Name: M-Trends 2024: By the Numbers of Today's Top Cyber Threats & Attacker Operations
Start: 2024-05-21T16:00:00Z
End: 2024-05-21T16:00:37.000Z
Location: BrightTALK
Rating: 4.8

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is part of Google Cloud.

For modern security teams, the gap between detecting a suspicious indicator and fully understanding the threat is often measured in days—time that defenders simply don’t have. Manually correlating data, mapping TTPs, and authoring detection rules creates critical bottlenecks that slow down response and burn out analysts.

Join Tim Gallo, Lead Global Solutions Architect, as he demonstrates how to shatter these bottlenecks using the new Agentic capabilities within Google Threat Intelligence. Tim will showcase a powerful workflow that transforms a single indicator of compromise (IOC) into a comprehensive threat hunting methodology, compressing what used to take days of research into just seven minutes.

In this session, you will learn how to:
- Instantly Pivot: Automatically correlate a raw IOC with specific malware families, threat actors, and historical campaign data.
- Automate Framework Mapping: Extract tactical behaviors and map them directly to the MITRE ATT&CK framework without manual analysis.
- Generate Immediate Detections: Watch the system build production-ready YARA, YARA-L, and Sigma rules tailored to the specific threat.
- Operationalize Defense: Create complete threat hunting playbooks on the fly to proactively defend your environment.

Don't miss this opportunity to see the future of high-velocity threat analysis in action. Register now to see how Agentic workflows can multiply your team's efficiency and speed.

From IOC to Action in Minutes: Unlocking Agentic Capabilities in Google Threat Intel (APAC Timezone)

From IOC to Action in Minutes: Unlocking Agentic Capabilities in Google Threat Intel

Modern threats utilize highly complex and obfuscated delivery chains to conceal their final payloads and evade detection. This tactical webinar, presented by Google Cloud VirusTotal Security Engineer and FLARE's reverse engineering expert, will demystify the process of analyzing these sophisticated multi-stage threats and show how to scale your static analysis pipeline.

We will demonstrate an in-depth analysis of a multi-stage .NET dropper that leads to the final AgentTesla payload. You will learn expert-level techniques to unravel these chains efficiently:

*Time-Travel Debugging (TTD) Mastery: See how to leverage TTD to navigate complex execution flows, trace obfuscation routines, and perform efficient analysis to quickly extract the primary payload.

*Rapid Static Triage: See the combined power of capa and FLOSS for swift malware capability identification and automated configuration extraction. Learn how to deobfuscate critical strings and access key indicators without ever running the final AgentTesla payload.

*Google Threat Intelligence Integration for Context & Validation: Discover how the high-fidelity indicators and extracted configuration data, once gathered, are instantly cross-referenced with Google Threat Intelligence's massive dataset. This pivoting capability allows analysts to gain immediate threat context, identify related samples, confirm findings, and showcase the effectiveness of crowd-sourced detection efforts.

We will move from initial traditional analysis to building a sense of the threat's complexity, utilizing TTD for payload extraction, analyzing the final configuration data, and pivoting to Google Threat Intelligence to see how detection is achieved through these multiple layers of obfuscation.

Don’t miss this opportunity to learn practical, scalable strategies for transforming complex reverse engineering tasks into automated, repeatable wins for your threat intelligence program.

Static Analysis at Scale: Unpacking the Malware Ecosystem

2025 was a big year for Google Threat Intelligence with a number of security-boosting and time-saving updates. We want to make sure none of these new capabilities slipped past you and make sure you are prepared for the new capabilities we are excited to deliver in 2026.

Join our product experts Megan Deblois, Product Manager and Sara Ouled, Technical Product Growth Team lead for this informative as they dive into: 
- Recently released features
- Practical new use cases
- An exclusive preview of our 2026 roadmap

Google Threat Intelligence News & 2026 Roadmap

Google Threat Intelligence News & 2026 Roadmap (APAC Timezone)

Cyber threats are constantly evolving. Learn how to stay ahead of them in 2026 with security expert Andrew Kopcienski.

Join this deep-dive session based on the Cybersecurity Forecast 2026 report, where Andrew will cover key trends and insights to help strengthen your cyber defenses in the year ahead, including:

- The AI Arms Race: How generative AI is being used by both attackers and defenders.
- Nation-State Threats: A deep dive into activity from the "Big Four"—China, Russia, North Korea, and Iran.
- The Cybercrime Economy: The latest tactics in ransomware, extortion, and cyber crime operations
- Regional Intelligence: Exclusive insights and predictions for the JAPAC and EMEA regions.

Google Cloud Cybersecurity Forecast 2026

This webinar will show you how to transform raw intelligence into a dynamic and actionable defense strategy.

We'll start with a real-world scenario sourced from Google Threat Intelligence, demonstrating how to extract key indicators and behaviors. From there, we'll use the power of agents powered by Gemini to build a robust threat model. We'll show you a step-by-step process, starting with a sequence of prompts to guide the creation of a threat hunt and then using intelligent agents to help automate and operationalize the entire workflow.

Join Muhammad Muneer, Principal Incident Response Consultant and Joseliyo Sánchez, Security Engineer as they show you how to move beyond manual analysis and use advanced AI to accelerate your threat hunting capabilities, enabling you to: 
- Proactively defend against modern threats with speed and precision
- Use AI tools to react quicker to threats when needed
- Enhance your current SOC workflows

Stop chasing alerts and start actively hunting threats. This is your chance to operationalize your threat intelligence and build a truly proactive defense with Google Cloud.

From Intel to Action: A Modern Threat Hunting Workflow

Join us for an in-depth exploration of Google Threat Intelligence, a powerful platform that blends advanced AI capabilities, crowdsourced data, large-scale device scanning, and deep human expertise from Mandiant with the community-driven intelligence of VirusTotal. 

In this webcast, SANS Instructor Dave Shackleford and Google’s Global Solutions Architect, Ben Cook, will talk about how this platform streamlines threat detection, enrichment, and analysis for security teams of all sizes. From tracking threat actors and malware campaigns to monitoring the dark web for emerging risks, you’ll see how Google’s converged ecosystem provides both operational and strategic value.

This discussion will include practical setup guidance and insights, including creating and managing Threat Profiles, leveraging Google ASM for attack surface monitoring, and using Digital Threat Monitoring to stay ahead of malicious activity. You’ll learn how analysts can enrich indicators, explore campaigns, visualize relationships in threat graphs, and integrate insights into your workflows with tools like IocStream. Whether you’re looking to enhance day-to-day threat analysis or inform long-term strategy, this review will give you a clear picture of how Google Threat Intelligence can elevate your security operations.

Enhancing Security Operations with Google Threat Intelligence

Effective threat hunting hinges on your ability to find adversaries before they achieve their objectives. This requires moving beyond generic indicators and arming your team with timely, relevant intelligence on the specific TTPs threat actors are using today. In this webinar, we will explore the latest how AI is making threat hunting more effective in less time than ever before.

Join us as we:
*Unveil  our groundbreaking Agentic Platform (now in public preview) — a major leap in applying AI to investigations and complex security tasks.
*Demo the Ransomware Data Leaks dashboard, offering fresh insights into evolving extortion trends.
*Showcase Code Insight, our AI-powered code analysis tool that converts plain text code files into clear, natural-language explanations—enabling analysts to understand complex threats without reading a single line of code.

The session concludes with a live Q&A, giving you the chance to engage with our experts and explore how these innovations can transform your threat hunting practices.

Threat Hunting with Google Threat Intelligence: Accelerating Investigations with AI (APAC Timezone)

What key strengths are essential for incident response and cyber resilience success?

Join our guest speaker Research VP Craig Robinson of IDC and Senior Director Nick Bennett from Mandiant, as they build on data and insights from the IDC MarketScape: Worldwide Incident Response 2025 Vendor Assessment report. This dynamic fireside chat will go beyond the headlines to provide a strategic look at the market.

Why Attend? 

As a cybersecurity leader, you'll gain the insights needed to strengthen your security posture and make informed decisions. By attending, you will:
- Benchmark your program: Discover the methodology and criteria in the IDC MarketScape that helped position Google as a leader and learn how to apply those same principles to your own organization.
- Align strategy with business goals: Get up-to-date information on the latest industry trends, including cyber risk management and recovery strategies, to optimize your incident response and cyber resilience plans.
- Enhance decision-making: Learn how to improve crisis communication and reduce the financial and reputational impact of a breach.

Mandiant’s Guide to Cyber Resilience in 2025 and Beyond

In the rush to adopt AI, your organization faces an urgent challenge: how do you enable innovation without exposing your most sensitive data and systems to new, unseen risks? This session provides a strategic roadmap for organizations to adopt and deploy AI securely from day one, helping you shift from a reactive security posture to a proactive strategy. 

Drawing on Mandiant's extensive experience assisting diverse, global organizations, Muhammad Muneer, Principal Security Engineer, will share actionable frameworks and strategies on: 
- Critical steps for establishing a secure AI environment 
- The role of a comprehensive governance framework
- Implementing secure development and deployment practices
- AI monitoring and threat detection
- Strengthening AI security incident response and recovery capabilities
- Fostering a culture of AI security awareness and training across the organization

Designed for both executive leadership and technical professionals, attendees will gain actionable insights and practical strategies for navigating the complexities of AI adoption. This session will empower your organization to prepare for a new wave of AI-driven threats.

Securing the AI revolution: How to prepare your organization for AI

La eficacia del Threat Hunting depende de la capacidad de los analistas para encontrar a los adversarios antes de que alcancen sus objetivos. Esto requiere ir más allá de los indicadores genéricos y dotar a su equipo de inteligencia relevante en el momento oportuno sobre las TTP específicas que los actores de amenazas utilizan hoy en día. En este webinar, exploraremos cómo la IA está haciendo que el Threat Hunting sea más eficaz en menos tiempo que nunca. Únase a nosotros para descubrir:
*Nuestra Plataforma Agentic (ahora en vista previa pública) —un gran avance en la aplicación de la IA a las investigaciones y a tareas complejas de seguridad.
*El Ransomware Data Leaks dashboard, que ofrece información actualizada sobre las tendencias cambiantes en materia de extorsión.
*Code Insight, nuestra herramienta de análisis de código impulsada por IA que convierte ficheros de código en texto plano en explicaciones claras en lenguaje natural, lo que permite a los analistas comprender amenazas complejas sin leer una sola línea de código.

La sesión concluirá con una serie de preguntas y respuestas en vivo, dándole la oportunidad de interactuar con nuestros expertos y mejorar sus prácticas de threat hunting.

Threat Hunting con Google Threat Intelligence: Acelerando investigaciones con IA (Versión en Español)

Effective threat hunting hinges on your ability to find adversaries before they achieve their objectives. This requires moving beyond generic indicators and arming your team with timely, relevant intelligence on the specific TTPs threat actors are using today. 

In this webinar, we will explore the latest how AI is making threat hunting more effective in less time than ever before. 

Join us as we:
*Unveil our groundbreaking Agentic Platform (now in public preview) — a major leap in applying AI to investigations and complex security tasks.

*Demo the Ransomware Data Leaks dashboard, offering fresh insights into evolving extortion trends.

*Showcase Code Insight, our AI-powered code analysis tool that converts plain text code files into clear, natural-language explanations—enabling analysts to understand complex threats without reading a single line of code.

The session concludes with a live Q&A, giving you the chance to engage with our experts and explore how these innovations can transform your threat hunting practices.

Threat Hunting with Google Threat Intelligence: Accelerating Investigations with AI

Unpacks today's trends in the cyber threat landscape, marked by escalating sophistication and destructive potential. It highlights that state-sponsored groups are increasingly focused on gaining persistent access to critical infrastructure and are rapidly experimenting with Al. This brief aims to equip security practitioners with actionable intelligence to proactively defend against evolving threats.

Navigating the Evolving Threat Landscape

Panelists will delve into how leaders across various industries are building exceptional proactive cyber defense programs. This session will explore strategies for continuous improvement, identify critical technical debt to eliminate, and discuss how to stay ahead of adversaries while fostering secure digital transformation.

Panel Discussion: Perspectives on Proactive Cyber Defense

Join FBI San Francisco and Mandiant as they unveil their collaborative approach to countering sophisticated cyber espionage threats from the People's Republic of China (PRC). This session will focus on advanced persistent threat actors, including UNC4841 and UNC5221, who exploit zero-day vulnerabilities in network appliances, and the emerging threat of PRC-aligned freelance actors like UNC5174.

FBI & Mandiant: Perspective on Countering PRC Cyber Threats

This session delves into notable multi-cloud incidents from 2025, dissecting destructive and intricate cases. Attendees will gain a deeper understanding of emerging threats, proactive defense measures, and best practices for robust multi-cloud detection and incident response.

Notable Cloud Incidents of 2025: Destructive and Complex Multi-Cloud IR Cases

This session shares real-world incidents where threat actors target the technical infrastructure but rely on business risk to accomplish their mission, and how executive teams are unprepared to respond to a cyber event at their organization.

Prepare for the Whole Attack: Building Executive Resilience

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. The second half of the report is dedicated to deep insights drawn directly from the frontlines of Mandiant investigations and threat intelligence findings that have shaped today’s evolving cyber threat landscape.

Join six of our report authors and experts on May 23, 2024 at 12:00pm ET as they share their point of view on these hot topics and provide best practice solutions to help improve your cyber defense capabilities in these areas.

Topics will include:
- China-nexus attackers targeting edge devices and platforms that lack EDR
- Trending adversary operations and motivations behind zero-day attacks
- The evolution of phishing techniques amidst modern security controls
- How attackers leverage AiTM to compromise MFA safeguards
- The reasons and solutions behind growing cloud and hybrid cloud intrusions
- How AI is effectively used in red and purple teams to help boost cyber defenses

Presenters:
Ryan Tomcik, Principal Security Analyst, Mandiant - Google Cloud Security
Mathew Potaczek, Principal Threat Analyst, Mandiant - Google Cloud Security
Josh Fleischer, Principal Security Analyst, Mandiant - Google Cloud Security
James Sadowski, Principal Intelligence Analyst, Google Cloud Security
Tucker Clark, Senior Security Consultant, Mandiant - Google Cloud Security
Josh Madeley, Regional Lead, Mandiant - Google Cloud Security
Jennifer Guzzetta, Product Marketing - Google Cloud Security (Moderator)

M-Trends 2024 Round Up: Expert Insights on 6 Key Topics

Analisi approfondite degli esperti sulle principali tendenze e sugli attacchi informatici più significativi di oggi, dalle prime linee da 15 anni a questa parte.

In questa 15a edizione annuale, M-Trends fornirà uno sguardo dall’interno al panorama delle minacce informatiche in evoluzione, attingendo direttamente dalle indagini di risposta agli incidenti e dall’analisi delle informazioni sulle minacce degli attacchi ad alto impatto e relative azioni di risoluzione in tutto il mondo. 

Preparati ad essere informato sui seguenti argomenti:

+ Le più recenti metriche di risposta agli incidenti, compresi i tempi di interazione, le fonti di rilevamento, i principali vettori di infezione iniziale e molto altro ancora
+ Gli aggressori China-nexus prendono sempre più di mira dispositivi e piattaforme periferici privi della tecnologia EDR
+ Operazioni di tendenza degli aggressori e motivazioni alla dietro gli  attacchi zero-day
+ L’evoluzione delle tecniche di phishing tra i moderni controlli di sicurezza
+ Come gli aggressori stanno sfruttando AiTM per compromettere le misure di protezione con autenticazione a più fattori
+ I motivi e le soluzioni alla base delle crescenti intrusioni in ambienti cloud e cloud ibridi
+ Come l'IA viene utilizzata in modo efficace nelle operazioni dei red team e purple team per contribuire a potenziare le difese informatiche

Italy: Abbiamo il piacere di comunicarti che sono aperte le registrazioni per il prossimo Google Cloud Summit Milano, unisciti a noi per questo evento annuale che riunisce la community del cloud.https://cloudonair.withgoogle.com/events/summit-milan-24?utm_source=sales_contacts&utm_medium=email&utm_campaign=FY24-Q2-emea-EXP82-operational-er-summit-milan&utm_content=sales_invite&utm_term=-

M-Trends 2024: dati dietro le principali tendenze e minacce informatiche odierne

Perspectivas expertas sobre las principales tendencias y ataques de ciberseguridad actuales y durante 15 años consecutivos.

En esta 15ª edición anual, M-Trends proporcionará una mirada al interior del panorama evolutivo de las amenazas cibernéticas, partiendo de investigaciones de respuesta a incidentes y análisis de inteligencia de amenazas de ataques de alto impacto y soluciones en todo el mundo.

Prepárate para estar informado sobre los siguientes temas:

+ Las últimas métricas de respuesta a incidentes, incluidos tiempos de permanencia, fuentes de detección, principales vectores de infección inicial y mucho más.
+ El incremento de atacantes vinculados a China que apuntan a dispositivos de borde de red y plataformas que carecen de EDR.
+ Operaciones de adversarios en tendencia y las motivaciones detrás de los ataques de día cero.
+ La evolución de las técnicas de phishing en medio de los controles de seguridad modernos.
+ Cómo los atacantes están aprovechando la Inteligencia Artificial (AiTM) para comprometer las protecciones de autenticación multifactor.
+ Las razones y soluciones detrás de las crecientes intrusiones en entornos de nube y nube híbrida.
+ Cómo la IA se utiliza eficazmente en las operaciones de equipos de ataque/defensa (red/purple team) para ayudar a impulsar las defensas cibernéticas.

M-Trends 2024:  Las principales tendencias y ataques de ciberseguridad

Perspectives d'experts sur les principales tendances et attaques actuelles en matière de cybersécurité, issues du terrain depuis 15 ans.

Dans cette 15ème édition annuelle, M-Trends fournira un aperçu de l'évolution du paysage des cybermenaces, directement issu des enquêtes sur les incidents et de l'analyse des menaces liées aux attaques à fort impact et aux remediations dans le monde entier.

Explorez les grandes thématiques du rapport:

+ Les dernières mesures de réponse aux incidents, y compris les durées d'intrusion, les sources de détection, les principaux vecteurs d'infection initiale, et bien plus encore.
+ Les attaquants, liés à la Chine, qui ciblent de plus en plus les appareils périphériques et les plateformes dépourvues d'EDR.
+ Les tendances et motivations derrière les attaques "zero-day".
+ L'évolution des techniques d’hameçonnage dans le contexte des contrôles de sécurité modernes.
+ Comment les attaquants exploitent l’IA (“AiTM”) pour compromettre les mesures de protection de l’authentification multifacteur.
+ Les raisons et les solutions derrière l'augmentation des intrusions dans les environnements cloud et cloud hybrides.
+ Comment l'IA est utilisée efficacement dans les opérations Red Team pour renforcer les cyberdéfenses.

Inscrivez-vous à notre prochain événement Google Cloud dédié à la cybersécurité le mardi 4 juin: https://rsvp.withgoogle.com/events/security-forum-paris-2024

M-Trends 2024: Les principales tendances et attaques en matière de cybersécurité

15 Jahre lang Expertenmeinungen zu den wichtigsten aktuellen Cybersicherheitstrends und -angriffen aus Incident-Response-Einsätzen.

In dieser 15. jährlichen Ausgabe bietet M-Trends einen Einblick in die sich entwickelnde Cyber-Bedrohungslandschaft, direkt aus Untersuchungen zur Reaktion auf Vorfälle und der Analyse von Bedrohungen durch wirkungsvolle Angriffe und Gegenmaßnahmen auf der ganzen Welt.

Machen Sie sich bereit, über die folgenden Themen informiert zu werden:

+ Die neuesten Metriken für die Reaktion auf Vorfälle, einschließlich Verweilzeiten, Erkennungsquellen, anfängliche Infektionsvektoren und vieles mehr.
+ Angreifer mit Verbindungen zu China, die zunehmend auf Edge-Geräte und Plattformen ohne EDR abzielen.
+ Trendige gegnerische Operationen und Motivationen hinter Zero-Day-Angriffen.
+ Die Entwicklung von Phishing-Techniken inmitten moderner Sicherheitskontrollen.
+ Wie Angreifer “AiTM” nutzen, um Multi-Faktor-Authentifizierungsmaßnahmen zu kompromittieren.
+ Die Gründe und Lösungen für die Zunahme von Eindringlingen in Cloud- und hybriden Cloud-Umgebungen.
+ Wie KI effektiv in Red- und Purple-Team-Operationen eingesetzt wird, um die Cyberabwehr zu stärken.


Google Cloud kommt in deine Region! Nimm an unserer allerersten DACH Summit Reihe durch 3 Länder und 5 Städte teil. Erfahre, wie du mithilfe von Cloud und KI deine Ziele schneller erreichen kannst. Jetzt anmelden: https://cloudonair.withgoogle.com/google-cloud-summit-roadshow-2024?utm_source=gc_events&utm_medium=display&utm_campaign=FY24-Q2-emea-EMEA2483-physicalevent-er-cloud-summit-berlin-mc&utm_content=promo-slide-deck

Aktuelle Einblicke in die wichtigsten Cybersicherheits-Trends und Angriffe

M-Trends 2024 Webinar Series

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. Packed with timely data from Mandiant frontline incident response investigations and threat intelligence findings between January 1, 2023 - December 31, 2023, readers can increase their awareness of the evolving cyber threat landscape and glean new, effective ways to stay on top of their cyber defense game.

Join two of our top threat analysts on May 21, 2024 at 12:00pm ET as they discuss these trending metrics and notable adversary behaviors. Learn how these findings can affect your security approach to future compromise. 

Topics will include:
- Global and regional dwell times
- Detection by source trends
- Industry targeting metrics
- New threat actor techniques, motivations, and behaviors
- Top infection vectors and malware families
- Ransomware attack developments
- And more!

M-Trends 2024: By the Numbers of Today's Top Cyber Threats & Attacker Operations

Threat Analysis

Threat Horizon

Incident Detection

Incident Response

Cyber Incident Response

Cyber Attacks

Cyber Defense

Cyber Defence

Cyber Crime

Security Analysis

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

M-Trends 2024: By the Numbers of Today's Top Cyber Threats & Attacker Operations

Presented by

About this talk

Mandiant | Intelligence and Expertise