Name: Race against time: The dangerous shift to zero-day exploitation in healthcare
Start: 2023-08-29T16:30:00Z
End: 2023-08-29T16:30:36.000Z
Location: BrightTALK
Rating: 5

Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai’s cloud computing, security, and content delivery solutions.

Modern cyber threats are more sophisticated than ever, bypassing even the most advanced security defenses. Akamai HUNT takes security to the next level by leveraging real-time segmentation data, third-party integrations, and cutting-edge telemetry to uncover and neutralize hidden threats before they cause damage. With no additional agent rollout required, organizations can seamlessly enhance their security posture while avoiding alert fatigue and unnecessary operational burdens.

In this webinar, we’ll walk you through the power of Akamai HUNT, real-world success stories, and a live product demo showcasing how security teams can detect and respond to advanced threats in real time.

What You’ll Learn:
- Understanding Akamai HUNT – How it enhances Guardicore segmentation and integrates with OSquery for deep visibility.
- Real-World Threat Hunting Scenarios – Case studies showcasing how Akamai HUNT identified crypto-mining malware, admin credential leaks, and PowerShell abuse.
- Advanced Threat Detection & Incident Response – How Hunt’s detection engine minimizes false positives and prioritizes the most critical threats.
- Live Demo – See how Hunt visualizes threats, maps attack paths, and provides actionable remediation steps.
- Security Best Practices & Future Innovations – Insights into upcoming enhancements to segmentation rules and proactive threat prevention.

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar and providing us with your ISC2 Member ID number in the 'Question' section.

Note: This is a re-run webinar (not live), but feel free to submit your questions—we’ll address them in follow-up emails.

Hunting the Most Evasive Cyber Threats With Akamai HUNT

Imagine an attacker effortlessly accessing sensitive user data—simply by modifying an API request. In Episode 14 of If Your APIs Could Talk, we dig deep into Broken Object Level Authorization (BOLA), the #1 API security risk in the OWASP API Security Top 10 (2023), allows just that. This webinar unpacks how BOLA attacks happen, from unauthorized data exposure to full account takeovers, and why traditional access controls often fail. 

You’ll learn how to detect and defend against these threats using robust authorization models, API security gateways, and real-world mitigation strategies. Join us to expose the risks lurking in your APIs before attackers do.

Ep. 14 - The Hidden Dangers of BOLA

As healthcare organizations accelerate their digital transformation, they face an evolving landscape of cyber threats, from DDoS attacks and ransomware to vulnerabilities in API security. With healthcare data, financial data and critical systems increasingly interconnected, the need for robust cybersecurity measures has never been greater. In this session, we’ll explore key trends and best practices for leaders to safeguard and advance a secure and scalable healthcare ecosystem.

Optimizing Healthcare Cybersecurity: Threat Trends, DDoS Defense, and API Security

Modern applications are built on APIs, yet traditional application security approaches often overlook this critical attack surface. While application security focuses on code vulnerabilities, misconfigurations, and runtime protections, API security addresses the unique risks posed by API exposure, authentication, data access, and business logic abuse.

In this webinar, we'll break down the relationship between API Security and Application Security, highlighting where they overlap, how they differ, and why organizations must prioritize both to protect against modern threats. We'll also discuss how strengthening API security can help reduce key risks on your risk heatmap, making them less likely to occur and minimizing their potential impact.

Who should attend?
CISOs, CIOs, Security Architects, SOC teams, DevSecOps, and anyone responsible for securing applications and APIs in today's evolving threat landscape.

Join us to learn how API security helps reduce organizational risk, enabling security leaders to manage API threats effectively and align security efforts with business objectives.

Application Security ≠ API Security: Understanding the Differences & the Need for Both

Regulatory compliance is growing more complex, and financial institutions face increasing risks from limited visibility and vendor sprawl. A new commissioned study conducted by Forrester Consulting on behalf of Akamai highlights the challenges and solutions for mitigating compliance risks.

Join our fireside chat with an Akamai expert and guest from Forrester to explore key findings, the impact of limited visibility, vendor sprawl, and siloed departments, and strategies to strengthen compliance with regulations like DORA.

Key Takeaways:
- Insights from Akamai’s commissioned study conducted by Forrester
- How to reduce compliance risks and vendor sprawl
- Best practices for meeting global regulatory standards

Register now!

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar and providing us with your ISC2 Member ID number in the 'Question' section.

Improved Visibility Reduces Compliance Risk In Financial Services

In Episode 13 of If Your APIs Could Talk, we explore how Akamai and Apiiro are transforming API security through their powerful integration. By combining Akamai’s API Security with Apiiro’s application security posture management (ASPM) platform, this partnership delivers unmatched visibility and protection for APIs from code to runtime. 

Learn how this partnership enables organizations to discover API vulnerabilities, map them to their source code, and empower developers with actionable insights to remediate faster. Together, Akamai and Apiiro bridge the gap between security and development teams, reducing risk, accelerating resolution, and fostering secure innovation. Join us to see how this collaboration redefines comprehensive API security.

Ep. 13 - From Code to Runtime: Akamai and Apiiro partnership

The attack surface is not only getting wider, it’s also getting deeper. The year 2024 saw a vast swath of threats, including old threats that have become relevant again. With the expanded use of LLMs and APIs, we can expect those threats to continue into 2025 and beyond.

Join us for a webcast about our Defenders' Guide 2025, which includes practical, hands-on, and highly technical content based on real-life examples we saw at Akamai in 2024. We pulled together multiple specialists — real defenders, researchers, data scientists, and threat hunters — to collaborate on a well-rounded guide.

Overall topics include: 
- Risk management 
- Network architecture
- Host security
- Threat actor evolution

Register now to get a head start on your defenses for 2025.

Akamai is an approved ISC2 CPE Submitter Partner. Earn CPE Credits by watching our Webinar and providing in the question section your ISC2 Member ID number.

Defenders' Guide 2025: How to Effectively Prepare for the Year Ahead

Navigating the complex landscape of cloud solutions is a critical decision for businesses, one with far-reaching implications.
 
Join us for an event that dissects the advantages and considerations of hybrid, public, and private clouds. This EcoCast will convene top experts from leading cloud companies, who will show you how their tools, tips, and best practices can help you craft the perfect cloud strategy for your infrastructure.

Hybrid/Public/Private Clouds: Which Cloud Is Right for Your Infrastructure?

Protecting your critical applications with a Zero Trust Framework means securing your north-south and east-west traffic together. This isn't always easy - lack of visibility combined with complex infrastructures make it difficult to implement end-to-end segmentation. You need to be able to see the whole picture, ensuring your security policy seamlessly extends to your firewalls.

Join us for an exclusive webinar where you'll learn how Akamai and AlgoSec work together to solve these issues by delivering end-to-end visibility, automated policy enforcement, and streamlined operations.

In this webinar you'll learn how to:
• Gain actionable insight into workloads, servers, endpoints and application traffic across all networks whether they're in the cloud and on-prem.
• Simplify segmentation with dynamic policy creation and enforcement, reducing errors and boosting security efficiency.
• Automate workflows for a unified approach to managing complex, dynamic networks.

Stat tuned for the demo that starts 20min into the session.

Don't miss this chance to learn how to secure your critical applications with a simple, secure, and unified segmentation strategy!

Enhancing Zero Trust with Micro- and Macro- Segmentation

Uncover the transformative potential of cloud technology in driving business value and innovation. This enlightening EcoCast will explore how the cloud-powered enterprise is reshaping industries, accelerating growth, and enhancing competitiveness.
 
Because understanding how to leverage these platforms for optimal business value is essential, this event will explore the strategic advantages of cloud adoption, highlighting ways it can transform operations, drive innovation, and enhance efficiency. Industry experts will discuss effective approaches to cloud migration, managing hybrid environments, and optimizing costs while maintaining security and compliance. Gain a comprehensive view of the cloud's potential to enable growth and flexibility within your enterprise.

The Cloud-Powered Enterprise: Creating Business Value

As web applications and APIs have proliferated, they’ve become an attractive target. Akamai’s latest report reveals an increase of 49% in web attacks from Q1 2023 to Q1 2024. The report also provides detailed analyses of trends by industry and region, and a look at DDoS attacks with a DNS component. Access the report for the insights you need to effectively prioritize your security strategy and spending.

Digital Fortresses Under Siege: Threats to Modern Application Architectures

In this "If Your APIs Could Talk" episode, we'll explore the Traffic Audit feature of the Akamai API Security solution. We'll introduce participants to Traffic Audit's powerful capabilities, including recording, visualizing, and analyzing API traffic within their environment. Traffic Audit allows users to easily identify and manage the risk exposure of suspicious users and unusual API behaviors by recording data flows and creating custom audits based on specific criteria. With Traffic Audit, users gain valuable insights into API activity, such as forensic analysis for specific attacks, investigation of suspicious user behavior, and troubleshooting API configurations.

The webinar will provide a comprehensive overview of how Traffic Audit works, including how to create audits that capture and retain traffic according to predetermined filters and rules. Don't miss this opportunity to learn about the innovative capabilities of Traffic Audit and how it can enhance your API security.

Ep. 11 - Deep Dive into API Security Traffic Audit Capability

Ransomware has quickly become one of the most severe threats to the financial sector, with attacks skyrocketing by 70% over the past year. Unlike typical cyber incidents, today’s ransomware assaults are multi-staged and highly targeted, designed to not only disrupt operations but also exfiltrate sensitive data and amplify pressure through direct outreach to clients and regulators. Financial institutions face unique risks, from compromised reputation to operational paralysis, and require tailored defenses to stay protected.

In this webinar, our cybersecurity experts will reveal FS-ISAC’s latest findings on ransomware trends and defense strategies tailored for finance. Attendees will learn to build resilient defenses, create rapid response plans, and navigate high-stakes decision-making, equipping them with the critical tools needed to secure their organizations.

What You’ll Learn:
- Anatomy of a Ransomware Attack: From initial breach to quadruple extortion, learn the stages and tactics that make ransomware so disruptive to financial firms.
- Defense Essentials: Key cybersecurity fundamentals—like Zero Trust policies, multi-factor authentication, and isolated, resilient backup solutions—to stop ransomware in its tracks.
- Crisis Management and Compliance: Build an agile incident response plan, manage communication with clients, and navigate global regulations to reduce impact.
- Informed Decision-Making: Weigh the complex risks and compliance factors in ransom payments, with guidance for safeguarding both your operations and reputation.

Ransomware Readiness for Financial and Critical Industries

According to IDC, worldwide spending on cloud computing is projected to surpass $1.35 trillion by 2027. As these costs continue to rise, corporate CIOs and CFOs are collaborating to assess the use of cloud technologies in their business growth strategies. As Akamai discovered through Project Cirrus, it is possible to realize savings by undertaking a comprehensive cloud services reassessment and applying core principles to optimize cloud services. Join us for an upcoming webinar where we will discuss how Akamai leveraged distributed cloud computing to:

• Lower cloud costs by 40% in one year
• Improve performance by over 40% faster queries
• Facilitate transition from cloud-friendly to cloud-native

During the discussion, Akamai leaders will help attendees better understand their cloud utilization and start to gain control over cloud spending, while improving performance and agility.

The Cloud Spend Conundrum: Gain Control of Ballooning Cloud Costs

The cloud infrastructure of today cannot meet the requirements of tomorrow's applications.

New applications using AI and mixed reality require new approaches to provide more responsive applications and to protect privacy. Existing applications are becoming more personalized and customized. Customer experience needs to be seamless and reactive in the moments that matter.

Join us as we discuss how we're building a globally distributed cloud to meet the needs of your customers, partners, and your organization.

The Disruption of Cloud Computing in the Era of AI

Is your healthcare organization's digital transformation creating security blind spots? Join us for a fireside chat about the hidden risks of modernization where we'll explore threat trends and real-world case studies of how API vulnerabilities and DDoS attacks are impacting healthcare organizations today. Moderated by H-ISAC, security experts from Untangle Health and Akamai will share threat intelligence and best practices. You'll walk away with actionable insights and strategies to protect your systems without slowing down innovation.

Healthcare State of the Industry: Preventing Critical Cyber Threats

Join Akamai's financial services team as they delve into the growing challenges of DDoS and domain scraping leading to phishing attacks targeting the financial sector. Leveraging Akamai’s latest research, we'll unpack the significant rise in DDoS attacks, exacerbated by virtual machine botnets and geopolitical tensions, as well as the increasing threats of brand abuse and phishing campaigns.

The webinar will offer valuable insights into the evolving threat landscape, the vulnerabilities introduced by APIs, and proven strategies for deploying mitigation strategies like Zero Trust and microsegmentation. Join us to strengthen your defenses and gain insights on how to best safeguard your financial institution.

Navigating The Rising Tide: Attack Trends in Financial Services

In this episode of "If Your APIs Could Talk," we explore the Workflow Automation feature of Akamai API Security. This feature dramatically improves efficiency and productivity by simplifying the creation of multi-action workflows. It uses a user-friendly visual editor, customizable workflow samples, and over 300 pre-built connectors. In this session, you'll learn how to automate complex event response processes and synchronize incident-related data with third-party services like ServiceNow, JIRA, and Azure DevOps. We'll also provide examples of common workflow use cases, including: 

- Incident creation in ITSM solutions 
- Notifications to security and business teams 
- Data customization 
- Bi-directional sync with ticketing systems 
- Preventive workflows to block suspicious traffic 

Whether you're an existing user or considering Akamai API Security, this episode will provide valuable insights into using Workflow Automation to streamline your security operations.

Ep. 10 – Workflow Automation Deep Dive

As threat actors innovate, we need to update. This talk will focus on what is changing in the threatscape that is causing shifts in how healthcare needs to defend against latest extortion campaigns. Join Akamai’s Advisory CISO Steve Winterfeld, Director of Technology and Security Strategy Tony Lauro, and Healthcare & Life Sciences Strategist Carley Thornell, as they take a deep dive into the latest Akamai State of the Internet report on Ransomware. 

Learning objectives:
     - Initial compromise shift from social engineering to zero day 
     - Extortion shift to focus on holding data hostage, over encryption
     - Why you need to watch for follow-up attacks during recovery

Race against time: The dangerous shift to zero-day exploitation in healthcare

Cyber Attacks

Health IT

Health Tech

Ransomware

Zero Day Threats

Security

Attack Vectors

Cyber Security

Cyber Defence

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Race against time: The dangerous shift to zero-day exploitation in healthcare

Presented by

About this talk

More from this channel