Name: Tales from the Trenches: Malware and attack trends from Managed Defense, Q2 2024
Start: 2024-08-06T15:00:00Z
End: 2024-08-06T15:00:58.000Z
Location: BrightTALK
Rating: 4.5

Transform your cybersecurity with frontline intelligence, modern security operations and AI-powered cloud innovation.

In today's dynamic cloud landscape, maintaining a strong security posture is paramount. Google Cloud's Security Foundation offers a comprehensive set of recommended controls to address common cloud adoption use cases.

In this webinar, learn about four key use cases for strengthening your cloud security posture:
>AI & GenAI: Secure AI workloads, leverage AI for threat detection and efficiency, and ensure data governance.
> Infrastructure Modernization: Protect VMs and containers with identity-based access, network security, lifecycle management, monitoring, and governance.
> App Modernization: Shift left with vulnerability detection, supply chain security, and runtime protections.
> Data & Analytics: Maintain data governance, identify, categorize, and control access to your data.

Security Foundation: How to secure your cloud environment with built-in controls?

In 2024, SIEM systems remain pivotal to Security Operations Centers. However, the landscape has drastically changed. Modern SIEMs, enhanced with cloud-native architecture, UEBA, SOAR, Attack Surface Management, and AI, bear little resemblance to their predecessors from over 15 years ago.

Legacy SIEMs struggle with scalability, performance, and adaptability. Their outdated architecture cannot handle the high volume of log sources, keep up with emerging threats, or support new capabilities. They lack the flexibility needed for today’s multi-cloud strategies and fail to leverage advancements like AI.

Join this live webinar on migrating to a modern SIEM solution and explore:
 - The current state of the 2024 SIEM landscape
 - How to select and migrate a new SIEM solution
 - Pitfalls to watch out for and practical tips for moving forward

Your guide to the great SIEM migration

Today’s fragmented and static approach to managing cloud risks makes it nearly impossible to prioritize security issues. What if you could count the issues that matter on just one hand? Join us to learn about our advanced Virtual Red Team capability that runs thousands of simulations against a digital twin of your cloud environment, and pinpoints where and how cloud defenses could be compromised to expose high-value resources. It’s time to make attack path technology useful.

Breakthroughs in building a risk-centric strategy for cloud security

Artificial intelligence (AI) is poised to revolutionize how federal agencies operate, enhancing mission effectiveness and streamlining processes. However, the integration of AI also introduces unique cybersecurity challenges in the government context. How can federal IT leaders harness the transformative power of AI while ensuring the protection of sensitive data and critical systems?

Google Cloud Security partnered with market research firm Market Connections to determine how leaders are moving into the AI era with a strong focus on security. Join GovExec and Google Cloud Security as we share the findings of this study and look at next steps for the intersection of AI and security. 

You’ll learn about:

- The evolving threat landscape specific to public sector organizations
- Understanding the specific cybersecurity risks faced by federal agencies in the adoption of AI, including foreign interference, data breaches, and insider threats
- Security frameworks and best practices and strategies for government
- Critical AI capabilities for government
- Building trust in government; ethical considerations and privacy concerns
- Practical next steps for government

Secure AI: Mitigating Risk in the Age of Innovation

Organizations today face the growing challenge of pulling actionable insights from the noise surrounding generative AI, as media hype often overshadows the technology's practical implications. Because of this, it’s critical to have a clear understanding of what generative AI actually is and what it isn't.

In this webinar, we will demystify the benefits, challenges, and risks of AI based on our frontline observations. From there, we will help you adopt a practical framework to assess the security of AI in your environment and outline actionable strategies to improve your specific AI security approach.

You will also walk away with knowledge of a three-pronged approach that organizations can take to secure their existing AI solutions by:

*Assessing your security posture
*Performing threat modeling for your AI solutions
*Executing threat hunting across your AI pipeline

Presenters: 
Muhammad Muneer, Principal Consultant, Mandiant, Google Cloud Security
Dan Browne, Senior Consultant, Mandiant, Google Cloud Security
Jennifer Guzzetta, Product Marketing Manager, Mandiant, Google Cloud Security (Moderator)

An Actionable Approach to Assess and Improve the Security of Your AI Solutions

Elevate your threat hunting expertise by joining a live session with a leading Google Threat Intelligence researcher and a seasoned threat hunting expert. In this hands-on session, we'll guide you through the entire threat hunting process, from crafting your pipeline to executing various hunt types. We'll delve into the strategic and tactical use of Google Threat Intelligence to uncover critical insights, identify pivot points, and pinpoint additional indicators of compromise (IOCs) for your hunts.

Threat Hunting with Google Threat Intelligence

Join our webinar to learn how AI in Google Threat Intelligence helps your team uncover hidden threats, streamline investigations, and make faster, more informed decisions. See how AI is transforming threat intelligence in real-world scenarios.

Gemini in Threat Intelligence analyzes vast datasets and acts as a force multiplier, immediately surfacing threats most relevant to your unique risk profile, reducing the noise of generic alerts. It continuously learns from your actions, tailoring its output to become increasingly relevant to your specific needs over time.

Use Cases in Threat Intelligence: Leveraging Gemini

SMS toll fraud, also known as SMS pumping, is a sophisticated cyberattack targeting businesses worldwide. Malicious actors exploit vulnerabilities in your SMS systems, generating fraudulent charges by sending high volumes of messages to premium-rate numbers. This results in significant financial losses, often reaching thousands or even millions of dollars, leaving your business liable for the fraudulent activity.

Register for this webinar to gain a comprehensive understanding of SMS toll fraud and learn actionable strategies to protect your organization.

Key topics:
> Gain insights into the complex tactics and techniques used by fraudsters to exploit your SMS infrastructure.
> Understand the direct and indirect costs of SMS toll fraud, including financial losses, operational disruptions, and potential reputational damage.
> Discover industry-leading strategies and best practices to strengthen your overall SMS security posture and proactively mitigate future threats.

The Hidden Cost of SMS Toll Fraud: Strategies to Defend Against Costly Attacks

Whether you’re the OG or new to the SOC, AI can help you save time, get results faster, and reduce stress. Join us to see how Google Security Operations practically applies AI to help teams create queries, assist in investigations, generate detections, summarize large amounts of data, and build playbooks. We’ll give you a tour of where you’ll find AI capabilities in the product, how best to use them, and which use cases work best.

Work Smarter, Not Harder with Gemini in Security Operations

AI is rapidly changing the way we work and security professionals are not only thinking about how to apply generative AI to help them in their jobs, but also how to safeguard AI systems in their organizations as these tools become more prevalent. This session will outline how Google Cloud can support both of these efforts. Join us as we unpack our Product Vision for AI-Powered Security, as well as share how we are equipping defenders with strategies  and services to secure your AI data, models, applications, and infrastructure.

Securing the Future: The intersection of AI and cybersecurity

We’ve only just begun to realize the power of applying generative AI to security, but organizations using Gemini are already seeing improvement in how they manage complex security incidents. Learn how generative AI from Google Cloud can help seasoned security professionals quickly discover, investigate, and respond to threats, and help newcomers boost their skills to get more things done, faster. Join this session to learn about new features, hear from customers, and gain insights on how to address common security challenges with AI.

How AI can transform your approach to security

Outsmart attackers and protect your organization with intelligence-driven vulnerability management. In this webinar, Google threat intelligence experts will demonstrate how to prioritize vulnerabilities based on active exploit risk, get early warnings on threats, maximize patch efficiency, and reduce your attack surface.

Use Cases in Threat Intelligence: Making Vulnerability Management Easier

The complexity of cloud environments creates unique security challenges. These include dynamic attack surfaces and adversaries expertly disguising themselves with native tools.  Threat hunting becomes crucial for security teams seeking to reduce dwell time, by uncovering threats that slip past traditional defenses.

In our second installment to the Beyond Detection Threat Hunting series, Mandiant experts will discuss:
 - How to adapt your threat hunting program to cloud or hybrid environments 
 - Real-world examples of how to turn cloud compromises into hunt missions 
 - How hunt findings can influence cloud hardening and response 

Learn how to hunt for evidence from a previous or existing cloud compromise to enhance future response capabilities and realize new methods of threat detection.

Beyond Detection: Hunting for threats in the cloud

Decades of threat detection, investigation, and response initiatives over-relied on DIY approaches and delivered mostly underwhelming results. This webinar will introduce Google’s paradigm for modern security operations and demonstrate how recent advancements in applied threat intelligence, automation, and AI give defenders a chance to flip the script and generate more security outcomes with less effort.

Work Smarter, Not Harder: Frictionless Security Operations with Google

Discover how to streamline your security operations and maximize your threat intelligence investment. In this webinar, we'll explore essential use cases for Google Threat Intelligence, showcasing how it can empower your IOC Enrichment, Incident Response and Forensics, Threat Hunting, Brand Protection and Vulnerability Management.

Join us for a hands-on demonstration of each use case and see benefits of faster threat detection and proactive defense strategies.

Use Cases in Threat Intelligence: Turn Insights into Action

As more business-critical workloads are migrated to cloud environments, cloud security and security operations teams struggle to gain visibility and insight into the cloud risks that could jeopardize their business. Operational silos and disconnected tooling make it difficult to proactively identify high-risk issues and efficiently take the necessary steps to remediate them. But what if we could converge cloud security and SecOps into a single platform, with a single view of security events and data, to break down silos and manage the full lifecycle of cloud risks?

Join us to learn how proactive and reactive cloud security practices are coming together, enabled by converged platforms that unite security and SecOps teams so that more experts can act on cloud issues. See how Google Cloud’s Security Command Center can identify risks in multi-cloud environments, prioritize the most serious ones, and get them into the hands of the right teams for quick remediation. By bringing cloud security and SecOps together we can make the cloud safer.

Say Goodbye to Silos: Unify Your Cloud Security and Enterprise SecOps

The M-Trends 2024 Special Report provides an inside look at the latest cyber trends and attacker operations from around the globe. The second half of the report is dedicated to deep insights drawn directly from the frontlines of Mandiant investigations and threat intelligence findings that have shaped today’s evolving cyber threat landscape.

Join six of our report authors and experts on May 23, 2024 at 12:00pm ET as they share their point of view on these hot topics and provide best practice solutions to help improve your cyber defense capabilities in these areas.

Topics will include:
- China-nexus attackers targeting edge devices and platforms that lack EDR
- Trending adversary operations and motivations behind zero-day attacks
- The evolution of phishing techniques amidst modern security controls
- How attackers leverage AiTM to compromise MFA safeguards
- The reasons and solutions behind growing cloud and hybrid cloud intrusions
- How AI is effectively used in red and purple teams to help boost cyber defenses

Presenters:
Ryan Tomcik, Principal Security Analyst, Mandiant - Google Cloud Security
Mathew Potaczek, Principal Threat Analyst, Mandiant - Google Cloud Security
Josh Fleischer, Principal Security Analyst, Mandiant - Google Cloud Security
James Sadowski, Principal Intelligence Analyst, Google Cloud Security
Tucker Clark, Senior Security Consultant, Mandiant - Google Cloud Security
Josh Madeley, Regional Lead, Mandiant - Google Cloud Security
Jennifer Guzzetta, Product Marketing - Google Cloud Security (Moderator)

M-Trends 2024 Round Up: Expert Insights on 6 Key Topics

Mandiant Managed Defense presents a quarterly webinar series, "Tales from the Trenches," to help you navigate the ever-evolving threat landscape. Our security experts will dive into the latest malware and attack trends they've encountered in the previous quarter. You'll gain valuable insights into how these threats were detected, along with actionable advice to strengthen your own defenses.

In the second installment of the series, Managed Defense Consultants will detail findings from April through June 2024, including:

*Exploiting tax season with tax-theme phishing emails to deliver DARKGATE malware 
*Malicious JavaScript droppers from attempts to download pirated films
*Trojanized software campaign leads to backdoor deployment

Tales from the Trenches: Malware and attack trends from Managed Defense, Q2 2024

Threat Analysis

Threat Hunting

Threat Detection

Cyber Defense

Cyber Defence

Managed Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Storage

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Tales from the Trenches: Malware and attack trends from Managed Defense, Q2 2024

Presented by

About this talk

More from this channel