory becomes your strongest defense. Discover how to transform retrospectives into measurable feedback loops, quantify learning as risk reduction and embed institutional knowledge into governance frameworks that create compounding resilience rather than cyclical vulnerability.

Join Oksana Denesiuk, Senior Product Manager at Kaiser Permanente and ISSA Advisory Board Member, to explore proven methodologies for building unbreakable organizational memory.

Key Takeaways: 
- Track how lessons learned translate into behavioral change and improved security posture. 
- Build lasting organizational memory through structured post-incident processes that strengthen defenses over time.
- Measure how well your organization learns from incidents and translate that into reduced security risks.
- Transform retrospectives into measurable feedback loops that prevent incident recurrence. 
- Embed organizational knowledge into leadership and accountability models for sustained cultural transformation.

Transform Security Culture into Measurable Organizational Memory

Since technology cannot keep us completely protected, organizations must embrace a culture of cybersecurity to build true resilience. This cultural transformation is essential to safeguard against risks and ensure readiness to respond effectively when incidents occur.

This session explores how leading organizations are embedding cybersecurity into their values, attitudes, and practices. By fostering a culture of resilience, businesses can strengthen their ability to anticipate, adapt to, and recover from cyber threats. Learn why every manager has a pivotal role in shaping this culture and how to implement strategies that drive lasting change.

Join Dr. Keri Pearlson, Principal Research Scientist at MIT Sloan School of Management, to explore actionable steps for building a culture of cybersecurity that protects your organization and empowers your workforce.

Takeaways:
- Understand cyber resilience thinking and how it differs from traditional protection strategies.
- Discover key mechanisms for fostering an effective cybersecurity culture.
- Gain actionable insights for managers to enhance resilience at work and home.
- Learn from real-world examples of organizations successfully embedding cybersecurity into their culture.

Building Cyber Resilience Through Culture in 2026

Mergers and acquisitions create exponential cyber risk exposure, yet many organizations lack quantified risk frameworks to guide critical business decisions. As cyber threats evolve and regulatory scrutiny intensifies, executives need concrete data to balance growth opportunities against security investments.

Traditional risk assessments fail during rapid organizational change. This session reveals proven methodologies for translating cyber vulnerabilities into financial impact metrics that drive boardroom decisions. Learn to build communication frameworks that align security investments with business objectives while maintaining stakeholder confidence throughout complex organizational transitions.

Join Vincent Amanyi, Founder of Boleaum Inc, to explore actionable strategies for enterprise cyber risk quantification and communication.

Key Takeaways: 
- Develop risk appetite frameworks that identify, prioritize, and absorb organizational risks with minimal business disruption. 
- Master cyber risk quantification techniques that assign tangible dollar values to security threats across all business levels.
- Build structured communication models to effectively convey cyber risk criticality to diverse stakeholder groups. 
- Implement scalable cybersecurity benchmarking practices for growing organizations. 
- Create boardroom-ready risk reports that support strategic decision-making during M&A activities.

Quantify Cyber Risk Impact for Strategic M&A Growth

Breaches have become a daily reality. Dark web activities and emerging threat vectors outpace traditional defenses, creating blind spots that adversaries readily exploit. Without early warning systems, businesses remain vulnerable to sophisticated attacks that could have been prevented.

Effective Cyber Threat Intelligence (CTI) transforms raw intelligence into actionable insights that enable proactive defense strategies. This session demonstrates how to operationalize intelligence, map adversary tactics to business risks, and implement early warning systems that prevent breaches before they occur. Learn to distinguish signal from noise and convert threat intelligence into measurable risk reduction metrics that resonate with executive leadership.

Leverage Cyber Threat Intelligence for Proactive Risk Mitigation

Open-source software drives enterprise innovation, but unmanaged vulnerabilities create operational risks and regulatory exposure. As cyber threats evolve and compliance frameworks tighten, executives face mounting pressure to balance innovation speed with robust security governance.

Traditional approaches to OSS security often create friction between development teams and security requirements, leading to shadow IT practices and increased exposure. This session presents proven frameworks for integrating security into OSS workflows while maintaining developer productivity and meeting emerging regulatory demands like the EU Cyber Resilience Act.

Join Yesenia Yser, Security Engineer and Open-Source Advocate, to explore enterprise-grade strategies for OSS risk management.



Key Takeaways: 

Implement governance frameworks that protect OSS dependencies without slowing development
Create shared accountability between security, procurement, and engineering teams
Apply SLSA, SBOM, and OpenSSF standards to build enterprise-wide security trust
Balance regulatory requirements with collaborative open source community practices 
Turn OSS security management into a strategic business differentiator

Securing Open-Source Dependencies at Enterprise Scale

The current data security and privacy protection landscape is awash with tools, acronyms, buzzwords that promise to make data breaches and privacy incidents a thing of the past. Yet hotel chains, healthcare providers, banks, department stores and even governments constantly fall victim to data breaches, ransomware or nation-state attacks. 

The plain truth is that tools are only as good as the people that use them and the processes that go with it. Two thousand years ago, the Roman empire had better military tools than the nations they conquered. Yet through time, the Romans fell to the barbarians and are merely remembered through their ruins. Likewise, companies with the latest and most buzzworthy technology implemented still manage to fall victim to attacks. 

In this presentation, industry thought leader Ralph Villanueva will tap into over 15 years’ experience of data security and privacy protection to show why ultimately, the people behind the tools and the processes they use matter more in securing your organization’s data. 

Key Takeaways:
 - How to best deploy tools in the most cost-effective way to optimize benefits.
 - How to best deploy tools to mitigate data security risks from internal and external threats. 
 - The importance of a balanced and holistic approach to data security that equally considers people, processes and technology.

Tools are Nothing: Why People and Process Matter More in Data Security and Privacy

Data security has entered a new era, one defined by AI-powered threats, expanding cloud ecosystems, and evolving global privacy regulations. 

This session presented by TD Bank's Pankul Chitrav explores the critical shifts reshaping how organisations must protect sensitive information in a boundaryless digital world. We will break down the top risks, the essential capabilities of modern security architectures, and the must-have tools for protecting data across endpoints, cloud platforms, and AI workflows. From zero trust to automated posture management and advanced data discovery, you’ll learn what’s required to stay ahead of adversaries and maintain compliance. Whether you’re modernising your security program or building one from the ground up, this talk equips you with the insights needed to create a future-ready data protection strategy for 2025 and beyond.

Future-Ready Data Protection: Securing Modern Data Ecosystems in an AI-Driven World

Cyberattacks are continuing at pace and we're regularly hearing of new data breaches. But who is responsible for ensuring the security of personal data? 

Traditional data protection approaches are failing against modern attack vectors. Organizations need future-ready strategies that go beyond compliance checkboxes to create resilient security frameworks. In this session, we'll explore the current risks to personal data & privacy and delve into the range of models that can be used to protect your organizations critical assets.

This webinar will take you through examples of recent data breaches, identifying the challenges being experienced, learning from what went wrong and how best organizations can plan for the future. Such planning will investigate current good practice, adding some “steroids” to them such that organizations can hopefully stay in front of the next “breach”!

Steve Yates – Chairman of the Resilience Association, will share frontline experience about critical data assets security and protection of user privacy.  

Key Takeaways:

- Be aware of the challenges being experienced in the protection of data security & privacy;
- Understand how best to plan your data resources and capacity to meet tomorrow’s defense;
- Discover the core organizational elements needed for the establishment of a strategic, tactical and operational solution

Strengthen Data Security Strategy for Tomorrow's Resilience Defense

AWS infrastructure offers robust native security mechanisms, but the shared responsibility model places critical configuration burdens on app owners. This creates gaps that attackers can actively exploit through misconfigurations, privilege escalation, and cross-service vulnerabilities which can compromise entire cloud deployments.

Security automation emerges as an essential defense strategy for threat modeling, enabling businesses to enforce security best practices from deployment through ongoing operations. Automated security controls provide continuous monitoring, real-time threat detection, and optimized remediation across AWS services. This ensures a consistent security posture while reducing human error and response times.

Join Ernesto Marquez, Founder and Project Director at Concurrency Labs, to explore proven AWS security automation strategies for threat mitigation.

Key Takeaways: 

- Implement automated security controls that enforce best practices across AWS services 
- Deploy continuous monitoring and real-time threat detection for multicloud environments 
- Configure automated remediation workflows for common security vulnerabilities 
- Integrate AWS security automation tools into comprehensive threat modeling frameworks 
- Establish governance policies that maintain security consistency across cloud deployments

Deploy Automated AWS Defenses for Threat Prevention

As cloud supply chain attacks escalate in sophistication, traditional SBOMs alone prove insufficient for comprehensive security. While SBOMs provide valuable component inventories, they lack runtime verification capabilities—creating a critical blind spot that malicious actors increasingly exploit. This gap between static analysis and runtime behavior represents one of the most significant vulnerabilities in modern cloud environments.

The "Bill of Behavior" (BoB) approach addresses this challenge by providing vendor-supplied profiles of expected runtime behaviors. Generated using eBPF technology, BoBs codify legitimate syscalls, file access patterns and network communications. This enables immediate anomaly detection without custom rule creation, allowing organizations to verify software integrity throughout the supply chain and during execution, dramatically reducing the attack surface while simplifying security operations.

Join Dr. Constanze Roedig, Key Researcher at SBA-Research and Founder of Fusioncore.ai, to discover how this emerging standard complements existing SBOM frameworks to create verifiable trust in your cloud ecosystem.

Key Takeaways:
- Understand how Software Bills of Behavior (SBoBs) create verifiable trust between vendors and clients
- Learn practical implementation strategies using existing OCI distribution standards
- Discover how BoBs significantly reduce attack surfaces across both runtime and supply chain vectors
- Explore immediate benefits of receiving vendor-supplied behavior profiles with software packages
- Discover how CNCF Kubescape allows anomaly detection out of the box

Beyond SBOMs: Runtime Verification for Bulletproof Cloud Supply Chains

Organizations are rapidly adopting AI technologies without fully understanding the security implications. This is creating unprecedented vulnerabilities in cloud environments. In turn, with AI accessible to all stakeholders, the human factor has become the weakest link in cybersecurity defense strategies.

This session addresses critical considerations for IT and cybersecurity leaders to balance business innovation with risk management. Learn how to establish ethical AI frameworks, implement proper access controls, and build awareness programs that protect your organization while enabling AI adoption.

Join Kathleen Mullin, vCISO and Consultant, to explore practical strategies for securing AI in cloud environments while maintaining business agility.

Key takeaways:

• Define clear RACI matrices for AI business risk ownership and accountability 
• Assess whether AI solutions truly meet business requirements vs. alternative approaches
• Establish data governance and access controls specifically for cloud-based AI systems 
• Develop comprehensive AI awareness programs for organizational stakeholders 
• Evaluate current and future cloud AI risks within your security framework

Considerations: Securing the Cloud And In Specific AI

As organizations accelerate cloud adoption, sophisticated security technologies often create a false sense of protection while the most significant threats emerge from within. Human behaviour continues to be the weakest link in cloud security, not due to malicious intent, but through everyday mistakes that inadvertently expose critical systems.

When they create friction, security measures designed to protect can inadvertently increase risk as users will find shortcuts to achieve their legitimate objectives. This session explores the psychology behind user decision-making and reveals how threat actors exploit human nature to bypass cloud defenses, turning legitimate business processes into attack vectors.

Join Simon Ratcliffe, independent management & technology consultant, to discover practical strategies for human-centered cloud security.

Key Takeaways:

- Identify psychological triggers that make users vulnerable to cloud-based attacks 
- Recognize how security friction drives risky user behaviors and workarounds
- Design user-centric security that reduces human error without compromising protection 
- Develop indicators to detect insider threats before they escalate 
- Build security awareness programs that create lasting behavioral change

Securing the Human Element: Why People Remain Cloud Security's Top Vulnerability in 2025

Insider threats are one of the most challenging security risks in multicloud environments, where authorized users can exploit fragmented access controls and limited visibility across platforms. When organizations lack comprehensive oversight of user activities, data flows and privilege escalation paths, the risk posed by human error and malicious insiders is much greater.



Multicloud architectures amplify insider threat risks through inconsistent identity management, scattered audit trails, and complex permission structures that create blind spots for security teams. Strategic threat modeling designed around insider risks enables organizations to map user access patterns, identify privilege abuse scenarios, and implement behavioral monitoring across all cloud platforms before incidents occur.



Join Sandeep Tripathi, IT Solutions Designer at Daimler Truck AG, to discover systematic approaches for detecting and preventing insider threats in complex multicloud environments.



Key Takeaways: 

- Identify insider risk scenarios across cloud platforms using threat modelling frameworks
- Implement comprehensive user behavior analytics and cross-cloud activity monitoring
- Limit insider threat impact and lateral movement using zero-trust access controls.
- Develop incident response protocols for insider-driven security breaches
- Create governance frameworks for managing privileged access in multicloud environments

Mitigate Insider Threats in Multicloud Through Strategic Modeling

Every minute your cloud infrastructure grows, it creates new entry points for potential attacks. As organizations rush to embrace cloud innovations, they're unknowingly building digital labyrinths where traditional security measures fall short.

Cloud security threats are often perceived as purely technical challenges, but the human factor remains one of the most significant and underestimated risks. Misconfigurations, weak passwords, phishing attacks, and inadequate training open doors to breaches even in sophisticated environments. Employees inadvertently expose sensitive data through social engineering, while administrators overlook crucial updates. Insider threats pose significant risks when cloud systems are accessible from anywhere.

Join Jyotirmayee Pradeep Kumar, Vice President of Cloud DevOps at a leading global bank, to explore human factors in cloud security threats.

Key Takeaways: 
- Human error as the leading cause of cloud security breaches 
- Phishing attacks and social engineering threat vectors 
- Managing insider threats in distributed cloud environments 
- Essential security awareness training and culture development 
- Zero Trust architecture implementation strategies

Managing Human Risk in Cloud Security Operations

AI technologies are simultaneously completely transforming business operations and creating new security vulnerabilities that cannot be addressed by technical safeguards alone. When implementing AI-driven solutions, human oversight is the biggest differentiator between secure innovation and catastrophic data breaches. As such, human intervention is both the biggest vulnerability and most significant defense in organizational security architectures.

To address this challenge, IT leaders can build a security champions program—a network of engaged employees who understand AI-specific threats and serve as frontline defenders. This group bridges the gap between security teams and other business units. They spread security awareness throughout the organization while maintaining operational efficiency.

Join Vincent Amanyi to discover proven strategies for empowering a team of security champions who can help safeguard your organization's AI initiatives and digital assets.

Key Takeaways:

- Learn to assess AI-related security risks across all business functions
- Design a people-centric security strategy that combines technical controls and human intelligence
- Establish and structure an effective Security Champions Committee with clear roles and responsibilities

Fortifying the Human Firewall: Cultivating Security Champions in Today's AI Landscape

In today's threat landscape, where the average data breach costs organizations $9 million, your employees represent both your greatest vulnerability and your strongest defense. As AI-powered threats become more sophisticated and remote work expands the attack surface, traditional security awareness approaches are failing to create lasting behavioral change. The human element remains implicated in over 80% of breaches, yet most training programs still focus on compliance checkboxes rather than cultivating security champions.

Effective security awareness requires a strategic approach that addresses psychological barriers, leverages behavioral science and creates sustainable security habits. By reimagining how we engage employees—from executive leadership to frontline staff—organizations can transform their security culture from a perceived burden into a competitive advantage that measurably reduces incident rates and response times.

Join Ralph Villanueva, with 15+ years leading enterprise security awareness programs, to discover proven methodologies that transform employee behavior.

Key takeaways:

- Implement psychological triggers that convert passive training participants into active security defenders
- Design role-specific awareness programs that address the unique risks of different departments
- Measure training effectiveness beyond completion rates with behavior-based security metrics
- Secure executive buy-in by connecting awareness initiatives to tangible business outcomes
- Deploy just-in-time learning techniques that deliver training when employees are most receptive

Transforming Human Risk: 10 Battle-Tested Strategies for Modern Security Awareness

Organizations are investing heavily in advanced security tools. But the most critical—and vulnerable—component of cybersecurity defense is people. As AI-driven attacks and quantum-era risks emerge, the gap between technological capabilities and human cognitive readiness threatens to widen dramatically.

Security professionals face unprecedented pressure when responding to incidents. Even with robust detection and recovery tools, factors like stress, fatigue and decision paralysis can significantly increase recovery times and amplify damage. This presentation introduces an expanded MTTR formula incorporating the "Human Cognitive Factor"—a groundbreaking approach that addresses the psychological dimensions of security response that technology alone cannot solve.

Join Sandra Estok (Founder & CEO, Way2Protect) to discover why preparing employees will determine your organization's survival in the 2026 threatscape.

Key Takeaways:

- Master the expanded MTTR formula that quantifies how human cognitive factors impact recovery timelines
- Identify early warning signs of team cognitive impairment before they compromise your security posture
- Implement practical strategies to build psychological resilience and decision-making clarity under pressure
- Establish metrics that measure human performance alongside technical metrics for comprehensive security assessment
- Learn how leadership decisions about culture, team structure, and psychological safety directly influence threat response effectiveness

Strengthening Your Human Firewall: Closing Cognitive Security Gaps Before 2026

Both endpoint security and endpoint management are becoming more challenging, largely driven by an increasingly complex threat landscape and a greater number (and assortment) of both managed and unmanaged endpoint devices. This, combined with an overabundance of tools deployed to deal with these threats and devices, has created a false sense of security and the inability to process all the data being collected.

 To combat this, organizations are making efforts to integrate the teams, tools, and processes involved, and these efforts are having a positive impact on visibility and awareness. Similarly, organizations are eager to adopt new tools like Autonomous Endpoint Management to help them achieve their goals.

In this session from Endpoint Management and Security Gabe Knuth, you’ll learn both what research reveals about the challenges facing organizations, the risks associated with the status quo, and the path forward to improving overall endpoint management and security.

Overcoming Increasing Endpoint Security & Management Challenges

Despite the advent of so much emerging technology like AI in cybersecurity, the continuing success of data breaches and cyber crime through social engineering and tech complacency is a sobering reminder that so called “low tech” IT security basics still matter. 

In this presentation, Hilton's IT Security and Compliance Analyst Ralph Villanueva will discuss recent cyber security threats and incidents that made the headlines. Attendees will learn what they can do to mitigate these threats in their companies as well as what tools and techniques they can use - without breaking the bank or summoning the AI gods

AI-Enabled Cybersecurity is Overrated: Why Low Tech IT Security Basics Still Matter in 2025

Join us for an enlightening webinar where we delve into the strategic merger of Cisco and Splunk, and how it revolutionizes the landscape of cybersecurity and data analytics.
Learn about the power of data at the network layer, now enhanced and secured by Splunk, and how the convergence of data and observability provides a comprehensive view for more resilient outcomes.
In this session, we will explore how aggregated instances can be correlated to gain deeper insights into performance metrics, and how the combination of XDR (Extended Detection and Response), data telemetry, and analytics is paving the way for the Security Operations Center (SOC) of the future. We will also discuss the role of integrated AI in data security, and how it assists, augments, and automates tasks to enable quicker response times and more effective outcomes.
Understand how the right security approach, empowered by AI, can help security analysts and incident response teams respond faster and more efficiently to threats.

Unified Defense: The Power of Cisco & Splunk in Data Security and Observability

Artificial intelligence continues to reach new heights. But this technology can and frequently is misused for fraudulent activities. New attacks and modifications occur daily. For some, AI is a perceived boon. Others strongly argue that AI is a menace. Either way, AI is here to stay. By embracing this technology responsibly, we can effect a constructive change and enhance more efficient outcomes.
 
Powerful AI can analyze, detect, and react against fraudulent activities. A holistic cybersecurity approach to build ethical AI can help mitigate various risks via a high quality, well-trained multimodal AI model, that includes threat detection and user and entity behaviors analytics that can respond efficiently, effectively and ethically against bad actors.
 
In this talk, industry thought leader Mayra Paredes will describe three of the most repetitive challenges presented by AI and how the cybersecurity industry can embrace them to build a proactive response against the threat landscape.
-              AI Ethics: Morality Bias, weaponization, liability stereotypes. Integrate diverse contributors to build this technology.
-              AAA Systems: Authentication, Authorization and Accounting. Build an Ethical core system.
-              Lack of expertise in the workforce: Embrace AI to foster diverse talent.
 
Readers will come away from this talk with the different nuances surrounding AI and its potential application in cybersecurity. They will also be able to create clear management policies to restore trust in digital environment by building ethical AI.

Tackle 3 Common AI Challenges to Build Effective Security Programs

Join us for an exciting webinar as we unpack the 2024 SonicWall Mid-Year Cyber Threat Report! Discover a revolutionary new way of measuring cyber threats, delve into the rise of costly Business Email Compromise (BEC), and uncover the most common network attacks causing chaos globally. Don’t miss this exciting session—cybersecurity has never been more fascinating!

2024 SonicWall Mid-Year Cyber Threat Report

AI is here to stay and will increasingly become a standard component in the workplace. As part of the 'The 2025 Threatscape' Summit, Enterprise Strategy Group and SentinelOne are hosting this fireside chat on the benefits and challenges AI will bring to cybersecurity and will explore strategies on how you can navigate the evolving AI security landscape.

The session will cover:
• AI’s Evolution in Cybersecurity: How AI has rapidly advanced from early machine learning use cases to powerful deep learning, LLMs, and generative AI, creating a new arms race in threat detection
• AI-SIEM: How you can leverage cloud-native data lakes and generative AI to enhance detection speed, reduce remediation times, and bridge the cybersecurity skills gap
• AI in Threat Hunting: How AI is revolutionizing threat hunting through advanced pattern recognition and hyperautomation, enabling security teams to detect even the most evasive threat tactics
• AI-Powered Security in Hybrid and Multi-Cloud Environments: AI technologies provide a unified security approach across hybrid and multi-cloud environments, supporting a shared responsibility model between providers and users

Don’t miss your chance to learn how to navigate AI challenges in cybersecurity.

Navigating AI in Cybersecurity: The 2025 Threatscape

AI holds great potential for enhancing cybersecurity, offering advanced threat detection, rapid response capabilities, and predictive analytics. However, recent PhD research reveals unique challenges and risks associated with integrating AI into cybersecurity strategies. When attackers have spent 40 years fooling our automated systems, and there is a great risk that AI adoption will greatly widen the threat landscape.

This webinar from industry thought leader will explore both the promises and perils of AI-driven cybersecurity solutions, highlighting key findings from cutting-edge research. Attendees will gain insights into the effectiveness of using AI safely in combating cyber threats, the vulnerabilities AI systems themselves introduce, and the ethical considerations that come with widespread AI deployment in cybersecurity.

The Promises and Perils of Using AI for Cybersecurity

Join us for a frank, expert discussion between Alex Stamos, Adriana Corona, and Ely Kahn as they:

Discuss the practical implications of emerging AI technologies on cybersecurity;
Provide guidance for CISOs on AI Risk Management; and
Present the most in-depth overview of Purple AI to date, including new game-changing announcements! 


Mark your calendars and don't miss the chance to hear from these industry experts and to get an exclusive demonstration of how Purple AI streamlines threat hunting and accelerates the SOC, all in natural language.

CTA>> SAVE MY SPOT

If you're ready to integrate the power of generative AI into your package, simply request your designated representative HERE.

Purple AI GA: Detect Earlier, Respond Faster, & Stay Ahead of Attacks

AI could contribute up to $15.7 trillion to the global economy by 2030, according to PwC. However, your organization needs to figure out how to secure this technology in order to reap its benefits.
 
In this webinar, Ravi Ithal, Co-Founder and CTO of Normalyze will provide a step-by-step guide to securing Large Language Models (LLMs). 

Key topics covered:
A brief introduction to LLM apps
How LLM security is different and what makes LLMs hard to secure
A framework for securing LLMs
How to implement LLM security measures

A Step-by-Step Guide to Securing Large Language Models (LLMs)

In today’s rapidly evolving threat landscape, where AI dominates the headlines, enterprises face the critical challenge of safeguarding sensitive data, networks and applications from AI-driven attacks. Whether you’re in financial services, healthcare, government, or a SaaS provider, join our session to explore the practical strategies employed by attackers. We’ll equip you with actionable best practices to defend against these threats and provide insights into protective measures. The following topics will be discussed:
 
 - GenAI Attack Tools: Understand how attackers leverage AI tools to create new attack vectors.
 - Adaptive Attacks: Discover how AI shortens the time-to-attack by tailoring assaults to specific target characteristics. Stay ahead of adaptive threats with proactive defenses.
 - Sophisticated Threats: Explore real-world examples of attacks that bypass existing defenses. Gain insights into the evolving threat landscape and stay prepared.
 - Best Practices: Learn practical steps to defend against AI-driven attacks.

Fortifying Enterprise Defenses Against AI-Powered Threats

As AI systems based on large language models become more powerful and widespread, more cybersecurity challenges emerge. From jailbreaks to indirect prompt injections, they are vulnerable to a wide array of LLM-specific threats. However, all these problems can be boiled down to one single issue: LLMs are probabilistic algorithms that are inherently unreliable, just like any other ML system. Does it mean they cannot be useful? Absolutely not! In this talk, we will discuss the challenges of secure and reliable LLM-based applications and the way to make them safer and more aligned with your business goals.

Unreliable AI: Addressing the Cybersecurity Risks of LLM-Based System

Over the past decade, attribution has become both harder and less relevant. Tools and tactics are shared and stolen across attackers, blurring the lines between one adversary and the next. At the same time, the speed of attacks has increased, allowing defenders less and less time to use knowledge of the attackers to their advantage. And when planning their defenses, defenders can’t afford to tailor their approach according to what yesterday’s adversaries did last week.

Attribution matters, but to the average organization, it doesn’t matter nearly as much as resiliency.

Based on over two decades of cyber experience spent at places like Mandiant, CISA, and the White House, Rex will explain when the threat matters and when you’re better off focusing elsewhere.

By attending this live broadcast, you'll learn:

· The potential and limitations of threat-based intelligence to shape your defensive strategy

· Select use cases for the operationalization of threat intelligence

· Why focusing on foundational security elements is a better spend of your limited resources

The Primacy of Resiliency: Why (Most) Orgs Shouldn’t Focus on Threats

Adlumin’s Security Operations Center (SOC) is on the frontlines of cybersecurity, defending our customers against thousands of attacks daily. In August 2024, our SOC team encountered "Fog," a new variant of the STOP/DJVU ransomware family, which infiltrated a compromised VPN at a financial institution—the first attack of its kind in the sector. Thanks to Adlumin’s technology, the threat was swiftly contained, and the attackers were locked out before any damage could be done.

 Join Adlumin’s expert Mark Sangster, DPO and Chief of Strategy, as he walks you through some of our SOC’s most significant threat interceptions, including the Fog ransomware attack and how Adlumin’s Security Operations Center as a Service (SOCaaS) solution thwarted these attacks in their early stages.

Key Takeaways:
- An overview of the most notable threat actors Adlumin’s SOC team encountered
- A step-by-step breakdown of the Fog data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack
- Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks

Register today to gain expert insights and actionable strategies to keep your organization from the ever-present threat of global bad threat actors. Plus, all webinar attendees will have the chance to assess their current ransomware defenses and one lucky participant will win a $200 Visa gift card!

Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025

In today’s rapidly shifting cybersecurity landscape, the rise of open-source software (OSS) tools has dramatically altered cyber adversaries' tactics. Understanding how attackers leverage these tools and how you can use them to improve your organization’s security posture is crucial for building effective defense strategies.

Join Sysdig's Cybersecurity Strategist, Crystal Morin, and Alessandro Rizzo from the Sysdig Threat Research team for an insightful fireside chat. We will explore the sophisticated use of OSS tools in modern cyberattacks and gain a deeper understanding of how threat actors are reshaping their strategies and increasing the scale of their operations through OSS technologies.

Key topics include:
The Evolution of Cyber Threats: Discover how cybercriminals are shifting from traditional attack methods to more advanced, scalable tactics with OSS tools.
Inside the Attacker’s Toolkit: Explore the most popular OSS tools used by cyber adversaries today and how they exploit vulnerabilities in their targets.
Case Studies and Real-World Examples: Analyze incidents like the CRYSTALRAY and PURPLEURCHIN attacks to understand how OSS tools are critical in high-profile cyberattacks.

Defensive Strategies: Learn about cutting-edge OSS tools and techniques for detecting, preventing, and responding to threats in an environment where attackers increasingly rely on OSS tools.

This fireside chat is ideal for cybersecurity professionals seeking to understand the evolving threat landscape or those curious about the role of OSS in modern cyberattacks. Don’t miss this opportunity to stay ahead of the game and enhance your defense strategies against ever-evolving threats.

The Evolution of Cyber Threats: How Open Source Tools Are Changing the Game for Better and Worse

With the CrowdStrike incident impacting so many organizations, it is imperative to understand your organizations’ cyber incident response framework especially when you screen goes “blue”!

According to a snap poll conducted by Aon, 83% of risk professionals said their organisation had an incident response plan in place. But when CrowdStrike occurred, 24% said these plans underperformed. The entire poll of 500 risk professionals from across the UK and Europe revealed that 62% were directly or indirectly impacted by the global outage.

This presentation will focus on the 2025 to 2030 threatscape and considerations for an “joined-up” incident response framework that your organization should consider if it hasn’t already. 

Tune into this session presented by business continuity, disaster recovery, cyber resilience and major incident expert Steve Yates, as he shares tips to prepare for the 2025 threatscape. Yates will explore current operational cyber incident response areas, identified from more recent events such as dependency mapping, scenario planning and testing, and the core structure that your organization should have in place.  

By the end of the session, you will be able to:
- Know the importance of dependency mapping, specifically for the “before”, and the challenges that will happen if not established for the “after.”
- Form an understanding of how scenario planning and testing can be become critical in the preparation for significant cyber disruptions and provide the need for resources and capacity capabilities. 
-  Understand the core organizational components needed for a cyber incident response framework.

What Do You Need to Consider for Your Cyber Incident Response Framework?

Cyber threats may have names that sound imaginative—like Slippy Spider, Ember Bear, or Ethereal Panda—but their impact on today’s IT and OT systems is very much real. Join us on a journey to discover the hidden creatures lurking in the digital realm, exploring the ever-evolving landscape of cyber threats, defenses, and the critical role of threat intelligence in this age of digital monsters.

Fantastic Cyber Beasts and Where to Find Them: From Current Threats to Future Defenses

APIs are fundamental to the digital economy, serving as the bridge to modernise legacy apps. While APIs are subject to the same attacks that target web apps, API-based architectures introduce unforeseen risk from an ever-expanding ecosystem of third-party integrations.
 
Join us for an insightful session on the critical components of API security. We'll cover the risks associated with deploying APIs and explore how you can safeguard your APIs against potential threats and vulnerabilities.

Whether you're managing a single cloud or a complex multicloud architecture, this webinar will equip you with the knowledge and tools you need to stay ahead of the curve in API security.

Navigating API Security Challenges

In this exclusive fireside chat tailored for MSPs, MSSPs, and industry partners, we’ll dive into the key cyber security trends from 2024 and explore the emerging threats that will define 2025. Learn how to anticipate client needs by understanding whether crypto-jacking is truly on the decline or if it's time to reinforce anti-phishing defenses yet again. Explore the impact of AI on encrypted threats and discover new opportunities to enhance your service offerings. This session will equip you with the insights needed to stay ahead of the curve, drive business growth, and protect your clients in the rapidly evolving cyber threat landscape of 2025.

Cyber Security 2025: Emerging Threats & Strategic Opportunities for MSPs and MSSPs

In the ever-evolving landscape of DevOps, the paradigm is now shifting - where security is taking the central stage. With vast surface areas including containers, cloud, repositories and third party components, cyber threats became prominent then ever before in DevOps. 

Our presentation delves into the evolution from traditional DevSecOps to the advanced elimination of threats in each possible way in every stage of DevOps: Build, Test, Deploy and Operate. Lets see how we can prevent cyber threats with secure cloud architecture, continuous logging and monitoring, required approval processes in place, code scanning along with manual reviews as well ensuring heightened security at every step.

In this session, join Jyotirmayee Pradeep Kumar (Vice President - Cloud DevOps at a well-known global bank) as she unravels the stages of elimination of cyber security threats at each phase of DevOps. Topics for discussion include:
- DevOps landscape and different stages associated with it.
- Surface area of cyber threats in DevOps.
- Security breaches within the DevOps framework.
- Practical strategies for eliminating cyber threats with shift-left security implementations. 
- Diverse approaches to automate security integration into DevOps practices.

Eliminating Cybersecurity Threats: Inspection of DevSecOps

The 2025 Threatscape

The future is uncertain, but many cyber threats are largely predictable. In the cybersecurity arena, our victories make a difference and cause some threats to fade into history. However, our ability to stay ahead of cyber threats has its ups and downs, influenced by numerous factors. Meanwhile, threat actors continually evolve their techniques and approaches.

Drawing on more than a quarter century of experience in cybersecurity, industry thought leader Alex Holden invites you to join him on a journey through the evolving threat landscape. We'll examine the latest trends in threat intelligence and advancements in AI, and we'll focus on building the most effective cyber defense strategies as we approach 2025.

Victories, Challenges, and Unknowns: Threat Landscape 2025

Cyber Threats

Threat Landscape

Threat Intelligence

Cyber Defence

Cyber Defense

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Victories, Challenges, and Unknowns: Threat Landscape 2025

Presented by

About this talk

Information Security