Name: Top Attack Paths in AWS and How to Efficiently Remediate Exposure
Start: 2023-11-08T14:00:00Z
End: 2023-11-08T14:00:47.000Z
Location: BrightTALK
Rating: 5

XM Cyber brings innovation to the security industry with patented products that address the unique gaps that arise in large, complex networks.  By safely and continuously simulating attacks, XM Cyber exposes real-life security issues that arise from vulnerabilities, human error and misconfigurations. Remediation recommendations are prioritized based on criticality and relation to the customer’s most critical assets.  The customer achieves a continual cycle of security posture improvement, optimizing security investments and human resources, and lowering exposure and risk. XM Cyber was founded by top executives from the Israeli cyber intelligence community and has offices in the US, UK, and Israel.  For more information, go to xmcyber.com.

Did you know that 71% of organizations have exposures that can allow attackers to pivot from on-prem to cloud? 

Or that once an attacker accesses a cloud environment, 92% of critical assets lie just one hop away?

But did you also know that 75% of all exposures lead to dead ends – or issues that don’t put organizations’ critical assets at risk?

Want to discover more fascinating stats and trends impacting exposure management in 2023?

Join us for a webinar with Cyentia Institute’s Wade Baker, as he explores the findings from our new research report, Navigating The Paths of Risk: The State of Exposure Management in 2023, along with XM Cyber’s SVP Product and Innovation Menachem Shafran and VP Research Zur Ulianitzky.

Presenters:

Wade Baker, PhD - Partner @ Cyentia Institute
Zur Ulianitzky - VP Research @ XM Cyber
Menehem Shafran - VP Product @ XM Cyber

Navigating The Paths of Risk: The State of Exposure Management in 2023 Webinar

Misconfigurations within Azure environments are more common than you think. It’s important to learn and understand how attackers can exploit these misconfigurations and, more importantly, what happens behind the scenes so you can be better prepared to prevent them.

In this webinar we’ll show you:

     -   New approaches that attackers use to compromise your critical Azure assets.
     -   Insights into the quickest path for remediation by focusing on attack paths with high risk.
     -   Best practices to prevent attacks such as removing unnecessary permissions from users, groups, and identities.

Prevent cyber attacks in Azure before they happen

Nearly every enterprise on the planet has tools to address vulnerabilities. 

 

But how can you understand the ROI of your efforts? 

 

We commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and explore the potential ROI for enterprises using XM Cyber Exposure Management. Join us for an enlightening webinar on March 2nd, where you will learn how to:


    ○  Reduce costs in remediation, fines, customer costs, lost revenue, and brand reputation rebuilding by $12.4 million
    ○  See a $700,000 decline in labor costs related to patching and remediation activities 
    ○  Experience a 90% reduction in the likelihood of a severe breach

Learn how Forrester says you can save >$14M over 3 years with XM Cyber

According to Gartner, “It is critical to make concentrated efforts to comprehensively secure and monitor Active Directory, proactively look for threats and misconfigurations, and remediate to prevent dangerous actions from taking place.”

XM Cyber is the first in the industry to show how Active Directory abuse comes into play in the entire attack path, bringing multiple attack techniques together to pinpoint the highest risks and offer step-by-step remediation guidance.

Join the webinar to learn:

 

      ● How Active Directory (AD) exposures combined with other attack techniques form attack paths
      ● What kind of actions the attacker can perform once they compromise an AD user
      ● What to do for better Active Directory Security

How To Overcome Active Directory Exploits And Prevent Attacks

Building a resilient cybersecurity infrastructure with multiple security controls leaves organizations exposed and vulnerable with inherent security gaps. Cyber attackers look for these security gaps to move laterally on their way to your critical assets.

There’s a reason why vendors don’t want to share with you why Breach and Attack Simulation (BAS) won't validate security.

Join this webinar to learn why:
- Emulating attacks across the entire attack kill chain delivers an accurate picture of risk exposure
- Testing controls across the whole security infrastructure delivers a comprehensive security posture score
- Monitoring constant, dynamic changes such as configurations, incident and investigation management, access control, password policies, user and role administration strengthens defenses

What BAS Vendors won’t tell you about BAS

This session provides a comprehensive overview of the evolution of vulnerability management and explains why critical vulnerabilities do not necessarily equal risk. By watching it, you will gain insights into the broader concept of exposures, how they affect organizations, and why security controls alone are not sufficient to keep you safe.

Watch now to:
- Discover the benefits of a fresh approach to vulnerability management programs
- Achieve comprehensive security controls by looking beyond CVEs
- Develop an efficient remediation strategy by mastering the key fundamentals of high-performing exposure management

Building a Modern Exposure Management Program

Understanding ‘Lone Wolf’ Attacks Dissecting and Modeling 2022’s Most Powerful Cyber Attacks

In this session, we will learn from a leading Incident Response company what lone wolf campaigns look like, what they are targeting and how easy it is to get the initial foothold. We’ll then look from a defenders perspective and understand how using graph based modeling of your exposures, these types of campaigns can be prevented in advance. 

What you will learn:

    ○  How attackers buy their initial foothold and get into your organization
    ○  What attackers are doing today once they’re in your network
    ○  How organizations can get ahead of the next attack and remediate these exposures that block the most common enterprise attack techniques today

Understanding ‘Lone Wolf’ Attacks

Phishing attacks are proving to be the most successful attack method of 2022. And the one thing they all have in common is leveraging abused Domain Credentials and stolen tokens to compromise an organization's critical assets.

 

While the attack surface is continually expanding, organizations today have a hard time maintaining a tiering model and processes around permissions and authorization over time. Attackers use this to compromise low hanging fruit of lower privileged accounts and move laterally within the network, reusing stolen credentials and credential hashes.

Join this webinar to learn:

- The inherent risk that come with Domain Credentials
- How to remediate credential exposures
- Why security controls don’t ensure you are protected against threats

Discover and Remediate Domain Credential Exposures

Ransomware groups are looking for ways to reach your critical assets, to increase their chances of getting a higher ransom payout. For the same reason, they have begun employing the double extortion technique, where before encrypting your data, they exfiltrate it and then threaten to leak it online. Searching for routes to reach your critical assets, attackers are lying low, propagating the network as a result of misconfigurations, unpatched vulnerabilities and mismanaged credentials.

You probably have some questions. Join our open-ended Q&A session, where a forum of experts will relieve any doubts and answer all your questions.

Here are some examples to get you started:

Are there emerging techniques of ransomware that make use of other techniques besides encryption?
Do we still call it ransomware if a valuable cloud resource is held for ransom?
How should an organization simulate a ransomware attack?
From the attacker’s perspective, what is ransomware behind the scenes?
What are the differences between the ransomware of 2019 to the ransomware of 2021, and how do you envision the ransomware attacks in 2022 and beyond?

Ask me Anything about Ransomware

According to Gartner, “It is critical to make concentrated efforts to comprehensively secure and monitor Active Directory, proactively look for threats and misconfigurations, and remediate to prevent dangerous actions from taking place.”

XM Cyber is the first in the industry to show how Active Directory abuse comes into play in the entire attack path, bringing multiple attack techniques together to pinpoint the highest risks and offer step-by-step remediation guidance.

Join the webinar to learn:
      ● How Active Directory (AD) exposures combined with other attack techniques form attack paths
      ● What kind of actions the attacker can perform once they compromise an AD user
      ● What to do for better Active Directory Security

Part 3 - Best Practices to Improve Your Cloud Security Posture

Chances are, you are using the cloud or right on your way. It is critical to have a continuous understanding of how you can be attacked, which only leaves room for one question: do you know where your cyber exposures are?

Join us in our third Cloud Security Masterclass to:

How to get started on your journey to securing the Hybrid Cloud
How to identify, quantify and eradicate risk in your organization to reduce the attack surface
How to enable continuous and safe attack modeling across hybrid and multi-cloud networks to harden your environment.

Xm Cyber Presents: A Cloud Security Masterclass Part 3

Part 2: Reaching for the Cloud: Inside the Mind of an Attacker

With 90% of enterprises leveraging multi-clouds by 2022, it is an absolute field day for hackers around the world. The inherent security gaps created as we move our precious workloads and apps between on-premise to hybrid and multi-cloud networks contribute to more vulnerabilities and misconfigurations across our environments.

Join us in our second Cloud Security Masterclass to discover:

Unique attack techniques used in Azure and AWS
How attackers pivot from on-premises to the cloud and back again to breach your critical assets
How to get ahead of the attacker and close the gaps in the most cost-effective way.

XM Cyber Presents: A Cloud Security Masterclass Part 2

As organizations move workloads to the cloud, new and complex attack paths emerge across the hybrid cloud environment. Knowing which risks to fix without affecting ongoing business operations is challenging. 

Join XM Cyber and AWS as we explore the top attack paths and most common exposures in AWS, and share best practices for efficiently mitigating these risks.

In this webinar you’ll learn:
 
- All about attack paths and graphs, how they help pinpoint exposures and how to efficiently secure them
- Why attack paths are so abundant and relatively short in the cloud, with 90% of critical assets reachable in just 1 hop
- About AWS layered security services and which AWS services can be leveraged to remediate cloud security risks without impacting business operations
- How insider threats pose greater risk in the cloud

This webinar is a must-attend if you are interested in learning how to secure your cloud environment.

Top Attack Paths in AWS and How to Efficiently Remediate Exposure

Cloud Security

CTEM

Cyber Attacks

Cloud

Hybrid Cloud

Security

SaaS

Security as a Service

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Top Attack Paths in AWS and How to Efficiently Remediate Exposure

Presented by

About this talk

More from this channel