Name: How to build cyber resilience and secure your organization with limited resources
Start: 2024-08-02T14:57:00Z
End: 2024-08-02T14:57:45.000Z
Location: BrightTALK
Rating: 0

eSentire, Inc., the Authority in Managed Detection and Response (MDR), protects the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats by providing Exposure Management, Managed Detection and Response and Incident Response services designed to build an organization’s cyber resilience & prevent business disruption. Founded in 2001, eSentire protects the world’s most targeted organizations with 65% of its global base recognized as critical infrastructure, vital to economic health and stability. By combining open XDR platform technology, 24/7 threat hunting, and proven security operations leadership, eSentire's award-winning MDR services and team of experts help organizations anticipate, withstand and recover from cyberattacks.  
For more information, visit www.esentire.com and follow @eSentire

During this webinar, Tia is joined for an exclusive conversation with NFL great Shawn Barber. Shawn is a 10-year NFL veteran, with experience in both the Eagles and Chiefs organizations. A seasoned community leader and fierce competitor, Shawn will discuss the parallels between sport’s biggest stage and the battle facing security leaders today.

Discussion topics included:
- The importance of deep investigation and partnership in driving effective performance on and off the field
- Balancing an offensive game plan vs defensive expertise
- How security leaders can take their organization to the Next Level when it counts
- Why building and measuring Resilience is the key to your success - not only in business or on the football field but in the game of life

Watch this on-demand webinar to learn about the parallels between sport’s biggest stage and the battle facing security leaders.

Tailgating with Tia Hopkins and Shawn Barber On-Demand

In today's rapidly changing business landscape, security leaders face increasing pressure to stay ahead of disruption. However, they're faced with significant challenges: the ever-expanding cyber threat landscape and a severe shortage of skilled cybersecurity experts.

Despite this, organizations can still boost their cyber resilience by embracing proactive security measures, such as 24/7 threat detection, investigation, and response capabilities.

In this webinar Hannan Ghafoor, Solutions Architect, eSentire discussed:
- The cybersecurity skills gap and what’s required to train and retain staff for a 24/7 SOC
- The increasing complexity of cyber threats and the challenges faced by in-house security teams to investigate, contain, and respond to threats in order to prevent business disruption
- The benefits of outsourcing security operations by integrating an MDR provider to optimize security resources and manage costs effectively
- How MDR can address deficiencies in cybersecurity defenses, ensuring robust protection and adaptive measures against sophisticated threats
- Recommendations and questions to ask when evaluating MDR providers

Watch this on-demand webinar to learn how your organization can choose a proven MDR provider that aligns with your organization's unique cybersecurity requirements and goals.

Bridge the Cybersecurity Skills Gap with Managed Security Services On-Demand

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the February Threat Intelligence Briefing, TRU will review:
- Fortinet FortiOS and FortiProxy Authentication Bypass (CVE-2024-55591) Overview and Mitigation Recommendations: An overview of CVE-2024-55591, an authentication bypass in the websocket module of FortiOS and FortiProxy, as well and share detection mechanisms and mitigation steps for organizations to follow.
- Mints Loader Campaign: Emerging research from TRU on recent Mints Loader campaigns, including their impact, eSentire's response and recommendations for organizations to stay protected.
- Threat Landscape: Malware recently observed by eSentire’s SOC including Lumma Stealer, Atomic Stealer, and the Earth Kapre Loader, as well as notable recently disclosed vulnerabilities (CVE-2024-40891 Zyxel, CVE-2024-55591 FortiOS, CVE-2025-23006 SonicWall).
- A brief update on recent North Korean Remote IT Worker activity.

February 2025 TRU Intelligence Briefing On-Demand

Watch this webinar presented in partnership with SC Media, Spence Hutchinson, Staff Threat Intelligence Researcher at eSentire and Adrian Sanabria, Main Host, Enterprise Security Weekly to learn about the latest ransomware trends and strategies you can use to put your business ahead of disruption.

What you’ll learn:
- Ransomware-as-a-Service (RaaS): How ransomware gangs mimic corporate structures. From RaaS to high-stakes negotiation strategies, understand how they operate, fund, and execute their attacks.
- Methods to disrupt the ransomware playbook: Learn proven methods to disrupt their playbook and outpace their advances by leveraging 24/7 Threat Detection and Response Capabilities that include 24/7 Monitoring and Proactive Threat Hunting.
- Best practices for building a ransomware-resilient organization: Understand how to fortify your organization's defenses, enhance incident response, and ensure long-term resilience against ransomware attacks.
- How to leverage emerging government regulations: Stay up to date on the latest regulatory requirements and learn how to reinforce your cybersecurity posture.
This webinar also includes a live Q&A.

Inside Ransomware, Inc.: Defeating the Corporate Machine Driving Cybercrime On-Demand

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the January Threat Intelligence Briefing, TRU will review:
- 2024 Top Malware, Phishing and Ransomware Trends and 2025 Outlook: TRU will share research-based insights on the top malware, phishing and ransomware trends observed from threat investigations across our customer base. 
- Tactical Threat Response - Year in Review & a Look Ahead Into 2025: TRU will review the key novel threat detection capabilities developed to disrupt attacks and protect eSentire MDR customers as well as provide an analysis on trends to watch in 2025.
- Threat Landscape: During the webinar, the TRU team will discuss the most observed malware of 2024 including LummaStealer, SocGholish, and NetSupportManager RAT, and details will be provided on recently disclosed vulnerabilities CVE-2025-0282 (Ivanti), CVE-2024-50623 (Cleo), and CVE-2024-49112 (Microsoft). 
- A brief geopolitical update on state-sponsored threat actors. 
This webinar also includes a live Q&A.

January 2025 TRU Intelligence Briefing On-Demand

In this webinar, presented in partnership with SC Media, Derek Thomas, Sr. Director, Threat Response Unit at eSentire, Andrew Wilder, CISO at Vetcor, and Dustin Sachs, Chief Technologist and Sr. Director of Programs at CyberRisk Collaborative, discuss the latest threat hunting trends, advanced techniques and strategic guidance for late 2024 and early 2025.

What you’ll learn:
- Threat Hunting Trends: The key trends shaping threat hunting and how they are expected to evolve in 2025.
- Threat Detection Techniques: Learn innovative methods for proactively detecting and responding to advanced cyber threats.
- Best Practices: Strategies for optimizing your threat-hunting operations.
Collaboration and Intelligence Sharing: The importance of cross-industry collaboration and sharing actionable threat data.
- Integrating Threat Hunting into Risk Management: Learn how to incorporate threat hunting into a holistic risk management and cybersecurity strategy.

Threat Hunting: Tools and Techniques for 2025 On-Demand

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the December Threat Intelligence Briefing, TRU will review:
- The Threat Landscape: A review of recently observed threats including CleverSoar, RedLine Stealer, and the misuse of Remote Monitoring and Management (RMM) tools, as well as notable vulnerabilities (CVE-2024-8068, CVE-2024-8069 [Citrix], CVE-2024-0012, CVE-2024-9474 [Palo Alto], and CVE-2024-9680 [Mozilla]). 
- A brief geopolitical update on recent threat activity targeting the telecommunication industry.
- Lumma Stealer Malware-as-a-Service (MaaS): Insights will be shared on one of our most observed malware, Lumma Stealer Malware-as-a-Service (MaaS), including an overview of their tactics, techniques and procedure as well as how the MaaS operates and monetizes your data. 
- Fortinet CVE-2024-47575 Overview, Observations and Detection Capabilities: An overview of the Fortinet vulnerability CVE-2024-47575 and a discussion around eSentire's observations and new detections.

December 2024 TRU Intelligence Briefing On-Demand

Watch this on-demand webinar to learn how MDR providers, like eSentire, are introducing GenAI tools to accelerate threat investigations outcomes and response. Hear about the types of telemetry defenders need to gather to properly secure and monitor AI based applications, and how MDR will need to adapt to defend an AI-enabled world.

In this webinar, eSentire will share their insights on:
- Cyber risks associated with using generative AI technologies
- How security leaders can use ChatGPT, and other similar tools, to strengthen their cybersecurity posture and build cyber resilience
- How security leaders can set up, deploy, and use LLM (large language model) gateways to protect your company's sensitive data and ensure regulatory compliance
- How MDR providers are applying generative AI tools to advance threat detection and response to provide better security outcomes

How Generative AI is Impacting the Future of Cybersecurity On-Demand

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the November Threat Intelligence Briefing, TRU will review: 
- Threat Landscape: A review of malware recently observed by eSentire’s Threat Intelligence team over the past month including LummaStealer, Matanbuchus, as well as notable vulnerabilities impacting Cisco (CVE-2024-2048), Zimbra (CVE-2024-45519), and Fortinet (CVE-2024-47575). This section will also include a quick overview of the “Email Bombing” initial access technique.
- A brief geopolitical update focused on the Russian state-sponsored APT group Midnight Blizzard.
- Code Signing Certificate Landscape: An analysis of the underground ecosystem supplying code signing certificates to threat actors, including key insights derived from the hundreds of distinct certificates tracked in 2024.
- Signed Malicious Code – Observations and Defense Mechanisms: Code-signing certificates abuse in the wild and recommended defense mechanisms against these threats.

November 2024 TRU Intelligence Briefing On-Demand

In this webinar, Kurtis Armour, VP, Product Management at eSentire, Julian Mihai, CISO at Penn Medicine, and Dustin Sachs, Chief Technologist and Sr. Director of Programs at CyberRisk Collaborative, discuss endpoint security trends and strategic guidance for late 2024 and early 2025.

Improving Your Endpoint Security: Forecast and Guidance for Late 2024 and Early 2025

In this webinar Nickolas Davie, Sr. Solutions Architect, eSentire discusses:
- The evolution of Managed Detection and Response (MDR) and its transformative impact within a cohesive tech ecosystem.
- How eSentire exceeds 2nd gen buyer expectations.
- How eSentire owns the “R” in MDR with our all-in-one service with response & remediation you can trust
- The power of eSentire’s 24/7 Security Operations Center (SOC), Threat Response Unit (TRU) and Insight Portal experience. 
- Recommendations and questions to ask when evaluating MDR providers.

Choosing the Right MDR Provider: What You Need To Know

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the October Threat Intelligence Briefing, TRU will review:
- Abuse of Remote Monitoring and Management (RMM) by State-Sponsored and Cyber Criminal Groups: A discussion of the most common RMM applications/methods abused by these groups and associated recommendations on how to lock down approved tools and detect/block the rest.
- Tactical Threat Response – RMM Tools: Recommendations for how defenders can detect and prevent RMM abuse.
- Updates on InvisibleFerret, CleanUpLoader, and StealC.
- Notable vulnerabilities impacting Ivanti, Sonicwall, and Zimbra.
- A brief update on cyber activity relating to ongoing North Korean APT activity.

October 2024 TRU Intelligence Briefing

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the September Threat Intelligence Briefing, TRU will review:
- Unpacking Trends Around Windows Installer Packages: An analysis of recent trends observed among our customers and the broader threat landscape, focusing on the misuse of Windows installer packages for malware infections. This discussion will cover MSI, MISX, and Inno Setup packages, how they are abused, recommendations for analysis, and the underground services fueling this trend.
- Tactical Threat Response – App Installer Abuse: An overview of how threat actors utilize application installers to distribute malware, along with best practices for mitigating these risks.
- Updates on Poseidon Stealer, Go Injector, and Play Ransomware.
- Notable vulnerabilities impacting Versa, SolarWinds, and Apache.
- A brief update on cyber activity relating to ongoing geopolitical tensions.

September 2024 TRU Intelligence Briefing

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the August Threat Intelligence Briefing, TRU will review:
- ChromeLoader - Annoyance or Threat?: An analysis of a pervasive malicious browser extension distributed through deceptive ads and applications, and a discussion of its infection schemes, functionality, and the risks it poses.
- Tactical Threat Response - New ChromeLoader Observations: Overview of recent ChromeLoader observations, highlighting new intrusions and best practices for mitigating the threat.
- Updates on Gh0st RAT, EMPTYSPACE, and AsyncRAT.
- Notable vulnerabilities impacting ServiceNow, Windows, and VMware.
- A brief update on cyber activity relating to ongoing geopolitical tensions; specifically, Russian disinformation campaigns.

August 2024 TRU Intelligence Briefing

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required. 

Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the July Threat Intelligence Briefing, TRU reviewed:
- Navigating Gen AI - Risk Strategy: An analysis of cyber threats stemming from the rapid adoption of AI, and associated eSentire recommendations, including prioritizing risks.
- Valid Account Abuse – Tactical Threat Response: Overview of the valid account initial access vector and recommendations/best practices for defending against this threat.
- Updates on Mantanbuchus, Latrodectus and More_Eggs.
- Notable vulnerabilities impacting MOVEit, PHP, and OpenSSH.
A brief update on cyber activity related to ongoing geopolitical tensions.

July 2024 TRU Intelligence Briefing

As cyber threats become more complex, maximizing your Microsoft E5 investment is crucial for enhancing your organization’s security posture.

Microsoft E5 provides a powerful combination of advanced security features that safeguard your data and infrastructure, facilitating not just compliance but proactive defense. Optimizing your use of Microsoft E5 ensures that you capitalize on these sophisticated security tools to protect your assets and maintain cyber resilience.

In this session, Kurtis Armour, VP, Product, eSentire, and Nickolas Davie, Sr. Solutions Architect, eSentire delve into how organizations can fully leverage the value of their Microsoft Investment.

Key areas of discussion include: 
- Why organizations are making an investment in Microsoft E5 and the comprehensive benefits of this licensing option.
- How eSentire classifies alerts and detections that come out of these platforms, including examples of intrusion-type events in Microsoft Defender for Endpoint and Defender for Identity.
- Understanding the Total Cost of Ownership benefits including how organizations can significantly reduce overall security spend without sacrificing quality. 
- The importance of considering a supported investment in multi-signal Managed Detection and Response (MDR) to operationalize Microsoft capabilities and enhance an organization's security posture.

Maximize Your Microsoft With 24/7 MDR

Watch this on-demand webinar featuring a user group discussion for IT/Security leaders in the legal space. Hosted by Andrew DeBratto, CIO at Hunton Andrews Kurth LLP and Ryan Westman, Director, Threat Intelligence at eSentire, this session sheds light on the latest threats we are seeing targeting our legal customers and digs into the cybersecurity strategy considerations security leaders at legal firms face.

How Much Is Too Much Security

According to research conducted by Cyber Security Hub, 40% of cybersecurity professionals saw a rise in the frequency and intensity of cyberattacks faced by their organisations over the last year.

With threat actors constantly refining their tactics, techniques, and procedures (TTPs) to target organisations, it is crucial to establish high-quality detection mechanisms to enhance cyber resilience. However, many organisations lack the necessary in-house resources and expertise to detect and contain cyber threats. 

In this webinar Phil Skelton, Sr. Director - International, eSentire discussed:
- The current state of the cybersecurity industry and the latest threats eSentire has detected and stopped.
- How to assess your cyber resilience and build a strong threat hunting program at your organisation
- How you can adopt the right mix of products and services that enable your teams to do more with less.

How to build cyber resilience and secure your organization with limited resources

eSentire

Cyber Resilience

Compliance

NIS2

Threat Hunting

Cyber Security

Cyber Risk Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

How to build cyber resilience and secure your organization with limited resources

Presented by

About this talk

More from this channel