Name: Beyond the Endpoint – Tackling Your Biggest Cybersecurity Problems
Start: 2023-04-04T13:00:00Z
End: 2023-04-04T13:00:52.000Z
Location: BrightTALK
Rating: 4.8

We help protect organisations from today’s most pervasive cybersecurity threats. With us on your team, you’ll rest easy knowing your mission-critical assets are safe from threat actors.

As organizations look to build the right security operations strategy for their business, they often need to evaluate tradeoffs between consolidating on a single technology stack vs an open platform. Join SVP of Product Management, Kyle Falkenhagen, as he discusses the concept of taking an open approach to cybersecurity and what to consider when executing your security vision for the next 3-5 years.

What We'll Cover:
 -- The definition of an open cybersecurity approach to security operations
 -- Advantages to using an open framework, such as maximizing the value of your security investments today for flexibility in the future
 -- How to evaluate where and when to consolidate

Let's Talk SOC: Ep 22: Taking an Open Approach to Cybersecurity

An organization’s security strategy is an enterprise-wide business decision that requires understanding your risk profile and how you would respond in the event of an attack. Join VP of Marketing Stacy Leidwinger as she discusses the top elements to raise hygiene, the biggest risks, and the importance of aligning business and security teams.

What We'll Cover:
 -- Three core tasks to elevate security hygiene
 -- The top vulnerability and risk factors
 -- The impact of cybersecurity spending and cyber insurance

Let's Talk SOC: Ep21: Risks and Ramifications of Cyberattacks

As threat actors continue developing new ways to target organizations, it’s critical for security leaders to have the right threat intelligence and know how to use it. Join Director of Governmental Partnerships and Director of Threat Research at Secureworks Alexandra Rose as she discusses what threat intelligence is, why security leaders need it, and how they can use it to reduce organizational risk and respond to threats.

What we'll cover:
 -- Why it’s crucial to have threat intelligence
 -- How threat intelligence informs strategic decision making for security leaders
 -- How leaders can maximize intelligence to reduce risk
 -- What emerging threats should leaders know and how to prepare their organizations to respond

Let's Talk SOC: Ep20 - The Value of Threat Intelligence for Security Leaders

Managed Detection and Response (MDR) solutions deliver powerful threat monitoring, detection, investigation, and response capabilities. But in an ever-evolving threat landscape, organizations need more proactive capabilities to stay ahead of threat actors. Join us for this webinar, hosted in collaboration with QKS Group, to explore how MDR can go beyond the basics of traditional threat detection. Get the Secureworks perspective on MDR solutions and how they should proactively identify potential threat exposure. And discover the types of preemptive measures that mitigate risk and fortify cyber resiliency before a threat actor strikes.

In this informational webinar, you will:
 -- Learn how proactive features can accelerate the impact of MDR solutions
 -- Discover the role AI plays in driving efficiency in threat detection, investigation, and response
 -- Get insights into why it’s important MDR vendors understand your security priorities and goals

Shift Beyond Threat Detection to Proactive Measures

Over the past year, the North Korean IT worker scheme has adapted with deepfakes and AI, revealing new layers of deception. In this Cyber Short, the team will shed light on the intricate workings of state-sponsored groups like NICKEL TAPESTRY.

The Secureworks team discuss how these groups are innovating fraud tactics and what it means for organizations worldwide.

Secureworks Cyber Shorts: North Korean IT Workers: Unraveling Deeper Fraud

Discover how North Korean cyber threat actors are infiltrating organizations worldwide by posing as legitimate IT professionals. Join Secureworks CTU™ experts as they delve into this emerging threat, uncovering the latest developments in ongoing infiltration schemes. This webinar will detail the unique approach and toolset observed in incidents where DPRK nationals have fraudulently gained employment at unwitting organizations.

In this informational webinar, you will: 
 -- Gain insights into how infiltration schemes operate
 -- Explore the warning signs for fraudulent job applicants
 -- Learn about preventative measures to avoid hiring fraudulent DPRK workers

Inside the Threat: Secureworks CTU Analysis | Episode 5: Unmasking North Korean IT Worker Infiltration Schemes

With a 30% increase in new ransomware groups last year, organizations need comprehensive security solutions to stay ahead of cyber threats. Join us for an insightful webinar, hosted in collaboration with Frost & Sullivan, to take a deep dive into the extended detection and response (XDR) landscape. Get the knowledge and tools you need to evaluate solutions effectively, prioritize essential capabilities, and maximize the value of your investment post purchase. Whether you're in the process of selecting an XDR solution or looking to enhance the effectiveness of your current deployment, this webinar will provide you with actionable strategies and expert guidance to strengthen your security posture.

In this informational webinar, you will:
 -- Get expert insight on current market trends, key players, and the critical features that differentiate leading XDR solutions
 -- Learn how to assess XDR solutions based on your organization's unique needs, including integration capabilities, scalability, and ease of use
 -- Discover which XDR capabilities are essential for your security posture and how to prioritize them to address your most pressing security challenges
 -- Gain best practices for deploying and optimizing XDR solutions to ensure you get the most out of your investment

Maximizing Your Security with XDR: Essential Strategies and Guidance with Frost & Sullivan

Watch for an insightful Predictions Round Table with Secureworks experts as they delve into the future of cybersecurity in 2025.

Our Counter Threat Unit research team, featuring Rafe Pilling, Chris Yule, and Sarah Kern, and joined by Stacy Leidwinger, will explore the most significant threats on the horizon—from ransomware to state-sponsored adversarial tactics.

Learn how your business can stay ahead and be proactive in cyber preparedness.

Secureworks Cyber Shorts: 2025 Predictions Round Table

This episode of Cyber Shorts dives deep to decode the hype around deepfakes.

We unravel insights on how deepfakes are being used in robo-calling in the US, assess their prolific nature and advancement, discuss the potential risks they pose to organizations and consumers, and provide tips for identifying a deepfake.

Secureworks Cyber Shorts: Behind the Deepfake Hype

In this episode of Cyber Shorts, we take a deep dive into the takedown of the prolific ransomware group LockBit. We share the latest update around the takedown, its impact on cyber crime, and advice for organizations to remain cyber safe from ransomware.

Secureworks Cyber Shorts: LockBit: The Ransomware Takedown

China's Cyber Espionage Tactics Exposed. Learn how the latest sanctions impact global security and what your business must do to shield itself from the silent cyber war.

Secureworks Cyber Shorts: China and Cyber Espionage: Understand the Threat

The Secureworks® Counter Threat Unit™ (CTU) research team analyzes security threats to help organizations protect their systems, people, and data. 

Watch this Cyber Shorts with Stacy Leidwinger and Alexandra Rose to hear the top three insights around cybercrime, multi-factor authentication bypassing techniques, and malware in unauthorized downloads.

Secureworks Cyber Shorts: The Latest in Cyber Threats: MFA Bypass and Malware from Suspicious Downloads

Secureworks Counter Threat Unit™ Senior Security Researcher, Mark Osborn, examines China’s ongoing use of cyber intrusions to further its political, military, and economic aims. Mark sheds light on the use of cyber for intelligence collection by the Chinese state, taking a high-level look at the Chinese cyber threat landscape and digging down into specific examples of threat groups and their targeting methods. He also examines the role of the Chinese Communist Party (CCP), the main driving force behind intelligence collection.

In this informational webinar, you will:
 -- Learn about the structures in China responsible for cyber intrusions
 -- Gain insight into the evolution of China’s intelligence collection operations
 -- Discover whether your organization could be a prime target for Chinese espionage

Chinese Cyber Threats in the Age of the Xictionary

Secureworks® CTU™ experts provide an update on Operation CRONOS, the ongoing law enforcement disruption of one of the largest and most prolific ransomware groups of recent years, LockBit. This webinar will build on the detail provided in Episode 1 of Inside the Threat by discussing the most recent law enforcement action which uncovered links between LockBit and notorious Russian cybercriminal group, EvilCorp. 

CTU researchers will also look at the impact of this latest phase of Operation CRONOS on both the operators of LockBit and the wider ransomware ecosystem, providing practical advice for safeguarding your organization from ransomware.

In this informational webinar, you will:
  -- Gain insights into the latest developments in the ongoing disruption of LockBit and the newly discovered links to EvilCorp. 
  -- Discover how continued law enforcement activity has impacted the wider ransomware ecosystem and what this means for the threat landscape. 
  -- Learn how to protect your organization from ransomware attacks.

Inside the Threat: Secureworks CTU Analysis | Episode 4: LockBit Disruption Update

The Secureworks Counter Threat Unit researchers have identified a growing threat: Adversary-in-the-Middle (AiTM) attacks. These sophisticated threats are on the rise, and it’s important to understand them to defend against them.

Watch this Cyber Shorts as Rafe Pilling and Stacy Leidwinger dissect the mechanics of AiTM attacks, their implications, and actionable steps you can take to safeguard your organization.

Secureworks Cyber Shorts: The Rise of Adversary-in-the-Middle Attacks

Many mid-market organizations face security-specific challenges as they grow. It’s not easy protecting an increasingly unique and complex environment without enough resources or staff to confidently keep up with the threats they are facing. So how can these organizations change from reactive to proactive to increase their vigilance, improve their resiliency, and gain strategic guidance to elevate their security programs? Unfortunately, many managed detection and response (MDR) solutions fall short of being able to provide a flexible and holistic solution that doesn’t break their cybersecurity budget.

This on-demand webinar covers the challenges mid-market companies face, what a more tailored MDR solution should deliver, and how Secureworks® Taegis™ ManagedXDR Plus builds on the strong foundation of MDR for significantly less than it would cost to accomplish similar outcomes internally.

How to Tailor Security with Limited Resources

In the last year, 90% of organizations have suffered identity breaches as cyber attacks involving identities grow more sophisticated and widespread(1). Organizations rely heavily on their identity infrastructure to enable collaboration, remote work, and access to internal systems. But the complexity and room for gaps and errors in these systems make it an attractive target for threat actors, posing significant risks across all sectors.

To manage user identities and control access to resources, most organizations use identity and access management (IAM) systems. It's not enough. Analysis of these systems uncovered that 95%(2) are misconfigured. These misconfigurations provide cybercriminals with opportunities to escalate privileges and leverage identities to further their attacks. While IAM systems are crucial to an organization's security strategy, they must be complemented by additional security layers to proactively combat these tactics. Identity threat detection and response (ITDR) can provide these additional layers, identifying risks and anomalies and detecting potential breaches early.

In this informational webinar, you will learn:
 • The current state of identity threats and the expanding identity attack surface
 • Why organizations benefit from identity threat prevention as well as detection and response
 • How ITDR can help safeguard against the escalating risks associated with identity threats

Sources:
1. Identity Defined Security Alliance (IDSA), 2023 Trends in Securing Digital Identities, July 2023
2. Calculated based on existing Secureworks customer data gathered from incident response

Stop Identity Attacks in Their Tracks: A Roadmap to Risk Reduction

From opportunistic cyberattacks to state-sponsored threats, join this webinar to learn the latest tools, tactics, and motivations behind today's cybercriminal threats.

By understanding the motivation of today’s cybercriminals, your organization will have the insight they need to build a blueprint for cyber resilience. Learn how to take a more effective and efficient approach to prevention, detection, and response to reduce your cyber risk.

This Informational Webinar will cover:
 • Threat actor behavior and motivation to help understand the latest trends in cybercrime
 • Real-world examples of how organizations have both fallen victim to and protected themselves from threats
 • How to strengthen your cyber-resilient programs with managed detection & response (MDR)

Build a Cyber-Resilient Organization: Know the Threat to Beat the Threat

PCI Data Security Standard is a global standard for protecting account data. The latest version PCI-DSS v4.0 was finalized last year. This new standard impacts on every organization and company in the world that accepts debit or credit card payment. 

In this presentation, industry thought leader Ralph Villanueva will leverage his knowledge and expertise in the PCI-DSS standards to discuss its impact on the enterprise endpoints, and provide recommendations on how to use this framework to optimize endpoint security.

Optimize the implementation of PCI-DSS v4.0 on endpoint security

Endpoint security is critical to protecting your organization from cyber threats, but traditional antivirus solutions are no longer enough. Cyber criminals are using sophisticated techniques that can evade detection by antivirus software. This session will explore endpoint security strategies beyond antivirus that can help your organization combat sophisticated threats.

We will cover a range of strategies, including:
- Behavioral analysis: Identifying and blocking malicious behavior on endpoints.
- Application control: Restricting access to certain applications on endpoints to prevent attacks.
- Network segmentation: Isolating endpoints from the rest of the network to limit the spread of attacks.
- Threat intelligence: Leveraging external threat intelligence to identify and block known threats.

Attendees will learn the importance of endpoint detection and response (EDR) solutions, which can provide real-time visibility into endpoint activity and help detect and respond to threats quickly.

By attending this session, viewers will gain a better understanding of the limitations of traditional antivirus solutions and learn about alternative strategies to protect your endpoints from sophisticated threats. You will also learn about the benefits of EDR solutions and how they can improve your organization's overall security posture.

Beyond antivirus: Endpoint security strategies to combat sophisticated threats

Tune into this session, presented by Boleaum Inc.'s Vincent Amanyi, to learn how to implement a best practice identity access management (IAM) framework that is aligned with your zero trust policies.

Attendees will learn how to:
- Identify what matters in your enterprise environment. 
- Develop a strategy with a realistic budget. 
- Partner vendor's with the right solutions to your environment.

Implement best practice IAM and zero trust

Security teams are at now loss for telemetry from their devices -- the struggle is to make sense of it all. Many breaches occur not because detection didn’t work, but because the noise was so loud that the breach got missed until it is too late. 

This talk, presented by cybersecurity expert John Bambenek will cover how to engineer the right data sources from end points to not only build detection models, but to enhance and prioritize events to identify chains of behaviors that will lead to breaches if unaddressed.

Creating threat analytics on the endpoint

Mitigating the risks that attacks pose to an entity can be the difference between an SMB growing and succeeding - or it falling victim to a malicious attack and leaving business owners dealing with the aftermath for months.


And when it comes to IT security and keeping your business and customers safe, it’s becoming increasingly apparent that the way to ensure you fall into the first camp - growing and succeeding - is to go back to basics and make sure that you have a solid endpoint foundation. The right endpoint foundation is cost-effective, requires the least skill set and enables businesses to build their security strategies up from there. 

In this fireside chat, Andrew Namisi, Senior Presales Engineer at Kaspersky and John Bruggeman, Chief Information Security Officer, Consulting at CBTS are joining forces to share vital information on endpoint security strategies for the SMB. Join them to hear:

- What a solid endpoint foundation looks like in 2023
- Why SMBs need to do basic blocking and tackling, as well as prevention and detection 
- When and why SMBs need to implement endpoint detection and response (EDR), and when they need to - look at managed detection and response (MDR)
- What an SMB-specific endpoint protection platform (EPP) can offer 
- How SMBs can guard against ransomware in a cost-effective way
- And more

Going Back to Basics: Solid Endpoint Security Practices for SMB Success

Business and technical end-users often require local admin rights to perform tasks or access applications. Adding standard users to the local administrator group may provide workers the permissions they need but creates significant security risk and may violate regulatory compliance. Microsoft’s Local Administrator Password Solution (LAPS) also creates risk, as bad actors can easily exploit temporary privileged access. Without the right balance of privilege and productivity, organizations are forced to sacrifice security for operational efficiency.

Fortunately, advanced endpoint privilege management technology provides organizations with the tools they need to securely elevate local admin rights on an as-needed basis. With advanced endpoint privilege management, domain administrators can elevate local admin rights for only the applications and processes end-users need. By elevating admin rights for specific applications and tasks, organizations can sustain organizational productivity without the risk of over-privileged users. Join Jeremy Moskowitz, 17X Microsoft MVP, for a demonstration of how this technology works and can be used to address common endpoint security and productivity challenges.

During this webinar you will learn how advanced endpoint privilege management technologies:
- Elevate admin rights for specific applications and processes across domain-joined, non-domain joined, MDM enrolled, and virtual environments
- Overcome the security risks associated with LAPS and local administrator groups
- Enable end-users to request elevated permissions on an as-needed basis
- Manage read, write and execute permissions for USB sticks and external storage drives.

Privilege vs Productivity: How to Elevate Local Admin Rights Securely

What does your cybersecurity posture look like in 2023? Tune into this webinar from Towerwall Founder and CEO Michelle Drolet as she discusses the latest cyberthreat trends and provides the necessary insights to defend against evolving attacks.

Based on the research and real-world experiences, we will discuss:

• The lasting cyber impact of the war in Ukraine.
• The maturity of the “as-a-service” industry  and how it has put advanced threat tactics into the hands of nearly any criminal.
• How ransomware operators have evolved  their activities and mechanisms, both to evade detection and to incorporate novel techniques.
• A deep dive into the abuse of legitimate security tools by criminals to execute attacks.
• An analysis of the threats facing Linux, Mac, and mobile systems.

Discover the latest cyber threat trends

What is XDR? What is extended detection and response? What does that even mean?

The evolution of of endpoint protection (EPP) to managed detection and response (MDR) to eXtended detection and response (XDR) is natural and expected.

Just as it was great to protect your desktops and servers -- the endpoints of your network -- with antivirus software, it naturally evolved into requiring 24x7 endpoint monitoring all 365 days of the year. 

Now that more and more companies are monitoring the network and firewall on a continuous basis, incorporating those threat intelligence feeds into your MDR solution to give you XDR is natural as well.

But what all do you get with this evolutionary step? Tune into this session from expert John Bruggeman who will explore  the major vendors in the XDR space, what they do and don't provide, and how you can make the right choice for your environment.

Protect your endpoints with evolutionary XDR

The events of the past few years have shifted the threat landscape. Understanding your attack surface starts with recognizing the motivations behind current threats and where malicious actors plan to take them.

Join this session to learn:
 
 -  The current shifts we’re seeing in the threat landscape
 -  Where you can maximize your threat defenses
 -  Strategies to minimize cyber risk and build a better threat defense model

Speaker: Jon Clay; VP,  Threat Intelligence, Trend Micro

Jon Clay has worked in the cybersecurity space for over 26 years. Jon uses his industry experience to educate and share insights on all Trend Micro externally published threat research and intelligence. He delivers webinars, writes blogs, and engages customers and the public on the state of cybersecurity around the world. 

An accomplished public speaker, Jon has delivered hundreds of speaking sessions globally. He focuses on the threat landscape, cybercriminal undergrounds, the attack lifecycle, and the use of advanced detection technologies in protecting against today’s sophisticated threats.

Shifts in the Threat Landscape

Gartner has released a statement that one-third of new SASE deployment will be based on a single vendor SASE by 2025. The emergence of the hybrid workforce has rendered traditional VPNs obsolete, as they can no longer keep up with the growing demand for remote access and end up allowing users to access all applications, thereby increasing the attack surface and the likelihood of lateral threat movement.

CIOs have made it their top priority to implement a Zero Trust Network Access (ZTNA) strategy using a SASE/SSE approach, so that they can continue to concentrate on providing users, regardless of their physical location, with consistent contextual application access.

Join this live SASE summit to explore:

- The role that Fortinet plays in securing hybrid workforces through consistent convergence of networking and security

- What makes the Zero Trust Network Access (ZTNA) method universally reliable for providing access wherever it is needed

- The reason of why a best-of-breed, single vendor SASE approach is essential for today’s cyber landscape

Unlocking Security Agility

In today’s world, digital experience is everything. It can mean the difference between winning a customer or simply getting work done. But for years, IT and the business have been at odds on how to deliver exceptional identity experiences.

With DaVinci, our new identity orchestration service, you can design seamless, secure identity experiences while bypassing many of the common technical hurdles. Join this webinar, where we’ll focus on tackling customer and workforce passwordless use cases and show how DaVinci can expedite your passwordless goals. 

Technology advances, such as orchestration, have made passwordless available for a wide variety of use cases and requirements for Ping customers. We’ll highlight some of the passwordless options available to you, demo the end user experiences and take live questions.

How PingOne DaVinci Can Accelerate Your Passwordless Journey

Employees are highly mobile and critical applications have moved to the cloud. While these shifts create new opportunities for businesses, they also create new challenges for legacy security and network models.

Cloudflare One is built for the modern business and its composable architecture meets customers where they are in their zero trust journey. As customers all over the world adapt to hybrid work in the wake of COVID-19 Cloudflare One radically simplifies IT administration, end user burden, and employee onboarding anywhere and everywhere employees need to connect.

Join us and hear from the experts on: 

- How organizations of any size can use Cloudflare One for a natively integrated Zero Trust Edge platform to protect and accelerate the connectivity of devices, applications, and entire networks to keep hybrid workforces secure and productive.
- What do the most successful zero trust deployments have in common?
- What common roadblocks do buyers encounter?

Securing your Business with Zero Trust

Evolution of Endpoint Security

An overreliance on endpoint detection and response (EDR) alone is bound to leave holes in your cyber defense. That’s because cybersecurity incidents now originate from almost anywhere in the IT stack. In the case of our 4,500+ customers, over 60% of essential threat event and detection data comes from beyond the endpoints. 

Join us to learn how evolving threats are outpacing common defense strategies, leading many security organizations to rethink how to strategically upgrade their security and which security partner is best positioned to support them. We’ll also discuss the shortfalls of EDR protection alone — and how many organizations are looking beyond the endpoint for a more effective and efficient approach to cybersecurity. 

What you’ll learn:  
Why cybersecurity needs to move beyond the endpoint to keep pace with evolving threats and a growing attack surface 
The pitfalls of relying too heavily on endpoint detection and response (EDR) in your cyber defenses 
How to strategically improve your cybersecurity and choose the right security partner

Beyond the Endpoint – Tackling Your Biggest Cybersecurity Problems

Cyber Security

Threat Detection

Endpoint Security

Cyber Attacks

Security

Threat Defence

Endpoint Detection

IT Security

Threat Assessment

Incident Response

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Beyond the Endpoint – Tackling Your Biggest Cybersecurity Problems

Presented by

About this talk

Secureworks