Name: Preventing Privilege Identity Escalation and Detecting Lateral Movement
Start: 2023-08-31T20:43:00Z
End: 2023-08-31T20:43:58.000Z
Location: BrightTALK
Rating: 4

Proofpoint, Inc. is a leading cybersecurity and compliance company that protects organizations’ greatest assets and biggest risks: their people. With an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber attacks. Leading organizations of all sizes, including 85 percent of the Fortune 100, rely on Proofpoint for people-centric security and compliance solutions that mitigate their most critical risks across email, the cloud, social media, and the web. 

Embarking on an AI initiative? Are you aware of the hidden risks Generative AI (GenAI) platforms like ChatGPT, Microsoft Copilot, and Google Gemini pose to your organisation? And more importantly do you know how to mitigate those risks?

Generative AI tools open up a world of creativity and enhanced productivity but also data security risks that traditional cybersecurity solutions may not address. Improper use of these tools can expose sensitive information, including customer data, source code, and proprietary content.

Gain insights on:
• The risks associated with GenAI
• How GenAi can be abused by both threat actors and employees
• How to gain visibility into GenAI use in your organisation, enforce Acceptable Use Policies and educate employees
• How a Human-Centric approach to security can prevent loss of sensitive data

Equip your team to embrace GenAI securely and launch your AI projects without risk or delays.

GenAI Cybersecurity Risks: The gift that keeps on giving your data away

As phishing attacks grow more advanced, even major tech companies have suffered losses exceeding $100 million from sophisticated email scams. With these threats evolving, messaging and collaboration tools are becoming particularly vulnerable, demanding enhanced, AI-driven protection to stay secure. In this webinar, we’ll dive into the latest multi-pronged phishing tactics, from impersonation scams to emerging threats like QR code phishing and MFA bypass. We’ll also explore how the exploitation of GenAI has resulted in more effective phishing campaigns, due to more convincing lures, deepfake videos and images, and malicious prompt engineering. 
Join Proofpoint and ISC2 December 10, 2024 at 1:00 p.m. Eastern/10:00 a.m. Pacific to explore real-world examples of costly phishing scams, identify common vulnerabilities, and learn proactive strategies to strengthen your organization’s defenses against today’s most sophisticated threats.

From Impersonation to MFA Bypass: Tackling Today's Most Sophisticated, Novel Phishing Threats

The healthcare industry faces a surge in cyber attacks and data breaches due to digital transformation. Cybercriminals target sensitive health data, exploiting vulnerabilities in distributed networks. With the rise of ransomware, impersonation attacks, and insider threats, advanced security measures are essential to protect patient information and maintain the integrity of healthcare operations.

Please join us for a 30-minute live discussion with Proofpoint’s Vice President of Industry Solutions, Ryan Witt and Solutions Architect, Chris Montgomery. They will cover new threat intelligence research that can help healthcare providers better understand today’s advanced attacks. We will explore:

- Data breaches stemming from malicious, careless or compromised insiders
- New research on the most active threats targeting healthcare organizations
- Strategies to mitigate risks and secure healthcare data
- Live Q&A featuring an expert from Health-ISAC

Leveraging Threat Insights to Secure Data

As the threat landscape evolves, one thing remains constant, humans are the primary target for attackers. Successful defenders design their cybersecurity systems to consider the needs, behaviours, and limitations of humans through a multi-layered approach to threat defence.

Being able to identify new and emerging threats, analyse attack patterns, and develop effective strategies is at the core of maintaining a strong security posture. 

Join this engaging 45-minute live webinar, hosted by Proofpoint’s best-in-class Threat Research team, as they share practical tips to help organisations defend their human layer.

Gain first-hand knowledge and invaluable perspectives on:

Insights from the threat landscape trenches
Tracking human threat actors
Global vs EMEA threat trends
Identifying and untangling threat activity
Interesting threats and our experiences with them

Protecting the Human Element Using Threat Intelligence

Have you ever sent an email to the wrong person? What about sending an email with the wrong attachment? What visibility do you have into these potential costly mistakes at your organisation? 

This lack of visibility into the risk of sensitive data loss from misdirected emails is a common problem for many organisations, resulting in negative impacts on their business, such as significant productivity loss when unreported incidents are detected.

To prevent these breaches, organisations need to address the unique email behaviours of each employee, including misdirected emails, miss-attached files, and data exfiltration.

Join this 30-minute live webinar to learn:

Why you need a layered approach to stop sensitive data loss on email
How Large Language Model (LLM) Classifiers are used to safeguard sensitive data and reduce false positives
How Behavioural Artificial Intelligence (AI) can stop sensitive data loss
How to handle data loss in diverse, multi-lingual environments
What you can do to stop sensitive data loss from misdirected emails in just days
We’ll also live demo how an Adaptive Email DLP solution stops misdirected emails for good.

Solving the #1 Data Loss Prevention issue with an Adaptive Approach to Email

Recent highly public breaches highlight the key role of identity in escalating a minor incursion into a business-impacting breach. Some defenders leveraging Identity Threat Detection and Response (ITDR) solutions focus on finding and remediating identity vulnerabilities before attackers exploit them. Others focus instead on accelerating their threat detection and response with the enterprise-wide deployment of deceptive resources. The best way ultimately to maximize identity security is by implementing both strategies together.

Join us for a 30-minute webinar and learn best practices for implementing an ITDR solution. You will learn:

- How and why attackers have shifted their tactics to be more focused on identity security
- Key elements of an identity security solution that will work for your organization
- Implementation strategies on how you can leverage an ITDR project

Deploying an Identity Threat Detection and Response Solution in Your Organization

Have you ever sent an email to the wrong person? What about sending an email with the wrong attachment? What visibility do you have into these potential costly mistakes at your organization? 

Email data breaches caused by insiders are a prolific problem, putting organizations and customers' data at risk. To prevent these breaches, organizations need to address the unique email behaviors of each employee, including misdirected emails, miss-attached files, and data exfiltration.

To mitigate human error, organizations need to adopt a tailored approach to address each employee's risky behavior. This involves understanding and benchmarking normal behavior to identify anomalies, mistakes, and malicious actions effectively.

Join this 30-minute live webinar to learn:

- Why you need a layered approach to stop sensitive data loss on email
- How historical email behavior and behavioral intelligence modelling provides the insights needed to stop email misdelivery
- How you can stop sensitive data loss from misdirected emails in just days with a live demo of an Adaptive Email DLP solution

Preventing Email Misdelivery and Data Loss with Behavioral Intelligence Modeling

Migrating your data loss prevention solution may feel overwhelming, but it doesn’t have to be. With the ever-changing business landscape, relying on outdated DLP solutions can be risky.  

On October 22, 2024 at 1:00 p.m. Eastern/10:00 a.m. Pacific join Proofpoint and ISC2 for this discussion and learn how to streamline your policies, augment your skillsets, and build a DLP program that is suitable for the future.  

Don't let the idea of a DLP migration overwhelm you. Learn how to prepare your program for the future!

Future-Proofing Your Data Loss Program: How to Streamline Policies and Augment Skillsets

Get ready for the essential guide to the European Union’s NIS 2 Directive (NIS 2) and the Digital Operational Resilience Act (DORA)!

How will preparation for NIS 2 and DORA impact your organisation? What’s the difference between them? Where do you start?

Join us for a 45 minute webinar where we’ll cover the essentials of NIS 2 and DORA for both EU and non-EU organisations. We’ll also look at the unique opportunity they offer to help improve your organisation’s cybersecurity posture and that of your supply chain.

What you’ll learn:
- Understand the latest principles behind NIS 2 and DORA
- Discover practical steps to prepare
- Learn from real-world case studies and success stories
- Get your questions answered by our cybersecurity experts

Don’t miss this opportunity to stay ahead in the ever-evolving cybersecurity landscape!

NIS 2 and DORA Explained: An essential guide for Cybersecurity professionals (PA)

Email continues to be the #1 threat vector and using impersonation is a top tactic for attackers. It’s important for organizations to take a holistic approach to protect trusted business communications and minimize impersonation risk. It starts with blocking impostor threats before they reach your employees, but it doesn’t stop there. You need to further defend against your brand being impersonated and implement advanced defenses against compromised supplier accounts.

In this 30-minute session, we will discuss impersonation risk and provide insights on how to better protect your employees, your brand, as well as your customers and partners. We will cover:
- Overview of sender impersonation
- Examples from recent attacks involving impersonation
- Defending against inbound impersonation, spoofs and lookalikes of your domains, and compromised supplier accounts
- How you can strengthen your defenses

Protect Your Business Communications from Impersonation

According to the Proofpoint 2024 Data Loss Landscape Report, 85% of organisations experienced data loss in the past twelve months. This environment makes protecting valuable data, systems and applications a tremendous challenge for many CISOs. Having a formal program to defend data and protect against insider risk is imperative.

During Insider Threat Awareness Month in September, join us for a 60-minute live webinar to learn how to evaluate your current cybersecurity data protection and insider risk program’s effectiveness. We will identify ways to strengthen your security posture, regardless of your starting point, so you can move from a reactive to a proactive program.

We’ll discuss:

- The severity of the data loss problem and the associated consequences
- Best practices for a modern Data Protection program – and how to get started
- Where data protection and insider risk overlap
- How to assess the effectiveness of your Insider Risk Program
- A typical Insider Risk escalation path
- Key takeaways for moving from a reactive to a proactive program

Enhance your Cyber Resilience: Data Protection, Insider Risk and Beyond

Have you ever sent an email to the wrong person? What about sending an email with the wrong attachment? What visibility do you have into these potential costly mistakes at your organisation? 

Email data breaches caused by insiders are a prolific problem, putting organisations and customers' data at risk. To prevent these breaches, organisations need to address the unique email behaviours of each employee, including misdirected emails, miss-attached files, and data exfiltration.

To mitigate human error, organisations need to adopt a tailored approach to address each employee's risky behaviour. This involves understanding and benchmarking normal behaviour to identify anomalies, mistakes, and malicious actions effectively.

Join this 30-minute live webinar to learn:

- Why you need a layered approach to stop sensitive data loss on email
- How historical email behaviour and behavioural intelligence modelling provides the insights needed to stop email misdelivery
- How you can stop sensitive data loss from misdirected emails in just days with a live demo of an Adaptive Email DLP solution

Preventing Email Misdelivery and Data Loss with Behavioral Intelligence Modeling (PA)

Have you ever sent an email to the wrong person? What about sending an email with the wrong attachment? What visibility do you have into these potential costly mistakes at your organisation? 

This lack of visibility into the risk of sensitive data loss from misdirected emails is a common problem for many organisations, resulting in negative impacts on their business, such as significant productivity loss when unreported incidents are detected. 

Join us for a 45-minute webinar to learn about: 

- High profile examples of sensitive data loss from misdirected emails
- The business and legal consequences of leaving misdirected emails unaddressed
- The power of artificial intelligence (AI) to stop sensitive data loss
- Stopping sensitive data loss from misdirected emails in just days
- We’ll also live demo how an Adaptive Email DLP solution stops misdirected emails for good.

Using AI to Stop Email Misdelivery and Prevent Sensitive Data Loss (EN PA)

Threat actors use sophisticated techniques to target the federal government with ransomware attacks, impostor emails, phishing attacks, and other exploits. People have become the federal sector’s most prominent threat vector, and protecting the human element against the heightened volume of advanced threats is critical to building a robust security posture.

Join us for a live 30-minute threat briefing with our Threat Intelligence Services (PTIS) analyst Aron Salzman-Deiz and Garrett Guinivan, Staff Solutions Architect, US Federal team. We will discuss new threat intelligence research that can help federal customers understand how today’s threat actors are spoofing US government agencies for impostor attacks, financial fraud, and credential harvesting.

We will share:
- Threat actors spoofing US government agencies
- Best practices for email and network security
- Recommendations to best protect your people with awareness and training materials

Federal Threat Briefing: Protecting the Human Element Using Threat Intelligence

Join us for an engaging and informative session with Proofpoint’s Matt Cooke where he’ll share best practice security strategies from the field, including real-world case studies from the cyber champions who safeguard our digital landscapes. 

This 30-minute webinar will uncover the lessons learned from the frontlines of cybersecurity, offering valuable insights and practical advice on how to enhance your organisation's security posture.

Key topics include:

Real-world case studies: hear first-hand accounts of successful security strategies and the challenges faced by cyber champions in various industries.
Proven best practices: discover the techniques and practices that have proven effective in raising security awareness and combating cyber threats, such as account takeover and imposter fraud
Actionable advice: gain practical tips and recommendations that you can implement to strengthen your own security initiatives.
Future trends: learn about emerging trends in cybersecurity, such as multi-channel attacks and how to prepare your organization for the evolving threat landscape.
Whether you're a seasoned security professional or new to the field, this webinar will provide you with the knowledge and tools needed to champion cybersecurity within your organisation. 
Don't miss this opportunity to learn from experts and elevate your security awareness program to the next level.

Tales from Cyber Champions: Insights and advice from the frontline

Defend Against Data Loss and Insider Threats

Stopping Email Attacks and Initial Compromise

Break the Attack Chain: Strengthening Defenses and Safeguarding People and Data

Identity vulnerabilities have been a key attack vector in over 90% of cyber threats and 100% of organizations have them. It’s important to know how to prevent privileged identity risks and stop lateral movement in action.

Join us for a 45-minute webinar. You’ll learn:
- Where privilege identity vulnerabilities live
- The common attack path playbooks used that consistently abuse credentials
- How to prevent the identity escalations and remediate attack paths to lateral movement

Preventing Privilege Identity Escalation and Detecting Lateral Movement

identity threats

Cyber Attacks

Cyber Security

attack chain

identity vulnerabilities

identity risks

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Preventing Privilege Identity Escalation and Detecting Lateral Movement

Presented by

About this talk

More from this channel