Name: Decoding PowerDrop Vulnerability: AI and ML in Adlumin's Threat Hunting
Start: 2023-07-27T18:00:00Z
End: 2023-07-27T18:00:31.000Z
Location: BrightTALK
Rating: 5

Adlumin is the security operations command center that simplifies complexity and keeps organizations of all sizes secure. Its innovative technology and seamless integrations create a feature-rich platform with everything sophisticated security teams need, while empowering service providers and organizations of any size with collaboration and transparency for a coordinated, mature defense. With a vendor-agnostic approach and preexisting integrations, Adlumin obtains security telemetry from across an organization to provide greater insights into security alerts and streamline workflows. 

A note from Mark Sangster: 

The holidays are a time for rest, but cybercriminals don’t take time off. To help you enjoy your December break with peace of mind, the Adlumin team is bringing back an encore presentation of my webinar, Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025. Join me to learn effective defenses so you can relax through the holidays and into the new year.

Best,
Mark Sangster
VP, Chief of Strategy
Adlumin 

Adlumin’s Security Operations Center (SOC) is on the frontlines of cybersecurity, defending our customers against thousands of attacks daily. In August 2024, our SOC team encountered "Fog," a new variant of the STOP/DJVU ransomware family, which infiltrated a compromised VPN at a financial institution—the first attack of its kind in the sector. Thanks to Adlumin’s technology, the threat was swiftly contained, and the attackers were locked out before any damage could be done. 

Join Adlumin’s expert Mark Sangster, DPO and Chief of Strategy, as he walks you through some of our SOC’s most significant threat interceptions, including the Fog ransomware attack and how Adlumin’s Security Operations as a Service platform solution thwarted these attacks in their early stages. 

Key Takeaways: 
• An overview of the most notable threat actors Adlumin’s SOC team encountered 
• A step-by-step breakdown of the Fog data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack 
• Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks 

Register today to gain expert insights and actionable strategies to keep your organization from the ever-present threat of global bad threat actors.

Encore Presentation: Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025

Adlumin’s Security Operations Center (SOC) is on the frontlines of cybersecurity, defending our customers against thousands of attacks daily. In August 2024, our SOC team encountered "Fog," a new variant of the STOP/DJVU ransomware family, which infiltrated a compromised VPN at a financial institution—the first attack of its kind in the sector. Thanks to Adlumin’s technology, the threat was swiftly contained, and the attackers were locked out before any damage could be done.

 Join Adlumin’s expert Mark Sangster, DPO and Chief of Strategy, as he walks you through some of our SOC’s most significant threat interceptions, including the Fog ransomware attack and how Adlumin’s Security Operations Center as a Service (SOCaaS) solution thwarted these attacks in their early stages.

Key Takeaways:
- An overview of the most notable threat actors Adlumin’s SOC team encountered
- A step-by-step breakdown of the Fog data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack
- Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks

Register today to gain expert insights and actionable strategies to keep your organization from the ever-present threat of global bad threat actors. Plus, all webinar attendees will have the chance to assess their current ransomware defenses and one lucky participant will win a $200 Visa gift card!

Ransomware Stopped: Defending Against Fog and Other Threat Actors Now and in 2025

"Fog," a variant of the STOP/DJVU ransomware family, exploits compromised VPN credentials to breach defenses. In August 2024, a mid-sized financial institution became the first in its sector to be targeted by this variant, but Adlumin’s technology isolated and locked the attackers out.  

Join Adlumin experts, Kevin O’Connor, Director of Threat Research, and Will Ledesma, Senior Managed Detection and Response Director, as they walk you through the details of the recent attack, and how Adlumin’s Ransomware Prevention and Exfiltration feature thwarted the attack in its early stages, containing the threat before it could cause any damage. 

Key Takeaways:
- An overview of international FOG threat actors and their evolving tactics 
- A step-by-step breakdown of the data breach attempt and how Adlumin’s Ransomware Prevention stopped the attack 
- Best practices for strengthening your organization's defense against similar threats from cross-border cyber attacks 

Whether you're a cybersecurity professional or an IT leader, this webinar will provide valuable insights and actionable strategies to keep your organization from the ever-present threat of global Fog threat actors.

Defending Against Fog Threat Actors— How Adlumin Stopped  a Ransomware Attack in Its Tracks

Join us for a webinar with Bryan Boyle, Acting Chief of the Telecommunications Access Policy Division at the Federal Communications Commission (FCC), as he delves into the upcoming $200 million cybersecurity Pilot Program initiative designed to bolster the digital defenses of K-12 schools and school districts across the nation and determine whether they should be permanently funded using universal service funds. An interactive Q&A will follow.
 
Key Takeaways:
- Understanding the Funding: Gain insights into the purpose of the $200 million Pilot Program and how it aims to explore enhancing cybersecurity in educational environments.
- Application Process: Learn about the steps K-12 schools and school districts need to take to apply to participate in the Pilot Program and receive this crucial funding.
- Identifying Eligible Services and Equipment: Discover the types of eligible services and equipment schools and school districts can strategically use to address their cybersecurity challenges and protect their networks and students' data.
 
Who Should Attend:
- School district administrators and IT directors
- Education technology coordinators
- Cybersecurity professionals in the education sector
- Policymakers and educational leaders

Cybersecurity Funding for K-12 Schools: An Overview of the FCC's $200 Million Initiative

Compromised accounts are a leading contributor to major breaches. Yet, investment in identity and access management trails similar investments from criminals exploiting these weaknesses. Identities are still weak.  Hardening identity management can stop attacks in the early stages or the blast radius.
 
Join Airiam and Adlumin for a two-part webinar where we will guide you through hardening the most critical components of Active Directory and Microsoft 365.
 
Key topics include:
 
- The unique benefits of Adlumin XDR/MDR for comprehensive threat detection and response
- Airiam’s specialized hardening techniques for AD and Microsoft 365
- Real-world case studies showcasing successful implementations
- Best practices for integrating these powerful tools into your existing security framework
 
Don’t miss this opportunity to learn how Adlumin and Airiam can help you fortify your defenses against evolving cyber threats. Secure your spot today and take the first step towards a more resilient security infrastructure.

Assume Breach: Proactive Strategies for Cyber Resilience

In a cyber crisis, who makes the decisions: The senior person? The technical expert? The self-appointed hero? In crisis leadership, removing emotion is critical. Human biases, office politics, and perceived personal fears often influence or delay sound decision-making. The difference between a controlled event and a business-disrupting incident is your ability to harness these human factors to share expertise and ensure personal benefit does not trump organizational objections.

Join cybersecurity expert and author Mark Sangster as he identifies common crisis personalities, explores human bias, and considers leadership and learning models to help navigate the pitfalls of the human element in cyber incidents.

Multiple Personalities: Making Decisions in a Cyber Crisis

Ransomware continues to make headlines as attacks impact various industries including healthcare, education, and, more recently, car dealerships. As cybercriminals expand their targets, organizations need to consider not only how to prevent ransomware but also how to mitigate it when an attack happens.

Join Mark Sangster, VP, Chief of Strategy, as he breaks down real-world cybercrime examples from his upcoming book Cyber-Conscious Leadership: A Practical Guide to Protecting Your Organization Against Cyber Crime. Additionally, Sangster will explore Adlumin’s new ransomware feature.

Watch to:
- Understand ransomware’s lifecycle and what methods cybercriminals use to infiltrate an organization 
- Evaluate real-world examples from Sangster’s anticipated second book
- Implement strategies to teach your employees how to spot ransomware techniques 

As a thank you for joining the webinar, we’ll share our Threat Insights 2024 Volume II with all attendees during the session.

Real Life Stories of Ransomware and Recovery

In a cyber crisis, who makes the decisions: The senior person? The technical expert? The self-appointed hero? In crisis leadership, removing the emotion is critical. Human biases, office politics, and perceived personal fears often influence or delay sound decision-making. The difference between a controlled event and a business-disrupting incident is your ability to harness these human factors to share expertise and ensure personal benefit does not trump organizational objections. 

Join cybersecurity expert and author, Mark Sangster, as he identifies common crisis personalities, explores human bias, and considers leadership and learning models to help navigate the pitfalls of the human element in credit union cyber incidents.

Organizations constantly face evolving cyber threats, and staying ahead requires more than just awareness—it demands actionable strategies to defend against adversaries. Join Mark Sangster, VP and Chief of Strategy, as he delves into Adlumin’s latest threat research and shares real-life examples of how to apply these insights to strengthen your own defenses.

Why You Can't-Miss This Webinar:
·        Sneak Peek: Learn more about Adlumin’s ransomware ransomware prevention capabilities used to thwart cybercriminals’ attacks.
·         Actionable Intelligence: Discover how to convert threat research into practical defense measures for your organization. 
·         Tailored Solutions: Learn specific strategies for protecting against ransomware based on Adlumin’s threat research and Mark Sangster’s upcoming book.

As a thank you for joining our webinar, we’ll send you the new Cyber Threat Insights 2024 Volume II report.

Real-World Applications for Better Security: Adlumin’s Threat Research Insights

Decode cybersecurity jargon with Mark Sangster and make an informed decision when evaluating cybersecurity solutions.
 
The cybersecurity marketplace is vast and full of acronyms. Just knowing where to start, what kind of security to research, and which cybersecurity vendor to go with takes an enormous amount of time.

Join Mark Sangster, VP, Chief of Strategy, as he breaks down and simplifies the Managed Detection and Response (MDR) market. Mark will also discuss takeaways from Adlumin’s MDR buyer guide to help buyers make an informed decision.

In this webinar, you’ll learn how to:
- Understand the cybersecurity marketplace and the questions to ask when starting your search
- Evaluate what type of security solutions work best for your organization and how to meet compliance challenges
- Evaluate MDR companies and ask the right questions before taking any next steps
 
As a thank you for joining our webinar, we’ll send you our MDR Buyer’s Guide. Additionally, one lucky participant will receive a $200 Amazon gift card.

How to Choose an MDR Provider. Five Questions You Need to Ask.

This webinar will explore how artificial intelligence (AI) is being used to revolutionize data security. Industry experts Mark Sangster, VP, Chief of Strategy, and Ben McPherson, Head of Solutions Engineering, will discuss how AI is addressing emerging threats in the cybersecurity landscape and Managed Detection and Response (MDR) space. 

In this webinar, you’ll learn: 

- How AI can analyze vast amounts of data to identify and predict security threats. 
- Different ways AI can be used to detect unusual user activity that might indicate a security breach. 
-Methods for how AI can be used to scan networks and systems for vulnerabilities. 

As a thank you for joining our webinar, you’ll receive “The Ultimate Guide to Using Cybersecurity AI,” which includes key takeaways and recommendations for your security strategy. Additionally, one lucky participant will receive a $200 Amazon gift card.

Outsmarting the Adversaries: How AI is Transforming Threat Detection & Response

During this special Industry Tip Tuesday session, Mark Sangster delves into the distinct security hurdles the healthcare community faces. Joined by Sky Lakes Medical's John Gaede, Director of Info Services at Sky Lakes Medical, and Mike Perryman, Manager of Tech System, the trio discusses budgets, compliance, and patient care. 

Watch now to learn from the experts and gain actionable knowledge that can enhance your organization's cybersecurity posture.

Cybersecurity & Healthcare: Balancing Budgets, Compliance, & Patient Care

Sophisticated threat actors, such as ransomware gangs and state-sponsored adversaries, utilize ransomware to disrupt educational institutions and extort millions of dollars in ransoms. As these threats escalate, education leaders recognize the need to invest in cybersecurity. However, navigating the complex marketplace, acronyms, and hyperbolic promises make selecting technology and finding the right solutions challenging.

Join cybersecurity expert Mark Sangster, Vice President, Chief of Strategy, as he breaks down why cybersecurity is not just an IT problem but an agency problem.

In this webinar, you’ll learn: 
- Why educational leaders need to grasp the organizational risks related to cybersecurity to make informed decisions.
- How to optimize resources and programs to increase return on investment.
- Ways to meet regulatory requirements and showcase the success of cybersecurity initiatives to stakeholders within the education sector.

Ransomware Readiness: Why Cybersecurity is Not Just an IT Problem

Explore the latest ransomware cyber-threat trends in this new research from the Adlumin Threat Research Team

The Adlumin Threat Research Team has been dedicated to tracking and analyzing the most important cybersecurity trends, including ransomware. Keeping up to date with these threats can make the difference between a minor event and an operational shutdown.

Join Kevin O’Connor, Director of Threat Research, and our host, Mark Sangster, VP, Chief of Strategy at Adlumin as the pair reviews significant takeaways, trends, and vulnerabilities in the new Threat Insights 2024 Volume I report.

In this webinar, you’ll receive:
• Exclusive Insights from Adlumin’s Threat Insights 2024 Volume I report
• Detailed Analysis of Emerging threat trends in cybersecurity, including the latest in ransomware attacks
• Strategies to implement Proactive Vulnerability Management in your cybersecurity strategy

As a thank you for joining our webinar, we’ll send you our new Threat Insights 2024 Volume I report. Additionally, one lucky participant will receive a $200 Amazon gift card.

Highlights from the New Threat Insights 2024 Volume I Report

As ransomware continues to plague educational institutions, both by sophisticated threat actors like ransomware gangs and state-sponsored adversaries, the imperative to bolster cybersecurity measures becomes increasingly apparent. Educational leaders are acknowledging the urgency of investing in robust defense mechanisms. Yet, the process is hindered by the complexity of the cybersecurity landscape, replete with acronyms and exaggerated claims, making it daunting to discern the most suitable technologies and solutions.

Join cybersecurity expert Mark Sangster, Vice President, Chief of Strategy, for our Industry Tip Tuesday series, where he takes a 15-minute deep dive into security challenges facing the education industry.

Ransomware Reality Check: Education and Extortion

The crucial distinction between a minor cyber incident and a major organizational disruption often gets lost in translation. Technical practitioners focus on technology, while agency leaders prioritize industry value and reputation, but in critical moments, mutual understanding is paramount. 

Join Government Technology and Adlumin for a live webinar where our panel of experts will explore what effective leadership looks like during a cyber crisis. 

Cybersecurity expert and author Mark Sangster will draw on lessons from actual ransomware incidents to construct a Cyber Rosetta Stone, facilitating communication to avert cyber disasters. 

You'll Learn: 

- The best practices for maintaining sound decision-making during an active cyber crisis 
- How to navigate the interpersonal side of cyber attacks – like human biases, office politics and perceived personal fears
- Practical knowledge of building a comprehensive incident response strategy

Decoding Cyber Threats: Translating Binary into Industry Impact

Cybersecurity professionals preach the power of multi-factor authentication (MFA), but what happens when a cybercriminal goes around it?
 
Join Adlumin’s Mark Sangster and Kevin O’Connor as they demonstrate MFA bypass techniques using EvilGinx 3. In this webinar, you’ll also see how attackers can leverage hijacked session cookies and EvilGinx phishlets to compromise user accounts and access. The pair will also dive into how to combat these attacks, along with the benefits of a fully visible network for cybersecurity.
 
As a thank you for joining our webinar, you’ll receive “The Executive’s Guide to Cybersecurity,” that includes key takeaways and recommendations for your cybersecurity strategy. Additionally, one lucky participant will receive a $200 Amazon gift card.

Watch a Live EvilGinx Demonstration to See How Cybercriminals Bypass MFA

Community banks are the lifeblood of local economies, but they often face unique challenges, especially when it comes to juggling extensive compliance regulations with limited resources. Spend 15 minutes with Adlumin's Vice President, Chief of Strategy, Mark Sangster, and Executive Vice President & Chief Innovation Officer, ICBA Innovation, Charles Potts, to gain the knowledge and tools to protect your bank and your community!

The Balancing Act: Security vs. Budget in Community Banking

How to Break into the International Cybersecurity Market

Hunting for the unknowns...Where to start?

The Rise of BEC - 5 Tips for Adapting to Today’s Email Threat Landscape

Developing the requirements of a security analytics solution

Defend Against Today’s Cyber Threats: Harnessing the Latest Developments in AI

Creating and implementing incident response plans

Practical application of AI/ML in security monitoring and analytics

Evaluating Threat Detection and Response Solutions

Automation & Orchestration for Rapid Threat Response

Use IT security frameworks to map the threat landscape and reduce attack vectors

3 New Ways Cybercriminals are Targeting Your Email

Holistic ransomware planning: Is your organization one click away from chaos?

The Evolution of Data Security and the Threats That Are Wreaking Havoc on it

How to detect, prevent & respond to threats with threat intelligence [EMEA]

How to Super-Power Your Microsoft 365 Data Protection

SASE and Zero Trust: A Winning Combination for Securing Your Network Everywhere

Enabling Threat Detection and Response

In the ever-evolving landscape of cybersecurity threats, organizations face the constant challenge of detecting and mitigating sophisticated attacks in a timely manner. Implementing automation and machine learning into a threat hunting strategy is key, but what does that look like in practice?

Join Kevin O'Connor, Adlumin’s Director of Threat Research, as he demonstrates how his team discovered and remediated PowerDrop, an insidious PowerShell script for command and control attacks targeting the U.S. aerospace defense industry.

During Kevin’s live demo, you will learn:

- How Adlumin's Threat Research Team used Artificial Intelligence (AI) and Machine Learning (ML) to detect and remediate PowerDrop
- Daily threat hunting methodologies employed by O'Connor and his team
- Exploring the advantages of AI and ML in the field of threat hunting
 
As a thank you for joining our webinar, we’ll send you our new overview guide, The Executive’s Overview to Proactive Cybersecurity: Harnessing the Power of Security Operations. Additionally – one lucky participant will receive a $200 Amazon gift card.

Decoding PowerDrop Vulnerability: AI and ML in Adlumin's Threat Hunting

AI/ML

Threat Defence

Threat Detection

IT Security

Cyber Security

threat monitoring

Threat Hunting

Cyber Attacks

Security Operations

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Decoding PowerDrop Vulnerability: AI and ML in Adlumin's Threat Hunting

Presented by

About this talk

More from this channel