Name: Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft
Start: 2024-09-10T13:25:00Z
End: 2024-09-10T13:25:32.000Z
Location: BrightTALK
Rating: 0

We help protect organisations from today’s most pervasive cybersecurity threats. With us on your team, you’ll rest easy knowing your mission-critical assets are safe from threat actors.

Navigating the Cybersecurity Labyrinth: From Data to Defense.

Looking ahead to 2025, cybersecurity experts come together to discuss emerging threats and provide the latest insight into how to combat today’s adversaries.

The status quo is changing, and the stakes are high — join us in the frontline defense against the adversary.

Secureworks Global Threat Intelligence Summit 2024

What would be the impact if you could reliably block up to 99% of malicious traffic on your network before it ever reaches your endpoints and other systems? Organizations need a layered cybersecurity defense that includes strong network security, especially those without the resources, central governance, and strong policies to ensure 100% up-to-date coverage at the endpoint.

Join Secureworks to learn more about the evolution of network security and how to best protect your organization against cybercrime at the network level. We will discuss the management and configuration of network detection and response (NDR) solutions as well as the integration and reporting capabilities you should expect when choosing the right NDR for your organization.

This webinar will cover:
· Why network security needs to continuously evolve
· What are the benefits of an NDR tightly integrated with extended detection & response (XDR)
· Why it’s critical to monitor internal network traffic
· How NDR correlates telemetry across different threat vectors to detect adversarial behavior

Mastering Network Detection and Response: A Comprehensive Guide for Security Analysts

A recent survey found 85% of IT security professionals anticipate they will leave their role due to burnout (Devo Cybersecurity Burnout Survey, Wakefield Research, September 2023). These professionals are critical in safeguarding sensitive data and infrastructure from increasingly sophisticated cyber threats.

To combat burnout, artificial intelligence (AI) can act as a force multiplier, not only enhancing the efficiency of existing cybersecurity professionals but also helping bridge the skills gap, ensuring a robust defense against an ever-evolving threat landscape. AI scales the cybersecurity talent pool, helping analysts defend against threats and respond to incidents more efficiently.

Join Nash Borges, VP of Engineering, and Alexa Levine, Product Marketing Manager, as they discuss this augmentation of human analysts and how it enables them to focus on more complex and strategic tasks, rather than getting bogged down by manual, tactical work.

This episode will cover:
• When to use AI (and when not) to accelerate threat prevention, detection, and response
• How generative AI can help cyber defenders gain the upper hand
• Why it’s essential to leverage AI to scale scarce cybersecurity talent

When to Trust and Leverage AI to Maximize Security Outcomes

In managed detection and response (MDR), not all solutions are created equal. Alongside different scope and technology, the quality of support can vary greatly. In this episode, we take a look at what sets Secureworks apart, guided by Security Operations Lead Matt Mills. Matt explains what makes Secureworks’ approach so unique – namely, fast and direct round-the-clock access to the right experts. Whether it's a SOC analyst, threat hunter, or a multidisciplinary team, customers can be sure they'll always have access to the right expertise. Find out how this works in practice and what difference it makes to our customers. And learn why Secureworks was named an MDR leader in a recent Forrester Wave.

This episode will cover:
• How Secureworks supports – and listens to – its customers
• Our expert-driven approach to solving problems
• Different support options and service levels
• What sets us apart from other providers
• How this makes a difference to our customers

Let's Talk SOC: Ep. 19 - In Your Corner 24/7: The Right Expert for Every Problem

One-third of all breaches stem from vulnerabilities. To reduce the risk of cyber breaches, it is imperative that organizations view vulnerabilities in the context of threat investigations to fully understand root cause and impact. Security operations and vulnerability management programs must work in tandem to improve your overall security posture.

Join us as we look at real incidents that began with vulnerability exploitations and explain how new solutions foster collaboration between threat detection and vulnerability management and enable security teams to better prevent, detect, and respond to incidents most likely to disrupt your business operations.

This episode will cover:
• Trends and threat risks associated with not addressing known vulnerabilities
• How to identify the right vulnerabilities to work on first and understand why they pose the greatest risk
• How to use vulnerability risk context to inform threat investigations and expedite response

Speakers:
• Alexa Levine, Product Marketing Manager
• Lisa Washburn, Senior Director of Product Management
• Chris Yule, Director of Threat Research, Counter Threat Unit™

Unifying Threat Detection and Vulnerability Management to Reduce Breach Risks

The rapid advancement of Generative AI is fueling an equally rapid evolution of deepfake technology. From effortlessly cloning voices to generating convincing replicas of individuals' faces, deepfakes are enabling the creation of deceitful material with unprecedented accuracy. Exploited by threat actors, these tools can lead to significant financial fraud by usurping identities of high executives.

Join Secureworks® CTU™ experts as they discuss the world of deepfakes, from face swapping and avatars to more sophisticated uses of social engineering that could lure an unsuspecting employee into releasing sensitive information. We’ll cover the details you need to pay attention to so you can spot a deepfake and techniques you can implement at your organization to protect against these types of attacks.

This informational webinar will cover:
· The cutting-edge AI tools enabling the creation of realistic deepfakes
· Real-world deepfake attacks causing financial fraud
· Effective strategies to defend your organization against deepfake threats

Inside the Threat: Secureworks CTU Analysis | Ep. 2: Dissecting the Deepfakes

Threat actors waste no time when it comes to inflicting damage, as recent Secureworks research revealed. In just two years, the average ransomware dwell time has dropped from 5.5 days to just short of 24 hours. That’s why monitoring your environment is more important now than ever – and why it’s becoming increasingly critical to cover all the bases. 

In this episode, we talk to Bud Ellis, a Secureworks expert in the cybersecurity market. Join us to discuss current challenges – and how to address them – from an expanding attack surface to the growing cyber skills gap. You’ll hear the difference holistic monitoring can make when it comes to protecting your business and how the right MDR solution is equipped to plug every gap.

What you’ll learn:
• Why monitoring your environment is more important than ever
• The evolving threat landscape and growing skills gap
• Limitations of endpoint detection and response
• Benefits of holistic MDR solutions
• Importance of partnership and access to the right expertise

Let's Talk SOC: Ep.18 - Holistic Monitoring: Why Now and What’s the Benefit?

2023 has been a headline-grabbing year for cybersecurity, from high-profile breaches to supply chain attacks and eye-watering ransoms. Dramatic shifts in the physical and virtual worlds have reshaped the threat landscape, causing enterprises to take another look at their cybersecurity strategies. 

Join Secureworks CISO Ken Deitz to review the big moments of 2023 – from the rise of AI to new cybersecurity rules. We’ll discuss the impact on the industry at large and how your business may be affected. And we’ll take a look at how best to ensure you’re ready for 2024.

What you’ll learn:
• Lessons learned from high-profile security breaches
• The rise of generative AI: opportunities and threats
• Industry impact of new cybersecurity regulations
• Changing boardroom priorities and the role of CISOs

Let's Talk SOC: Ep. 17 - A Year in Cybersecurity: Key Takeaways & Future Trends

In today’s cyber battleground, AI is fighting for both sides. Weaponized by threat actors, it’s also a trusted ally of leading cyber defenders. 

In this episode, you’ll hear from leaders at Secureworks and SentinelOne on their use of AI in the fight against cyber criminals misusing the technology. Learn how AI accelerates learning and powers through data, freeing up analysts to focus on higher-level tasks. Hear how Secureworks and SentinelOne strike a balance between progress and responsibility, forging ahead with AI while setting standards in the industry. We’ll also discuss the importance of collaboration in shaping the role of AI in the future cybersecurity landscape.

What you’ll learn:
• The evolution of AI in the cybersecurity landscape
• The role of AI in threat detection and response
• How AI empowers and unburdens security analysts
• How to get the most from AI – safely and responsibly
• The importance of collaboration in shaping the best way forward

Let's Talk SOC: Ep. 16 - AI in Cybersecurity: Powerful Ally and Force Multiplier

Why does it feel like cybersecurity is getting harder, not easier? The digital world is constantly evolving, and threat actors are becoming more sophisticated.

Learn why traditional security measures are falling short and how to bolster your security posture with more effective threat detection, investigation, and response in a unified cybersecurity platform. Presented by experts from global industry analyst Frost & Sullivan and Secureworks®, this webinar outlines how to evaluate and select the right security solutions for your business.

This informational webinar will cover:
• Barriers to effective security operations
• How extended detection and response (XDR) is making security analysts more effective at their jobs
• Use cases, key trends, and growth in the cybersecurity market presented by Frost & Sullivan

Elevate Your Security Posture: Insights From Frost & Sullivan

The case for automation in cybersecurity is strong. Talent is scarce and cyberattacks are on the rise. Meanwhile, the systems required to manage an effective SOC are often complex and diverse. 
In this episode, we’re joined by Elvis Hovor, Sr. Director Product Management at Secureworks. He explains how today’s SOC analysts are overwhelmed by alerts and the weight of responsibility to protect their organizations. Automation is essential to helping them do their job with greater confidence and time to focus on what really matters. While reducing alert fatigue and the risk of human error, intelligent technologies like automation, AI, and machine learning deliver insights that greatly enhance investigative work. Learn how this works in practice with real customers, helping analysts hunt down and fend off even the most sophisticated threats.

What you’ll learn:
• Why automation is essential in today’s cybersecurity landscape
• The combined power of human and machine intelligence
• The benefits for prevention, detection, and response
• How a strong security partner can help SecOps teams leverage automation, AI, and machine learning
• How this works in practice in customer engagements

Let's Talk SOC: Ep. 15 - Automation in Cybersecurity: Collaborative Intelligence

This past year global conflicts such as the Israel-Hamas and Russo-Ukrainian wars extended into the world of cyber with hacktivist groups participating on all sides.

Join Aiden Sinnott of the Secureworks® Counter Threat Unit™ as he provides an overview of the cyber activity his research team has seen this past year as it relates to ongoing physical wars transcending into the cyber battlefield. Discover the potential implications for organizations and learn how to discern between noise and genuine threats as we venture into a new year.

In this informational webinar, you will discover:

 - Hacktivist groups’ tool of choice when launching cyber attacks
 - What these threats mean for organizations
 - How to distinguish between mere noise and real threats

The Cyber Battlefield: Analyzing Cyber Threats in 2023 From Global Conflicts

How is artificial intelligence (AI) changing the cybersecurity landscape? Will it reduce, or add to, your organization’s risk? In this episode, we explore how AI-based cybersecurity can be a powerful force for good. 

Join Tom Harrison, Secureworks Senior Security Operations Manager, to learn more about the “intelligence” behind AI.  From machine learning to generative AI, you’ll hear how Secureworks uses AI to accelerate and enhance detection and response, and how it makes analysts more efficient. Delve into the ethics and explore the partnership between human and machine. You’ll also get a glimpse of what tomorrow holds, as we look ahead to AI’s role in the future of cybersecurity.

What you’ll learn:
• The impact of AI on the cybersecurity landscape
• Use cases and benefits
• How Secureworks leverages AI
• Ethics, transparency and trust
• Outlook for the future

Let's Talk SOC: Ep. 14 - Beyond the Hype: What AI Really Means for Cybersecurity

Join Secureworks® Counter Threat Unit™ (CTU) for an expert overview of the LockBit ransomware group, the largest and longest-standing group responsible for ransomware attacks, and the recent takedown.

CTU researchers will deliver insights into the tradecraft of affiliates of LockBit’s ransomware-as-a-service gained from numerous investigations conducted over several years, with intimate details of the recent law enforcement takedown of LockBit and the impact of that action for organizations.

IN THIS INFORMATIONAL WEBINAR, YOU WILL LEARN:

 - A brief history of LockBit and how they evolved into the largest ransomware group
 - The disruptive action taken by international law enforcement agencies against LockBit and the significance of this takedown
 - How to remain vigilant in protecting your organization against ransomware and other forms of cyber attacks

Inside the Threat: Secureworks CTU Analysis | Episode 1: Unpicking LockBit

Join Secureworks® CTU™ experts for an in-depth exploration of "Understanding Adversary in the Middle (AitM) Tactics and Credential Theft," a crucial topic for anyone concerned with protecting remote access solutions or SaaS applications. This webinar will unravel the complexities of AitM attacks, a sophisticated method used by threat actors to intercept and steal user credentials or tokens.

We will delve into the mechanics of these attacks, highlight real-world examples, and examine the tools and technologies employed by attackers. Additionally, we'll discuss effective strategies for detection, prevention, and response, providing practical advice to safeguard your organization. Don't miss this opportunity to enhance your understanding and fortify your defenses against one of the most insidious threats in the digital landscape.

In this informational webinar, you will:
· Gain insights into what AitM attacks are and why you need to watch out for these type of attacks
· Discover the various types of AitM attacks and how they work
· Learn how to protect your organization from AitM attacks

Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft

Extended Detection and Response

Threat Intelligence

Cyber Security

Cyber Threats

Threat Landscape

AitM

adversary in the middle attacks

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft

Presented by

About this talk

More from this channel