Name: API Security : Stop Hugging the Elephant, Embrace the Squad!
Start: 2023-11-28T03:00:00Z
End: 2023-11-28T03:00:45.000Z
Location: BrightTALK
Rating: 5

Palo Alto Networks is the world’s cybersecurity leader. Our next-gen security solutions, expert services,
and industry-leading threat intelligence empower organizations across every sector to transform with
confidence.
Check out this channel for the latest updates and topics on cybersecurity.

Automation Trends and Insights for SecOps.

Are you facing challenges in effectively managing incidents received by your SOC? Renowned analyst firm GigaOm recently published their SOAR Radar report. This comprehensive comparison of SOAR vendors helps SecOps teams select the right option for them. To further assist, we’ve created an exclusive fireside chat featuring GigaOm analyst Andrew Green, and Josh Zelonis, security strategist at Palo Alto Networks.

Andrew and Josh will discuss the latest trends in the SOAR market and how your peers are effectively leveraging automation. Topics include:
  - How the SOAR industry is evolving to meet today’s SOC challenges.
  - Is low-code/no-code automation hype or reality?
  - How AI will impact incident investigation and response.
  - How to apply SOAR beyond the SOC to network and cloud operations.
  - How automation is deployed by XSOAR customers.

Expert Speakers: 
Jane Goh, Product Marketing Manager, Palo Alto Networks
Josh Zelonis, Principal Security Strategist, Palo Alto Networks
Andrew Green, Analyst, GigaOm

The Evolving SOAR: What's Next?

Don’t Settle for Second-Class Security. Demand the Best.

Cybercriminals continue to devise new ways to compromise endpoints which are targeted as a primary access point for infiltration. These devious adversaries can bypass defenses by avoiding the use of known indicators of compromise (IoCs) and attack techniques. 

To thwart these attacks, you need best-in-class endpoint security that prevents, detects and responds to threats. Traditional endpoint protection solutions just can’t keep up. It’s time for an upgrade.

In this session, we will:
 - Demonstrate the limitations of legacy endpoint protection platform (EPP) solutions.
 - Explore recent innovations to endpoint protection, like EDR and XDR, that help put a stop to today’s most dangerous threats.
 - Analyze recent endpoint attacks and how they were defeated with best-in-class endpoint security.

The Endpoint of No Return

Untangling the Global Attack Surface: Inside our latest Unit 42® Attack Surface Threat Report.

Attack surfaces are expanding in complexity due to growing cloud services and edge computing. However, it’s challenging for security teams to keep track of assets to effectively manage their attack surface.

Unit 42® studied Cortex® Xpanse™ data from 250 organizations and their internet-accessible exposures. They discovered attackers are taking advantage of new Common Vulnerabilities and Exposures (CVEs) faster than ever before.

Watch this webinar where our experts shine a light into our "2023 Unit 42 Attack Surface Threat Report." Viewers will walk away with an understanding of:
  - Top attack surface risks across the world.
  - The uniqueness of various industry attack surfaces.
  - Key recommendations for proactively managing your attack surface.

Don't miss gaining a competitive edge over attackers and ensuring your attack surface is secure. 


Palo Alto Networks Speakers:
Matt Kraning, CTO, Cortex 
Ross Worden, Senior Consulting Director, NAM DFIR, Unit 42
Abhishek Anbazhagan, Product Marketing Manager, Cortex Xpanse

Insights for Securing Your Fragmented Attack Surface

Your 30-Day, 90-Day and 180-Day SOAR Adoption Plans

Security automation, orchestration and response (SOAR) can greatly enhance the productivity and effectiveness of a SOC. However, without the expertise to properly implement best practices, SecOps teams could find themselves adrift and unable to realize the full benefits of SOAR.

Join our webinar with Josh Zelonis, director of security strategy, to deep dive into the journeys of our most successful XSOAR customers and their real-life deployments. You’ll better understand:
   - What a successful customer journey looks like.
   - The three stages of successful automation deployments.
   - Our most popular content packs.

The Insider’s Guide to SOAR Adoption

In this webinar, you will learn about recent cloud-based threats and how your organization should address them with code-to-cloud based award-winning product Prisma Cloud by Palo Alto Networks.

The talk also dives into Kubernetes Security/Anthos Security with Google Cloud Platform (GCP) command center capabilities to secure your GCP environments, and how you can combine the GCP command center with Prisma Cloud by Palo Alto Networks.
Watch the webinar now.

Protecting Google Cloud environments with Prisma Cloud & GCP native security

As cloud-native engineering becomes more dynamic, we need to rethink AppSec. Increasingly, we’re seeing attackers gain access to production environments through software delivery & supply chains.

 

Join our live chat with our own AppSec CTO, Daniel Krivelevich, walking through how you can adapt to the new cloud threat landscape. Hosted by our Field CTO, Ajay Mishra, who will share his insights from a customer’s perspective. 

 

This interactive session is a great way to deepen your understanding of what a modern approach to AppSec should look like. Both presenters will take questions live.

 

Key takeaways:

- Key fundamental principles in shaping a CISO’s approach to Application Security.

- The current prevalent attack vectors to be particularly vigilant about and how they impact your business

- Evaluating your organization’s software supply chain risk posture

- Practical tips for stronger resilience to cloud attacks.

Reserve your spot today!

As Cloud Attacks Target the Engineering Ecosystem, How Must AppSec Evolve?

Watch the SASE Masterclass to confidently assess if your organization is ready to embrace SASE. 
In today's world, as work becomes more location-independent, the attack surface has expanded exponentially. Adopting a SASE architecture helps you create and enforce a consistent security posture without compromising workforce agility, enabling your employees to access data and applications from anywhere.
If you would like to gain unprecedented visibility across your network while ensuring flexible, resilient user access irrespective of the location, then this Masterclass is for you.

SASE Masterclass: Gain an understanding of the SASE landscape in 60 minutes

In today's digital world, security has become a top priority for organizations of all sizes. However, developers often prioritize functionality over security when writing code, leading to vulnerabilities and data breaches. In our third code to cloud security series, we'll explore how to bridge the gap between code and security with Prisma Cloud, helping developers to write more secure code while still maintaining the functionality they need. 



We'll cover:

- The importance of security in the development process
- Common source of security risks and vulnerabilities
- Strategies for implementing secure coding practices
- The role of automation in security
- The benefits of bridging the gap between code and security
and more insights!

Code Unleashed: The Thrilling Merge of Security and DevOps

Nir Zuk (Founder and CTO, Palo Alto Networks) is our guest for the second episode of #TheSASEShow! Nir, in his own unique style, talks about why we are experiencing a generational shift in cybersecurity with SASE (Secure Access Service Edge). We also cover what to do and most importantly what NOT to do as CISOs plan SASE and Zero Trust strategies.

To gain insight into the shift from VPNs to SASE, how your organization could benefit from SASE, and how Zero Trust fits into this picture, tune into this latest #TheSASEShow episode. 

Want to talk to our CTO team on SASE/Zero Trust? We would love to hear from you! Please register here: https://bit.ly/3B97zfh

SASE is Groovy, Baby! How to Capitalize on the SASE Shift

Gartner’s recent extended detection and response (XDR) and SASE trends survey data indicates a clear customer preference to consolidate their security vendors, with 92% of enterprises actively pursuing a vendor consolidation strategy this year. 

Supporting this trend is the reality that, in today’s uncertain macroeconomic conditions, consolidating security vendors can reduce both risk and costs to your business.

In this episode of #TheSASEShow, we identify key questions to ask when evaluating Single-Vendor SASE providers and analyze the practical guidance around consolidating networking and security in the Gartner® Market Guide for Single-Vendor SASE report. 

Download the Market Guide for Single-Vendor SASE: https://bit.ly/3U1OF22

Single Vendor SASE: Current Trends Driving Vendor Consolidation

As organizations rapidly embrace the cloud and its various benefits, security remains a critical concern. How do you foster collaboration among your teams into a single effort while keeping them aligned with their different goals and secure your cloud at a robust speed?

Our Prisma Cloud Solutions Architect, Sebastian Salla will provide valuable insights into how Prisma Cloud can empower your organisation with strong security measures while keeping pace with the agility  of the cloud, all through the power of automation.  

This webinar will cover key topics including:

 • Principles for moving at the speed of cloud
 • How to champion the marriage of DevOps and security at cloud speed
 • Ways to align your teams’ security without creating gaps and more…

Accelerating Security with Automated Cloud Defense

As software supply chain attacks continue to rise, your organization must adapt and evolve to protect your digital assets.
This webinar from Palo Alto & Google Cloud will delve into:
•     The complexities of software supply chain attacks
•     How these attacks will impact your business
•     The steps required to safeguard against these threats
Tune into the discussion to learn from industry leaders as they share insights on the latest attack vectors, and the importance of collaboration between vendors and partners to ensure a secure software supply chain.

Protecting your software supply chain with Palo Alto & Google Cloud

It’s true that attack techniques have evolved but so too has the modern defense arsenal. SecOps teams can now rely on powerful detection and automation capabilities to play the detective during investigations. This means less time spent manually gathering data across multiple tools and more time spent addressing critical incidents. Join Leonard Kleinman (Field CTO, Cortex, Palo Alto Networks JAPAC) as he shares insights on how to automate and orchestrate workflows to speed up investigation and response and leveraging best practices to reduce errors and manual effort.

Automation & Orchestration for Rapid Threat Response

Today, security teams face an overwhelming barrage of complex and evolving threats. Defending against these threats starts with knowing them — this is where cyberthreat intelligence plays a role. However, with millions of indicators daily, security teams struggle to get the most value from their threat intel investments.

Cyberthreat intelligence (CTI) programs can significantly improve an organization’s ability to effectively detect, prevent and respond to security threats as long as you follow best practices. However, several factors must be considered to implement a successful CTI program.

Join the webinar and hear Unit 42™ experts discuss:

The pros and cons of CTI programs.
How to start operationalizing threat intelligence.
How Unit 42 and XSOAR TIM* help maximize efficiency.


Get answers to these questions and more from the experts on our Unit 42 Threat Intelligence team.

*Threat Intel Management 

Speakers: 
Joshua Costa
Director, Product Marketing, Unit 42 & Cortex

Joseph Opacki
Senior Director, Threat Intelligence, Unit 42

Kyle Wilhoit
Director, Threat Research, Unit 42

Operationalize Threat Intelligence

XDR (extended detection and response) was coined in 2018 by Nir Zuk, CTO of Palo Alto Networks. Ever since, XDR has captured the collective imagination of security teams and analysts alike. It has also led to confusion on what XDR is and isn’t.

Many see XDR as the key to breaking down data silos, reducing security blind spots and improving SOC efficiency. However, not all users understand the use cases for XDR and which vendors offer true XDR.

Join Greg Smith, Senior Product Marketing Manager from Palo Alto Networks to gain a deeper understanding of:
- The top features and benefits of XDR solutions
- How organizations use XDR for SecOps today
- Tips for identifying XDR imposters
- How to choose the right XDR product for your environment

XDR is what’s next in cybersecurity. Register to learn more.

What XDR Is and Isn't

Don't Let Today's Security Gap Become Tomorrow's Headline.

While cloud technology is not new, and many organizations have been on their cloud journey for years, cloud service providers continue evolving with new features and services.

Fast change and growth make it difficult for many organizations to catch up and inadvertently introduce security weaknesses.

In the latest Cloud Threat Report, Unit 42™ analyzed 680,000+ identities across 18,000 cloud accounts and over 200 different organizations.

They found:
- Threat actors are getting smarter.
With cloud usage on the rise and cloud technologies continuing to mature, threat actors are getting smarter and more powerful every day. They’re learning from new security strategies and finding creative ways to work around them, exploiting hidden weak spots and using vulnerabilities to their advantage. 

- MFA is not enforced for cloud users.
76% of organizations don’t enforce MFA for console users, and 58% of organizations don’t enforce MFA for root/admin users.

 - Attacks on software supply chains are on the rise.
The prevalence of open-source usage and the complexity of software dependency make securing the software supply chain difficult.

 - Unpatched vulnerabilities continue to be low-hanging fruit for attacks.
63% of the codebases in production have unpatched vulnerabilities rated high or critical), and 11% of the hosts exposed in public clouds have high or critical vulnerabilities.

What we learned throughout our research is that threat actors have become masters at exploiting common oversights in cloud security.

Register now to our webinar to stay protected from cloud threats.

Navigating the Expanding Cloud Attack Surface

What’s your best defense against ransomware? Being alert to tactics much earlier in the MITRE ATT&CK® lifecycle.

Join this thrilling event as we “outwit, outmaneuver and outmatch” a trap set by REvil and other modern adversaries. We’ll help you face off against these adversaries and navigate which MITRE ATT&CK tactics, techniques and procedures (TTPs) you should prioritize.

Learn how to implement an effective defense against ransomware and other attack scenarios from this event with:
●  An understanding of MITRE ATT&CK tactics.
● A guide to the techniques used by modern adversaries.
● Intelligence and observed trends from our Unit 42™ team’s ransomware attack investigations.
● Insights on how Cortex XDR® can help you stop adversarial activity.


About our speaker: 
With over two decades of systems engineering experience, David Rajoo, ASEAN Cortex Systems Engineering Head at Palo Alto Networks, provides business leaders with the technical guidance to securely embrace their digital transformation initiatives. He has experience working with organisations across diverse industries, including financial services, governments and telcos, implementing cyber defence strategies to keep them ahead of the latest security threats.

Outwit. Outmaneuver. Outmatch. Ransomware Edition

Ever feel like you're just too close to the action with API security? It's a bit like hugging an elephant – sure, you're getting up close and personal, but you miss the big picture. And, let's face it, that's a rather large creature to overlook.

API security has been the show-stealer lately, especially with all this cloud-hopping and micro-service mingling. But guess what? It's just one piece of a jigsaw puzzle. On its own, it's like watching a movie with only one character – something's missing.

That's where our superhero squad comes in. Imagine API security but backed up by other layers of security, all working together for your Cloud Native Application Platform (CNAPP). We're talking Avengers-level teamwork here.

So, are you ready to trade in tunnel vision for X-ray vision? Let's get together and dive into a holistic approach that makes your security game stronger, faster, and possibly even more good-looking. It's time to see the whole elephant, not just its wrinkles.

API Security : Stop Hugging the Elephant, Embrace the Squad!

API Management

APIs

Cloud Adoption

Cloud Analytics

Cloud Architecture

Secure Cloud

Cloud Computing

Cyber Threats

Cloud Native

Enterprise Applications

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

API Security : Stop Hugging the Elephant, Embrace the Squad!

Presented by

About this talk

More from this channel