The Breach Prevention, Detection and Response Summit

Infoblox is pleased to present out latest Cyber Threat Intelligence report findings. This webinar is based on the research and data that our Cyber Intelligence Unit published late last year and can be found in our Quarterly Cyber Threat Intelligence Report. We will cover significant threats recently observed, detailed analysis of advanced malware campaigns, and analysis of new significant attacks in the news. We will also be covering the Log4j vulnerability, its impact and how to mitigate the risk.

Key Takeaways:

● New and recently emerged malware variants and trends

● How these differ from other variants we have seen in the past

● The emergence of phishing as the leading case of data breaches

● Detailed information on DDoS Extort

August 2021: Accenture confirmed that Lockbit ransomware operators stole 6 TBs of data from its systems.
October 2021: Acer announced that their servers were hacked by Desorden group resulting in exfiltration of almost 60 GBs of data.
August 2021: T-mobile said that it fell prey to a sophisticated cyberattack affecting its 40 million customers.

These are examples of some data breaches that happened in 2021. Since last few years, number of data breaches & their impact has been growing, and the trend continued in 2021 as well. The average cost of data breaches in 2021, a whopping $4.24 Million, broke the previous ceiling!

With every passing year, attackers are becoming bolder in their techniques and are targeting organizations with increasingly sophisticated cyber-attacks. Which makes it imperative for organizations to regularly review their cyber security posture and update it to foil the next wave of attacks.

In this presentation, we will share current state of cyber-attacks and discuss the new generation protection mechanisms that can assist organizations in thwarting these attacks.

Some of the key takeaways from this session will be:
1. Why Breach prevention is needed.
2. Attack techniques used in latest data breaches.
3. Different tools/techniques to safeguard against the new age cyber-attacks.

We will all be hacked. The only difference is our level of preparedness and what our response will be. Join a rich and engaging dialogue between seasoned cybersecurity professionals from a diverse range of industries as:
- Scott Barnett, Director of National Security Operations Centre, NHS Scotland
- Deryck Mitchelson, Field CISO, Check Point
- Kostas Papachristofis, CISO, Olympia Group
- Gioacchino Buscemi, Security Accreditation and Risk Manager, ESA European Space Agency
- Roee Laufer, CISO, Israel Airports Authority

Preventing data breaches has become a key area of focus for most security programs, driven by the news of ever increasing ransomware attacks, intellectual property loss and insider threats. Having a strong Incident Response program is crucial when a data breach occurs, but more and more, we need to get ahead of these attacks and lay strong foundations that can help prevent data breaches before they occur. And beyond that, with that foundation in place, what if we can also look ahead and actually predict which areas of our network environment are most likely to be attacked? It's at this stage where defenders can start to get ahead of the curve, make sound decisions around how to prevent or mitigate risks, reduce the likelihood that these vulnerabilities are exploited and help keep their organization out of the news.

In this talk, we'll discuss:
• Fundamental strategies and best practices for shoring up the areas of your environment most often targeted by cyberattackers
• How a culture of preparedness can be your strongest line of defense against data breaches
• Leveraging threat intelligence sources to predict where attackers may target you next
• Ways to prioritize your risk mitigation efforts to quickly and efficiently address weaknesses in the environment

Organizations are drowning in intelligence data. The problem isn’t that there’s not enough breach detection data, it’s that there is too much. “Sleeper threats” lie hidden in plain sight, protected by a cacophony of noise and a security team too overwhelmed to find them. And with AI-fueled attacks, combat has moved to warp speed. We need machines to fight the machines, but we need still need expert humans at the helm.

Implementing AI and automation enables organizations to perform advanced threat hunting, detection, and response at machine speed and scale. Earlier AI followed a set of rules and never deviated, but the problem was that it never went beyond that either. It wasn’t customizable or adaptable. To be impactful, threat hunting AI needs to run on a deep neural net architecture and rely on a progressive learning model that mimics human learning and assimilates the techniques, processes, and expertise of analysts.

Kumar Saurabh, VP of SOAR Strategy and Integration at Devo, demonstrates new technology that acts as force multiplier for skilled human expertise. Learn how to improve threat detection and response efficacy at a lower cost and free up your security team’s valuable time and resources to focus on high-value security tasks.

Key takeaways from this session will be:
• How to use advanced decision automation to analyze millions of data points per day.
• How to automate threat discovery, cataloging, triage, and response – at machine speeds.
• How to leverage AI as a force multiplier for skilled human expertise.
• How to reduce noise and repetitive work for Level 1 & 2 analysts and free up time and resources to focus on real threats and critical decisions.
• How to leverage AI to build sophisticated playbooks in hours, rather than weeks.

Rapid response is essential to mitigate cybersecurity threats. However, using standalone SIEM and SOAR solutions from different vendors adds unnecessary complexity. In a SOC, where every second counts, a simple, unified UI allows security analysts to speed up detection and response and mitigate threats.

Join Augusto Barros, VP Cybersecurity Evangelist, and Rahul Bakshi, Senior VP of Product Management, for a live discussion on how Securonix's SOAR solution brings security operations into a single pane of glass for end-to-end incident life cycle management. In this session, you will learn:

- Trends in the SIEM and SOAR markets from the experts
- How to apply automation effectively to drive SOC efficiency
- How to simplify security operations and drive down MTTR
- How to avoid common traps on SOAR implementation

Augusto Barros was most recently the Research VP in the Gartner for Technical Professionals (GTP) Security and Risk Management group. He has over 20 years of experience in the IT security industry as an analyst and a security architect and officer for large enterprises.

Rahul Bakshi is responsible for driving and managing product strategy. Before Securonix, he has twenty years of experience leading high-performing teams across Product, Marketing, and Sales in the SaaS and Security industries.

When attackers see a way in, they take it.

If you want to stay ahead of attackers, it's time to make the shift from a focus on threat intelligence to risk intelligence.

Today’s security leaders are squeezed between increased risks and attacks, expanding attack surfaces, and decreasing resources, which has them streamlining defense strategies and investments towards what matters most and what exposures are critical.

Join us for a lively discussion on the current security leadership shift of focus from threat intelligence to risk intelligence. Security leaders will share their journey to the sweet spot: that balance between visibility, priority and value that helps focus their security practices towards confident protection (vs whack-a-mole). Areas covered will include:
-> Balancing protections inside and outside the network
-> Various ways of prioritizing risk and what doesn’t work
-> Mapping potential paths into and out of your network
-> Merging attack surface management, vulnerability and threat information to identify real risk