Name: Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach
Start: 2024-08-27T15:00:00Z
End: 2024-08-27T15:00:13.000Z
Location: BrightTALK
Rating: 4.6

Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai’s cloud computing, security, and content delivery solutions.

In this episode of "If Your APIs Could Talk," we explore the Workflow Automation feature of Akamai API Security. This feature dramatically improves efficiency and productivity by simplifying the creation of multi-action workflows. It uses a user-friendly visual editor, customizable workflow samples, and over 300 pre-built connectors. In this session, you'll learn how to automate complex event response processes and synchronize incident-related data with third-party services like ServiceNow, JIRA, and Azure DevOps. We'll also provide examples of common workflow use cases, including: 

- Incident creation in ITSM solutions 
- Notifications to security and business teams 
- Data customization 
- Bi-directional sync with ticketing systems 
- Preventive workflows to block suspicious traffic 

Whether you're an existing user or considering Akamai API Security, this episode will provide valuable insights into using Workflow Automation to streamline your security operations.

Ep. 10 – Workflow Automation Deep Dive

In this "If Your APIs Could Talk" episode, we'll explore the Akamai API Security Native Connector feature. This new integration, built directly into our API Security solution, enables companies to send a copy of their Akamai Connected Cloud traffic to our API Security solution for analysis with just a few clicks. Enabling this integration provides complete visibility into your APIs across environments managed by Akamai, allowing for the detection of vulnerabilities and the ability to rapidly act on runtime incidents. The session will include a demonstration of the connector's seamless deployment, a technical explanation of how it works, and a spotlight on its operational benefits.

Ep. 9 - Akamai API Security Native Connector Deep Dive

We have all heard this story before - a critical vulnerability is discovered in a VPN server. It's exploited in the wild. Administrators rush to patch. Panic spreads across Twitter. 

Attackers have long sought to exploit VPN servers - they are accessible from the internet, expose a rich attack surface, and often lack in security and monitoring. Historically, VPNs were primarily abused to achieve a single objective: gaining entry into internal victim networks. While this is evidently very valuable, control over a VPN server shouldn't solely be seen as a gateway to the network, and can certainly be abused in various other ways.

In this talk, we will explore VPN post-exploitation - a new approach that consists of different techniques attackers can employ on the compromised VPN server to further progress their intrusion. To demonstrate this concept, we will inspect two of the most common VPN servers on the market - Ivanti Connect Secure and Fortigate, and show how an attacker with control over them can collect user credentials, move laterally, and maintain persistent access to the network.

We will conclude by detailing best practices and principles that should be followed by security teams when using VPN servers to reduce the risk from post-exploitation techniques.

During the session, you will:
- Explore critical vulnerabilities and real-world exploits on popular VPN platforms.
- Discover post-exploitation tactics for credential collection, lateral movement, and persistent access.
- Learn best practices to enhance VPN security and reduce advanced threat risks.

Tunnel Vision: Exploring VPN Post-Exploitation Techniques

Did you know increasing observability could be your secret to success this holiday season? When performance and security matter most, being able to quickly identify and pinpoint issues means getting back on track - and back to driving revenue.

Join us for a fireside chat where we’ll dive into how observability can help optimize performance, enhance security, and improve user experience during critical high-traffic periods. It’s not too late to leverage tools that help ensure your infrastructure is resilient — and ready to handle peak demands — in a more cost effective way.

Key Takeaways:

Proactive Performance Optimization: Discover how to reduce site load times and prevent downtime during peak periods, keeping users engaged and satisfied.
Enhanced Security Measures: Learn how to protect your business from increased cyber threats during high-traffic events, with real-world examples of successful mitigations.
Data-Driven Decision Making: See how unified traffic views can streamline operations, reduce costs, and enable quicker, more informed decisions.
Success Stories: Hear about companies like global airlines and luxury brands that overcame peak-season challenges with TrafficPeak, ensuring smooth and secure user experiences.

3 Ways Observability Can Help You Prepare for Peak -- And Beyond

Viewership is unpredictable. Capacity planning and cost estimates are hard. Workloads are increasingly complex and optimizing performance in a multicloud environment is never-ending.
 
For streaming services, that translates into a cost-effective, reliable, and trusted platform on which developers can build, deploy, and secure applications and workloads everywhere your viewers connect online, no matter which device they use to stream. The end result is low latency, increased speed to market, and better performance of your applications. Learn how Akamai’s cloud computing services come with low-cost, predictable pricing and award-winning developer support.
 
The partnership with Ateme brings benefits to Akamai customers in the form of end-to-end superior quality video-delivery solutions — enabling more choices and allowing easy adoption and deployment in your digital transformation journey.
 
In this webinar, media owners will learn about ways to boost viewership and subscriber engagement while unifying delivery and enhancing quality.
 
 • Cost optimisation
 • Low latency
 • Ease of adoption
 • Flexible deployment

Discover how Akamai and Ateme lower the barrier to entry to cloud computing in the media and entertainment industry

As web applications and APIs have proliferated, they’ve become an attractive target. Akamai’s latest report reveals an increase of 49% in web attacks from Q1 2023 to Q1 2024. The report also provides detailed analyses of trends by industry and region, and a look at DDoS attacks with a DNS component. Access the report for the insights you need to effectively prioritize your security strategy and spending.

Digital Fortresses Under Siege: Threats to Modern Application Architectures

In this session, we'll discuss the latest PCI DSS 4.0 requirements for script protection so brands can better identify, monitor and manage suspicious and malicious script behavior.

Akamai Client Side Protection & Compliance

Demonstrating compliance with data protection regulations has traditionally required significant effort and resources to mitigate mostly familiar risks. However, the digital landscape is evolving rapidly, introducing threats that many enterprise compliance programs don't fully address. Even regulatory bodies themselves can't always keep pace and provide explicit guidelines covering every aspect necessary to prevent breaches.

This is the case with API protection. Every time a customer, partner, or vendor engages with your business digitally, there's an API behind the scenes facilitating a rapid exchange of information that often includes sensitive data. Understanding and mitigating API threats is essential as APIs become increasingly integral to our technological infrastructure. This webinar will equip you with an understanding of API risks, effective strategies to safeguard your systems, and the direct implications of APIs on your compliance initiatives.

This webinar is ideal for IT professionals, security analysts, compliance officers, and anyone involved in API development and management who is looking to enhance their understanding of API security and compliance.

API Security and Compliance: Requirements for Data Protection

Viewership is unpredictable. Capacity planning and cost estimates are hard. Workloads are increasingly complex and optimizing performance in a multicloud environment is never-ending.
 
For streaming services, that translates into a cost-effective, reliable, and trusted platform on which developers can build, deploy, and secure applications and workloads everywhere your viewers connect online, no matter which device they use to stream. The end result is low latency, increased speed to market, and better performance of your applications. Learn how Akamai’s cloud computing services come with low-cost, predictable pricing and award-winning developer support.
 
The partnership with Ateme brings benefits to Akamai customers in the form of end-to-end superior quality video-delivery solutions — enabling more choices and allowing easy adoption and deployment in your digital transformation journey.
 
In this webinar, media owners will learn about ways to boost viewership and subscriber engagement while unifying delivery and enhancing quality.
 
 • Cost optimization
 • Low latency
 • Ease of adoption
 • Flexible deployment

Discover how Akamai and Ateme lower the barrier to entry to cloud computing in the Media and Entertainment industry

As the use of payment card data has evolved and become more widespread, the methods and techniques that attackers use to access, harvest, and sell that data have evolved in concert. The Payment Card Industry Data Security Standard, or PCI DSS, has adapted in turn, forcing companies to update their policies and their software. The latest standards, PCI DSS 4.0 and 4.0.1, include several new security requirements and updated guidance to address current threats and technologies. In this on-demand video webinar, sponsored by Akamai, you’ll learn the importance of:

Streamlining workflows for security and compliance teams
Reducing the auditing burden with purpose-built and dedicated PCI capabilities
Receiving and logging actionable PCI alerts for events related to compliance
Consolidating vendors to meet PCI requirements with Akamai’s comprehensive portfolio of security solutions.

Accelerate Your Compliance with the Latest PCI DSS Standards

APIs power the modern world. They are the fundamental building blocks of every application, enabling seamless communication and data sharing across the digital landscape. However, this very reliance on APIs makes them increasingly the target of attacks, with cybercriminals actively seeking to exploit vulnerabilities, gain unauthorized access, and extract sensitive data.
Join us to discuss why API security is not just an add-on but a critical component for businesses looking to innovate and scale. This webinar will highlight the growing threats to APIs and why securing them is vital for the future of any organization. We'll also examine how our newly acquired API Security solution enhances our Application Security portfolio to protect your business from evolving threats and support your growth ambitions.

Future-Proofing your Business: Why API Security is Essential for Growth and Innovation

Securing cloud environments is a critical aspect of modern enterprise operations. This event is designed for IT professionals and managers focused on protecting their organization's cloud infrastructure.

Attendees will explore the latest strategies and technologies for cloud security, including identity and access management, data encryption, threat detection, and data security posture management. Experts from leading cloud security companies will provide practical insights into implementing robust security frameworks, ensuring compliance with industry standards, and effectively responding to security incidents with the latest tools.

Get the knowledge you need to secure your cloud environment and maintain the integrity of your data.

The Cloud-Powered Enterprise: Securing Your Cloud

As more and more organizations adopt a Zero Trust architecture (ZTA), many initiatives overlook the increased prevalence of API-based access to sensitive application functionality and data. As CISOs move forward in their ZTA journey, how can they extend these principles to their API strategy to ensure security from the network layer to the application layer? 

Join this session to discuss: 

Breaking the kill chain by stopping infection vectors and protecting against lateral movement 
Shielding sensitive data and limiting how APIs interact with data 
Increasing real-time visibility across the business to mitigate threats

From Z to A - Extending Zero Trust to APIs

Zero Trust is at the forefront of everyone’s minds, with a strong emphasis on modern IT software and services. Conversely, operational technology (OT) and the Internet of Things (IoT) play a critical role in many businesses, and are undoubtedly the focus of threat actors seeking to exfiltrate data and disrupt the production line for ransom. In this webinar, we aim to discuss the challenges of the OT world and showcase live solutions to enhance resilience against threats to your production environment. We also intend to broaden your perspective by exploring the options Akamai can provide to further strengthen both your OT and IT domains.  

Key takeaways from the webinar: 
- See how achieving a higher security level and even implementing Zero Trust is possible for OT environments. 
- Witness a live demo to see how Akamai can reduce risks for both OT and IT. 
- Learn more about the Akamai Zero Trust portfolio to protect your critical assets comprehensively.

Mission Possible: Zero Trust for OT

Edge computing is a method to process your data locally, close to users and devices, which saves bandwidth, reduces latency, and delivers high-speed digital experiences. What’s not to love? This is why increasing numbers of organizations across the globe are starting to explore this latest innovative approach to cloud computing.

Of particular interest to edge computing pioneers are edge-native applications, which you specially design to take advantage of edge computing capabilities and to push experiences and data closer to your users, regardless of where they are located across the globe. But how do you get started? This is the focus of Episode 3: Your Journey to Edge Native, the third installment in our new three-part video series, Building in the Cloud: How to Optimize Cost and Performance.

What to expect in Episode 3:
• Gain a good grounding in the concepts and benefits of edge computing and edge-native applications.
• Receive an introduction to innovative technologies, including HarperDB, which can help you enable edge-native capabilities.

Why watch Episode 3?
• Learn how to apply an edge-native approach to cloud computing to realize low-latency data replication and global-scale services delivery.
• Find out the reasons why now is a great time for you to start exploring edge computing and edge-native applications.
• Discover real-world examples of how and why organizations are adopting edge-native applications.

Available soon to watch on demand:
All three episodes of our video series Building in the Cloud: How to Optimize Cost and Performance
• Episode 1: Deliver Low-Latency Applications and Reduce Costs
• Episode 2: Use Observability to Optimize Costs
• Episode 3: Your Journey to Edge Native

Your Journey to Edge Native

Observability or the ability to monitor, and measure what's happening inside your cloud computing architecture in real time is vital information for every organization. These insights can help you understand how to improve user experiences for your customers, enabling you to increase customer satisfaction, loyalty, and retention.

Examining the different flavors of observability is the focus of Episode 2: Use Observability to Optimize Costs, the second installment in a new three-part video series, Building in the Cloud: How to Optimize Cost and Performance.

What to expect in Episode 2:
• Find out about the benefits of having full visibility into your cloud computing infrastructure.
• Explore how observability solutions can help you to anticipate content demand, and to avoid painful data tradeoffs.

Why watch Episode 2?
• Discover how to optimize your global delivery, while safeguarding your customer experiences.
• Learn how to use observability to help lower your cloud costs.
• Compare and contrast the different types of observability tools, including managed observability services versus more 'build your own' observability options.

Coming next:
• Building in the Cloud: How to Optimize Cost and Performance, Episode 3: Your Journey to Edge Native

Use Observability to Optimize Costs

If you've been wanting to double down on your API security strategy, now is the perfect time. Learn how you can locate legacy and undocumented APIs, monitor traffic to eliminate vulnerabilities, and prevent attacks in real-time. We'll show you how to integrate robust security tests, uncover data policy violations, and build security into your API development process.

With Akamai API Security's new flexible deployment options, extended intelligence across API traffic locations, and expanded suite of integrations as part of our acquisition of Noname security, you can protect your API environment across any platform.

Don't miss this chance to enhance your API security and take advantage of Akamai's new, advanced API protections for your organization.

Ep. 7 - Doubling Down on API Security

Ep. 6 - Monitor Right & Shift Left: Reshaping API security with Advanced Testing

Ep. 5 - Rise of AI Assisted API Attacks

Ep. 4 - A Year in the Life of an API: Chronicles of Security Evolution

Ep. 3 - The Importance of Data Tokenization Over Traditional Encryption

Ep. 2 - What Drives API Security Compliance

Ep. 1 - The Importance of Storing Data in Your API Security Strategy

If Your APIs Could Talk

In this episode of “If Your APIs Could Talk”, we will uncover intricate strategies used by cyber attackers through a real-life API breach, focusing on the vulnerabilities that were exploited to manipulate a major retailer's loyalty program. Discover the significant impact of these attacks and the measures you can take to reinforce defenses and avoid similar intrusions. This episode will help you learn more about the constantly changing landscape of API security and ways to safeguard your organization against advanced API threats.

Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach

APIs

API Management

Threat Detection

API Security

Application Development

API Testing

Attack Vectors

Cyber Security

Cyber Attacks

DevSecOps

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach

Presented by

About this talk

More from this channel