Name: The High Stakes of Innovation: Attack Trends in Financial Services
Start: 2023-12-05T16:00:00Z
End: 2023-12-05T16:00:17.000Z
Location: BrightTALK
Rating: 0

Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai’s cloud computing, security, and content delivery solutions.

Recognizing vulnerabilities in even the best-designed APIs.

Do you know that even the most well-designed APIs can be abused? Organizations invest resources in designing robust and efficient APIs to meet the demands of a connected world. However, a stark reality remains: Even the most meticulously crafted APIs are not immune to abuse.

Join our API security experts on Wednesday, December 13, as we discuss API abuse and the fact that no API, no matter how well designed, is safe. We will cover:
- The anatomy of real API abuse
- A deep dive into common attack vectors such as injection attacks, credential stuffing, and data scraping
- API threat hunting tactics Register now and start protecting your APIs from abuse.

Register now and start protecting your APIs from abuse.

Guarding Against API Abuse

Attackers love DNS spoofing. The ability to redirect unsuspecting victim's traffic is very appealing to the bad guys, and can lead to all sorts of devastating consequences - sensitive data exposure, credential compromise, and even remote code execution.

As every sysadmin knows - DNS is hard. It is a complex ecosystem with many moving pieces. One such "piece" is a seemingly harmless feature in the DHCP protocol called "DHCP DNS Dynamic Update", which allows a DHCP server to register DNS records on behalf of its clients. This feature is also present and enabled by default in the Microsoft DHCP server, one of the most common DHCP servers in the market.

In this session, we will explore this feature and show the attack surface it exposes in Microsoft environments - we will detail a novel attack tactic that could allow unauthenticated attackers to spoof arbitrary DNS records in Active Directory DNS zones, and show how this could be abused to intercept authentication and achieve remote code execution. We will examine the different security settings that should prevent these attacks, and show how they fail to do so in some cases.

Finally, we will release 2 open-source tools; the first one is meant to detect risky DHCP misconfigurations, and the second one - to exploit them.

Off The Record - Weaponizing DHCP DNS Dynamic Updates

How media companies are adapting to distributed cloud computing.

Hear what IT leaders told Forrester.

A recent Forrester Consulting study commissioned by Akamai shows that cloud costs, complexity, and regional challenges are still top of mind for media and entertainment leaders. Other concerns include:
 
• 67% said their organisation’s legacy systems are holding them back.
• 48% cited concerns with geographical challenges, such as data sovereignty and localisation.
• 48% said the volume of their online processing needs limit their flexibility.
 
Sign up today for a live webinar on 7 December to learn more about the study. The webinar will feature Akamai Principal Architect Peter Chave and guest speaker, Forrester Senior Analyst William McKeon-White.

Cloud Adoption Trends According to Media and Entertainment Leaders

Think your site isn't vulnerable to web scraping attacks? Think again. Malicious actors are eager to compromise your webpage scripts to gain access to customer credentials or credit card information. According to Akamai research, 50% of commerce customers use 3rd party scripts, which can be vulnerable to Magecart style attacks. In this session, we'll discuss the latest PCI DSS 4.0 requirements for script protection so brands can better identify, monitor and manage suspicious and malicious script behavior.

Commerce Chats: Make a Fast Break Toward PCI Script Compliance

The debate of prevention vs. response is a tired one in cybersecurity. Both sides have valid (if cliché) points. Yes … an ounce of prevention is worth a pound of cure. And yes… breaches are inevitable, so we must be capable of a timely response. In the rapidly changing digital landscape, organizations are constantly seeking tools that can seamlessly bridge this gap. 

Enter microsegmentation — a transformative approach.

Its innate ability to ward off threats, coupled with the agility to swiftly manage and mitigate breaches, makes it an invaluable asset in any cybersecurity toolkit. As threats grow in complexity and scale, understanding and leveraging the multifaceted capabilities of microsegmentation becomes not just advantageous, but essential.

During our data breach webinar, you will: 

- Discover microsegmentation’s dual role: deterring breaches and enabling rapid countermeasures
- See how this tool minimizes attack fallout, strengthening your defense posture
- Leverage advanced techniques and tactics to minimize MTTR during cyber events
- Grasp the essence of containment, allowing teams to swiftly neutralize threats while ensuring operational continuity

Reducing the Likelihood, Impact and MTTR of Ransomware with One Tool

In today's hyper-connected digital landscape, APIs are the backbone of modern software development and data exchange. As APIs become increasingly vital, so does the need to secure them effectively.

Join us for a tech workshop as our team delves deep into the world of API security to equip you with the knowledge and tools needed to ensure the discovery and integrity of your APIs.

Learn how API Security:
    - Is a critical component for organizations looking for protection from business logic threats and attacks
    - Provides enterprise-wide discovery and threat detection
    - Provides data rich insights to enable strong and customized responses
    - Is easy to deploy, reducing time to value, and resources and time to deploy
    - Integrates with your day to day work processes and systems

Watch a live demo of data scraping and user account takeover attacks, and listen to real stories from the forefront of API attacks seen in the wild, so don’t delay. Save your seat today.

Mastering API Security: Ensuring a Secure Digital Future

Join Akamai Solutions Engineers for “Portability in the Cloud: Best Practices for Building SaaS-Based Applications.” This on-demand session covers cloud-native technologies and architectures for developing scalable and agile SaaS-based applications, and you will learn about the benefits of microservices, containers, serverless computing, and event-driven architecture, as well as the best practices for designing, implementing, and maintaining them.

In this session, you’ll learn:

- Best practices for designing, implementing, and maintaining microservices, including using domain-driven design, automating testing and deployment, and securing services.
- Benefits of containers, such as improved scalability and simplified application management, and best practices for their use, including optimizing container usage and achieving faster development and testing cycles.
- Benefits of serverless computing, including automatic scaling and reduced operational overhead, and best practices for using event-driven architecture, monitoring and logging, securing functions, and cost optimization.
- Basics and benefits of event-driven architecture, and best practices for its implementation.
- Benefits of adopting a portable cloud-native architecture for SaaS-based applications, including improved scalability, availability, agility, reduced costs, security, resilience, and easier management, while also increasing the ability to innovate and stay ahead of the competition.

Portability in the Cloud: Cloud-Native Architecture for SaaS Applications

Akamai Solutions Engineers explore observability for software applications, covering the pillars of logs, metrics, and traces, and how SaaS product teams can leverage open-source tech to achieve end-to-end visibility, empowering quick issue response, data-driven decisions, and an optimized user experience. By the end of the session, you’ll gain practical insights into distributed tracing, log aggregation, UX monitoring, and analytics tools for comprehensive observability across critical application areas.

Here’s what you’ll learn:

- The importance and benefits of observability for software applications.
- The three pillars of observability: logs, metrics, and traces.
- How SaaS product development teams can leverage open-source technology for end-to-end visibility.
- Strategies for quickly responding to issues and making data-driven decisions.
- Techniques for optimizing the user experience and improving overall application performance.
- Specific technologies like distributed tracing, log aggregation, UX monitoring, and analytics tools.
- How to achieve observability across all critical areas of your applications, from the code to the customer.

Achieving Complete Observability for SaaS Applications

APIs are the primary mechanism for driving innovation and growth across the healthcare ecosystem. They facilitate the sharing of patient data while supporting appointment reservation platforms, access to lab test results, and patient-doctor communications. APIs are essential for regulatory requirements that give patients access to their own records. But with every opportunity comes challenges, and the volume and complexity of data that’s accessible and by whom, can have immense clinical and financial repercussions if the evolving threat landscape is not managed with appropriate security controls.

Join Akamai leaders Giora Engel, VP of API Security, Steve Winterfeld, Advisory CISO and Carley Thornell, Healthcare & Life Sciences Industry Marketing Manager to discuss prioritizing API discovery, use cases, detecting abnormal access and abuse patterns, and how to keep patients – and their data – safe.

Knowing is half the battle: API discovery's role in healthcare cybersecurity

It’s no surprise that API adoption is growing rapidly. The reality is that new business innovation and services are powered by APIs. But the rush to innovate is leaving security teams struggling to understand the very real security risks that APIs pose. Today, APIs carry vast amounts of data and are increasingly targets in data breaches. Featuring Forrester’s Principal Analyst Sandy Carielli, this talk will explain the very real risks of APIs and how organizations can improve their security posture. 

Is this webinar you will:
- Learn the latest API Security trends from Forrester
- Understand common API security concerns
- See the importance of API Discovery
- Understand how to use behavioral analytics for APIs

Your APIs Talk Too Much: Understanding API Security Problems

During the pandemic, we needed to shift our focus on where folks worked and in many cases, the company's business model. Now that things are stabilizing back to normal again, we need to shift to a model that can support flexible work locations and rapid transformation in how we support business revenue.  Join Phil Harris, Research Director at IDC, Tony Lauro, Director of Security Technology & Strategy at Akamai and Steve Winterfeld, Advisory CISO at Akamai, as they talk about what they are seeing across multiple industries.

How to approach post-pandemic security challenges

Akamai research observed threats against the commerce industry becoming more rampant, with more than 14 billion web application and API attacks in 15 months. Sign up now for our upcoming webinar that examines the attack trends in this industry, such as:

• More than 5 trillion malicious bot requests and their potential risks — from credential stuffing attacks to account takeover
• Over 30% of phishing attacks targeted commerce brands in Q1 2023
• Dangers of using third-party scripts, like Magecart and web skimming attacks, and how to mitigate them
• Critical attack vectors to watch out for in web applications

Attacks On Commerce - North America

Attacks On Commerce - EMEA

Akamai observes ransomware attackers are rampantly abusing zero and one-day vulnerabilities, leading to 2.4x growth in victims. Sign up now for our upcoming webinar to learn more about our data findings, such as: 

• 143% growth in ransomware victims 
• LockBit dominates the ransomware scene, accounting for 39% of victim organizations 
• Attacks against  manufacturing are proliferating, resulting in 42% growth in victims 
• Victims of multiple ransomware groups are almost 6x more likely to experience a subsequent attack within the first three months of the initial attack
• Ransomware groups increasingly target the exfiltration of files

Part 1: Wednesday, 6 September 11:00 EST| 16:00 BST | 17:00 CEST
Part 2: Wednesday, 13 September 11:00 EST| 16:00 BST | 17:00 CEST

Expert speakers: 

Ori David
Security Researcher
Akamai

Richard Meeus
Director of Security Technology and Strategy, EMEA 
Akamai

Ransomware on the Move - Part 2

Ransomware on the Move - Part 1

With nearly 50% of organizations regularly releasing vulnerable apps into production because of time restraints from the growing demand of faster turnaround, security is often not being integrated into the application development lifecycle until it is too late.

Additionally, the number of vulnerabilities is continuously increasing and exploitation attempts are being seen within 24 hours of disclosure. App and API attacks against organizations are on the rise.

Join us for a two-part webinar, each episode lasting just a bite-sized 20 minutes, where we will take a closer examination of the key takeaways of our recently released State of the Internet / Security report, Slipping Through the Security Gaps: The Rise of Application and API Attacks Against Organizations.

Some key takeaways include:
• LFI attacks tripled over last year and remain top attack vector
• App and API attacks surged in manufacturing and healthcare industries due to the major increase in IoT connections
• SSTI, SSRF, and web shells are emerging attack vectors

Presenters:
Patrick Sullivan, Vice President, Chief Technology Officer, Security Strategy, Akamai
Eliad Kimhy, Head of Akamai Security Research Core Team, Akamai
Anthony Lauro, Security Technology and Strategy Director, Akamai

Akamai SOTI - The Rise of Application and API Attacks - Part 2

As threat actors innovate, we need to update. This talk will focus on what is changing in the threatscape that is causing shifts in how healthcare needs to defend against latest extortion campaigns. Join Akamai’s Advisory CISO Steve Winterfeld, Director of Technology and Security Strategy Tony Lauro, and Healthcare & Life Sciences Strategist Carley Thornell, as they take a deep dive into the latest Akamai State of the Internet report on Ransomware. 

Learning objectives:
     - Initial compromise shift from social engineering to zero day 
     - Extortion shift to focus on holding data hostage, over encryption
     - Why you need to watch for follow-up attacks during recovery

Race against time: The dangerous shift to zero-day exploitation in healthcare

Review of Akamai's Latest SOTI - The High Stakes of Innovation: Attack Trends in Financial Services

The High Stakes of Innovation:  Attack Trends in Financial Services

Financial Services

Financial Security

Attack Vectors

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The High Stakes of Innovation: Attack Trends in Financial Services

Presented by

About this talk

More from this channel