Name: Anatomy of the MGM Hack: A CyberArk Labs Perspective
Start: 2023-11-15T00:15:00Z
End: 2023-11-15T00:15:46.000Z
Location: BrightTALK
Rating: 5

Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity - seamlessly securing human and machine identities accessing workloads from hybrid to multi-cloud, and flexibly automates the identity lifecycle all with continuous threat detection and prevention – protecting organization’s identities and most critical assets by enabling Zero Trust and enforcing least privilege.  

As we've discussed previously in this series, Zero Trust operates on the principle that no entity is trusted by default. While identity security continues to mature as a key topic of discussion for cloud-native developers, machine identities are often overlooked. This is a critical error for organizations in this era of dissolved network perimeters.

In fact, machine identities now outnumber human identities by a factor of 45 to one. By including machine identities and secrets management in your Zero Trust strategy, organizations can ensure that only trusted machines can communicate on the network and that unauthorized access attempts are detected and prevented.

In this webinar, join our DevSecOps experts to lay the foundation for your machine identity security strategy:

-A rundown of machine identities and what they encompass.
-Why machine identity management is a Zero Trust strategy essential.
-Real methods of risk reduction and usable best practices to secure machine identities.

Why Machine Identity Security is Essential to Your Zero Trust Strategy

In this clinic, we focus on a business mandate to move all workloads to the cloud for operational efficiency.  The enterprise company must evolve its identity security program to align with digital business goals.  The ""mandate"" provides an opportunity to reimagine the security program including consideration of a complete SaaS migration.
We explore key considerations when “moving to the cloud” including: 
•    Identifying clear goals and timing
•    Understanding how architecture will change 
•    Completing a security review process, determining where data will be stored etc.
•    Following best practices for execution

Identity Security Clinic: Business Mandate to Move All Workloads to the Cloud

As cloud workloads surge, securing privileged access is critical. Emerging best practices, such as zero standing privileges (ZSP), are reshaping how we approach identity security. Join us to discuss CyberArk’s differentiator, T.E.A. (time, entitlements, and approvals), which tightens control over cloud access, reducing risk across your cloud.  It’s (TEA) time to give developers and cloud engineers their desired user experience – one that capitalizes on the benefits that SaaS and CSP consoles provide while still enforcing the necessary level of security.

It’s T.E.A. Time for Developers (Time, Entitlements, Approvals): Empowering Developers with Just In Time Access

Navigating the world of acronyms can feel like a maze! With JIT, ZSP, CIEM, CIAM, IAM, and more, it’s challenging to discern what’s essential for securing your cloud environment. Our security experts are here to guide you. Join us for an engaging discussion on cloud identity security trends that truly matter. We’ll focus on securing developer access at cloud velocity, covering key strategies:

-    Zero Standing Privileges (ZSP): Put an end to lateral movement by granting developers only the necessary access—no more, no less.
-    Native Access: Say goodbye to agents and delays! We’ll show you how to provide native access to elastic workloads and cloud services.
-    Centralized Management: Simplify multi-cloud access by automating and centralizing access requests.
-    On-Demand Elevation: Need critical access in a pinch? Learn how to elevate privileges without delay.

Making Sense of Developer Cloud Identity Security Trends

How can you secure human and machine identities in the cloud, without disrupting innovation? Whether you’re in the early stages of your cloud transformation or operating at scale across AWS, Azure and GCP, you’ll need an integrated approach to visualizing and securing high-risk access, with minimal friction for your efforts.

Join this webinar to learn from CyberArk and Wiz experts as they discuss:
- The importance of visibility over IAM roles, shared accounts and service accounts
- Tips for reporting and analyzing identity-centric security & compliance risks
- Remediating risks with intelligent privilege controls like implementing Zero Standing Privileges and secrets management 
- People and process recommendations for improving cloud security posture without slowing down developer and cloud operations teams
- Best practices for integrating Wiz’s cutting-edge cloud security platform and the CyberArk Identity Security Platform

CyberArk and Wiz – Securing Identity at the Scale and Speed of Cloud Development

Cyber threats and attack methods are evolving FAST, understanding recent breaches and how to prevent them from happening at your organization is critical. In our webinar, CyberArk Labs Deconstructing Attacker Methods in Recent Breaches, we reviewed some of the most significant breaches of the year. In this webinar we'll be taking a step further and providing you with actionable insights on risk mitigation, demonstrating how cybersecurity best practices can help safeguard your organization against similar threats.

Risk Mitigation Best Practices Based on Recent Breaches

In an era where cyber threats are evolving at an unprecedented pace, understanding the tactics and techniques used by attackers is crucial for effective defense. This webinar, presented by CyberArk Labs, delves into some of the most significant breaches of the year, offering an in-depth analysis of the methodologies employed by cyber adversaries. We will explore how these attacks were orchestrated, identifying the common threads and unique strategies that made them successful. Watch to gain a clearer understanding of the current threat landscape.

CyberArk Labs Deconstructing Attacker Methods in Recent Breaches

As AI technology becomes increasingly integrated into various products and services, it introduces new opportunities and challenges for cybersecurity. CyberArk's Andy Thompson, Offensive Security Research Evangelist, provides valuable insights on the evolution of AI technology and its impact on the cybersecurity threat landscape; how machine identities, including AI services, are becoming new targets for cybercriminals; emerging attack techniques like jailbreaking and indirect prompt injection targeting AI models; real-world demonstrations of AI-based attacks and their potential consequences; strategies to secure machine identities and protect AI-driven automation.

Ex Machina: The Attack Surface of AI-Driven Technology

While “Identity is the new and last standing security perimeter” isn’t unfamiliar, not all organizations have fully embraced it in practice. Today many still rely solely on MFA to secure their workforce identities and fail to properly manage and secure privilege at endpoints. This creates a much wider attack surface for threat actors to work with, and a false sense of security for organizations looking to reduce risk at and beyond the Identity perimeter. So how can organizations take their risk mitigation practices to the next level?  

In this session, CyberArk experts deep dive into advanced strategies and capabilities, including implementing phishing-resistant end-to-end passwordless authentication and Endpoint Identity Security, to reduce the attack surface and thwart potential threats at and beyond the Identity perimeter.

Advanced Strategies for Reducing Risk at and Beyond the Identity Perimeter

Identity and Access Management (IAM) solutions are no longer just ways to provide easy workforce access to applications, but critical tools in security and zero trust network access, creating the first line of defense against malicious actors and insider threats. 

In this panel discussion, experts from CyberRisk Alliance and CyberArk share their insights into trends in this evolution, as well as the best practices to leverage IAM solutions as a strategic security asset to protect organizations from cyberattacks, data breaches, and other threats. They discuss the challenges and opportunities of IAM in the era of cloud, mobile, and social technologies, as well as the emerging trends and innovations in the field.

Beyond IAM Achieving True Identity Security

"As organizations work to secure human identities, the identity attack surface has expanded significantly. While an ability to timely detect and respond to identity-based threats is crucial, proactive reduction of the identity attack surface is essential to prevent the majority of cyber incidents, especially targeted attacks and APTs.  

In this session, CyberArk experts cover five actionable strategies to reduce your identity attack surface. From safeguarding endpoints to protecting sensitive data, you’ll learn how to close your workforce access security gaps from modern attack vectors to help reduce the risk of identity-based attacks. "

5 Ways to Reduce Risk by Minimizing Your Identity Attack Surface

Join us to learn how CyberArk modernizes PAM programs for hybrid and multi-cloud environments. We'll cover right-sized privilege controls with Just-in-time (JIT) access and zero standing privileges (ZSP), enhancing your program to protect against emerging threats.

Modernize Your PAM Program for a Multi-Cloud World

Just as classic muscle cars were once the pinnacle of high performance, legacy IAM represented cutting-edge solutions in its time. However, as innovation transforms both muscle cars and modern IAM, we'll contrast their evolution, showcasing the agility and power of modern IAM solutions in today's digital landscape.
Picture your organization facing the challenges of outdated legacy identity systems, struggling with app migration complexities. Now, envision a streamlined solution—a No-Code Identity Orchestration Platform (IOP) leading your transition to a secure and efficient Identity Access Management (IAM) environment.
We'll guide you through strategies and dive deep into tools and technologies to help you achieve this transformation. 
• Understand the risks and complexities associated with legacy identity providers and on-premises app migration.
• Explore how Identity Orchestration simplifies app migration without requiring code changes, ensuring a smooth transition to modern IAM solutions.
• Discover the Security First approach of IAM solutions combined with Identity Orchestration, enhancing control and resilience.
• Learn phased migration techniques, coexistence with legacy systems, and flexible rollback options to mitigate risks during the transition.
Join us to unlock the benefits of improved organizational efficiency, reduced IT overhead, heightened security, and a seamless user experience as you embrace modern IAM solutions.

Transforming Identity: No-Code Solutions for ditching legacy and embracing Modern IAM

Cybersecurity professionals are tasked with the responsibility of mitigating cyber risk and implementing strategic initiatives, such as Zero Trust. Establishing foundational identity and privilege controls on the endpoint are key to a successful Zero Trust strategy and are vital to prevent privilege abuse (including tampering). Join our webinar to learn why Zero Trust on endpoints should start with Endpoint Identity Security. Discover how enforcing role-specific least privilege can form a strong foundation for the adoption of Zero Trust, Identity-First Security, and other strategic cyber security initiatives.

The Principle of Least Privilege: Accelerate your Zero Trust and Compliance Strategic Initiatives

Maintaining a strong identity security program for employees and remote users is paramount when analyzing threats to an organization's critical assets. Join us to learn more about extending privileged access management to remote workforce, third parties, and external vendors centered around Zero Trust principles. We'll focus on use cases for a modern approach to securing remote access, audit and compliance considerations, and best practices when exploring efficient ways to secure external access for privileged and business users.

Secure Your Vendors' Access from Attacks on Third-party Vulnerabilities

Given the rapidly evolving threat landscape, the importance of a centralized identity security program is vital for both human and machine identities. While other vaults and open-source tools have their merits, these on-premises tools often require costly skills and resources to host and maintain. Organizations may feel stuck supporting the open-source version and dealing with a siloed security experience due to upgrade challenges.

The good news is that you are not alone and there is a migration path to a centralized SaaS secrets management solution that fully integrates with the CyberArk Identity Security Platform. This webinar will demonstrate the steps others have taken to achieve this transition and highlight key security benefits and operational efficiencies that come with it.

Join this webinar to learn:

-The best practices and common pitfalls of moving from an on-premises to a cloud-based solution for managing your secrets and machine identities.

-The benefits of centralizing your secrets management with CyberArk SaaS: Discover how you can reduce the complexity and cost of hosting and maintaining your own secrets management tool, while enhancing your security posture and compliance with CyberArk's SaaS offering.

-How CyberArk SaaS integrates with your DevOps tools and workflows: See how you can leverage CyberArk's APIs and plugins to securely access and rotate your secrets across different environments and platforms while enabling collaboration and automation among your developers and DevOps teams.

How Security Teams are Solving Vault Sprawl with a Modern SAAS Solution

In this eye-opening presentation, we raise the alert of Qilin, a sophisticated Ransomware as a Service operator specifically targeting the U.S. healthcare sector. Discover how threat actors evade EDR detection, exploit MFA vulnerabilities, and execute devastating attacks on medical institutions. Through a detailed walkthrough of real-world scenarios, learn about the offensive tactics employed by threat actors and gain crucial insights into defending against these attacks. Our experts offer an in-depth analysis of the attack methodology as well as valuable industry perspective, including potential solutions including CyberArk Endpoint Privilege Manager. This session is essential for IT professionals in healthcare seeking to bolster their cybersecurity defenses against evolving ransomware threats.

Critical Condition: How Qilin Ransomware Endangers Healthcare

If you are experiencing an organizational tug-of-war in planning your identity security program, you are not alone. Based upon decades of experience, the CyberArk Blueprint for Identity Security was designed to help organizations prioritize initiatives for maximum risk reduction. In this session, CyberArk’s Security Advisory Group breaks down tools, techniques and methods for balancing organizational priorities and drivers with meaningful risk reduction. Learn how to use the CyberArk Blueprint, our identity security best practices program framework, to balance the needs and requirements of your organization as you protect against malicious actors. Whether your organization’s priorities are driven by operational efficiency, an internal incident, a zero trust initiative or something else, the insights will help you to validate your approach against the lessons learned via 8,500+ deployments globally.

Balancing Risk and Organizational Priorities with the CyberArk Blueprint

Every User Can Be a Privileged User: Securing Access for High-Risk Workforce Users

Key Identity Guidance with SC Media and CyberArk

IAM Evolution: Enhancing Security in a Hybrid World of Evolving Threats

Going Beyond the Perimeter: Strategies to Secure Your Workforce and Endpoints

Securing the Modern Workforce: The Power of Intelligent Privilege Controls

Strengthening Your Security Perimeter to Shut Down Identity-Based Attacks

Manage Workforce Passwords Seamlessly Across the Enterprise

Going Passwordless for Enterprises Key Considerations for Success

Mitigate Your Risk with Six Steps and New CyberArk HAR Tool

3 Easy Ways to Automate PAM for a Huge Impact

From Foundational to Exceptional: Best Practices for Access Management

Better Security with Threat Response Automation

The Path to Secure HR-Driven Employee Lifecycle Management

You Have a Password Management Problem.  Let's Solve It.

Beyond the Login: Security First IAM

On September 11 threat actors initiated a social engineering attack that led to the near shutdown of MGM Resorts International.  This attack highlights the importance of deploying a wide variety of robust security measures and best practices in an organization’s strategy for protecting identities, especially those that are highly privileged.
CyberArk resident experts, Khizar Sultan and Andy Thompson, examine the root causes and lessons learned from the MGM Resorts attack based on publicly available sources. They also provide insights into properly implementing effective security measures and highlight the consequences of failing to do so.

Anatomy of the MGM Hack: A CyberArk Labs Perspective

Hackers

Data Breach

Cyber Threats

Risk Mitigation

Identity Security

Endpoint Privilege Management

Protecting Data

Security

Best Practice

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Anatomy of the MGM Hack: A CyberArk Labs Perspective

Presented by

About this talk

More from this channel