Name: 2023 Unit 42 Attack Surface Report
Start: 2023-11-14T15:37:00Z
End: 2023-11-14T15:37:28.000Z
Location: BrightTALK
Rating: 0

Palo Alto Networks is the next-generation security company, leading a new era in cybersecurity by safely enabling applications and preventing cyber breaches for tens of thousands of organizations worldwide. Built with an innovative approach and highly differentiated cyberthreat prevention capabilities, our game-changing security platform delivers security far superior to legacy or point products, safely enables daily business operations, and protects an organization's most valuable assets. Find out more at www.paloaltonetworks.com or call us at 1-877-524-1031.

"What if you could get best-in-class holistic network security with no infrastructure to manage? Sounds too good to be true? With Cloud NGFW for Azure, a few clicks is all it takes.

Hear directly from our cloud network and security experts about our new Azure-native Palo Alto Networks Next-Generation Firewall managed service that leverages machine learning to stop the most sophisticated zero-day attacks. Cloud Next-Generation Firewall (NGFW) makes it easier to secure Azure deployments and enables organizations to speed up their pace of innovation while remaining highly secure.

We’ll share best practices and tools you can use to minimize security procurement, setup, and deployment and attain enterprise-grade cloud security within minutes.

This is your golden opportunity to get the inside track on what’s brewing in the cloud security industry."

Network Security Bytes: Cloud NGFW for Azure

Alert volume is increasing. Analysts are burning out. It’s time to modernize your SOC by optimizing your team efficiency to meet the relentless demands.

In this session, our SOAR experts will share best practices culled from hundreds of customer deployments and provide a deep dive into XSOAR 8.

Key takeaways from this webinar include:

- Top things to consider before you deploy automation
- How to break down a process into an automated workflow
- Playbooks you can deploy easily for immediate time savings
- Examples of successful automation use cases
- Resources you need to run a successful automation program

Plus, at the end of the session, each attendee will get a starter toolkit to help them kickstart their automation program.

SecOps Automation: A DEEP DIVE

In The 2021 State of Enterprise Breaches, Forrester found that enterprises spend a median of 37 days and a mean of $2.4 million to find and recover from a breach.

Ensure your team is prepared for advanced threat actors. Join this fireside chat with Niall Browne, CISO at Palo Alto Networks, and guest speaker Allie Mellen, senior analyst at Forrester.

They’ll candidly discuss digital transformation, SOC automation and tactical security operations. Forrester recommends that security leaders advocate investment in digital transformation. This will help organizations be more adaptable while focusing on data and metrics to uncover prevalent attack vectors.

Tune in to hear their unique perspectives on:

The critical issues they see today in the SOC.
How security leaders can successfully incorporate threat intelligence.
Strategic technology upgrades to prioritize for digital and SOC transformation.
What they predict to be the biggest shifts in SecOps.

A Leader's Guide to SecOps Fireside Chat w/ Forrester

Realizing the benefits of SOAR can be a difficult challenge. Where do you start? What does the optimal adoption journey look like? What are automation playbook best practices?

To answer these questions, take a look at the playbooks the most successful customers were using from the XSOAR Marketplace to accelerate automation.

Join Josh Zelonis, director of security strategy, in this on-demand webinar to get a deep dive analysis of the most successful XSOAR customers. You’ll better understand:

- What a successful customer journey looks like.
- The three stages of successful automation deployments.
- Commonly used content packs.

The Insider's Guide to SOAR Adoption

Learn What it Takes to Keep Your Organization Protected

Multi-extortion tactics are on the rise. Threat actors are increasingly using data theft and harassment tactics to coerce victims into paying large ransoms. In fact, harassment as an extortion tactic was a factor in about 20% of Unit 42’s monthly ransomware cases, on average, up from <1% over 18 months. That’s 20x growth. 

As the threat landscape continues to evolve, it's imperative to understand your adversaries, reexamine your security posture, and implement a more in-depth incident response plan to boost defenses.

Join us for a live webcast as our security experts unpack key findings from our 2023 Unit 42 Ransomware and Extortion Report. We’ll discuss:
-The rise of multi-extortion tactics
-The financial impact of ransomware on organizations  
-The true intentions of nation-states and APT groups
-What to expect from extortion groups in 2023
-Best practices to protect your organization

Unabashed. Unashamed. Unpredictable.  The changing face of ransomware

An Inside Look into a Unit 42 Case

Imagine you discover a payment from a customer never arrived and then realize you were the victim of business email compromise (BEC). Worse, the accountant’s email that was hijacked was protected by multifactor authentication (MFA), but attackers still found a way through.

Unfortunately, this is exactly what happened to a Unit 42™ client at a time when threat actors are finding more ways to bypass MFA and cover their tracks. With so much room for human error, it may not come as a surprise that BEC made up over one-third of Unit 42 cases in 2022, and phishing was one of the top three access vectors used by attackers.

Join Mike Savitz, Consulting Director for the upcoming Unit 42 Cybercrime Casefiles to: 
-Hear the behind-the-scenes details of a recent Unit 42 BEC case that initiated from a compromised MFA-protected Microsoft 365™ account.
-Get an overview of the current threat landscape.
-Learn about today’s top BEC tactics and trends.

Unit 42 Cybercrime Casefiles - A business email compromise (BEC) investigation

Hear a firsthand account of a recent ransomware investigation and get actionable insights on how you can protect your organization from an attack.

Threat actors are constantly innovating and adjusting their tactics to improve the likelihood of a successful attack. This is especially true for ransomware operators looking to make fast money – they want to get in fast, cause as much damage as possible and increase the pressure on organizations to pay a ransom. This is a difficult situation for any organization to face alone. 

That’s why when a threat actor gained access to a large manufacturer’s systems and demanded a multimillion-dollar ransom payment, they called in Unit 42™ to help them respond with confidence.

Join Cuong Dinh, Unit 42 Principal Consultant, in this session to hear:
-A firsthand account of the investigation, including the anatomy of the attack and what steps the -client took to get back up and running.
-Insight into key ransomware trends and evolving techniques.
-Recommendations to defend against attacks.

Unit 42 Cybercrime Casefiles - A Ransomware Investigation

Understanding Today's SecOps and Best Practices
Are you facing challenges in effectively managing incidents received by your SOC? Renowned analyst firm GigaOm recently published their SOAR Radar report. This comprehensive comparison of SOAR vendors helps SecOps teams select the right option for them. To further assist, we've created an exclusive fireside chat featuring GigaOm analyst Andrew Green and Josh Zelonis, security strategist at Palo Alto Networks.

Andrew and Josh will discuss the latest trends in the SOAR market and how your peers are effectively leveraging automation.

Topics include:

How the SOAR industry is evolving to meet today's SOC challenges.
Is low-code/no-code automation hype or reality?
How AI will impact incident investigation and response.
How to apply SOAR beyond the SOC to network and cloud operations.
How automation is deployed by XSOAR customers.

GigaOm Webinar -Evolving SOAR. What 's Next?

Modern security threats are evolving at a faster pace than security technologies. Well-funded threat actors are investing in tools like machine learning (ML), automation and artificial intelligence (AI).

SOCs with legacy technologies aren’t equipped to accurately detect and defend modern attacks. How can security technologies fight back?

Join us to learn how you can transform SecOps to combat advanced attacks and improve efficiencies to get your SOC ready for the future.

In this webinar, we will share our SOC transformation playbook that highlights:
Today’s cyberthreats
The challenges facing traditional SOCs
5 steps to building a super SOC
4 superpowers for building a resilient and effective SOC

Register now and get ready to activate your SOC superpowers.

Cortex City: Building your SOC

With rapid digital growth, cloud adoption and scattered public IPs and assets, security teams struggle to accurately identify risks. This creates more opportunities for attackers to take advantage of gaps created by dynamic attack surfaces, and it’s why organizations are adopting attack surface management (ASM) as the latest addition to their defensive arsenal.

The latest GigaOm ASM Radar report breaks down key ASM vendors and helps you select the best solution for your business and use case requirements.

In this report, you’ll discover:

Key criteria comparisons to consider when choosing an ASM solution.
The maturity, platform play, innovation and feature play of ASM solutions.
Why Cortex® Xpanse™ was named the only Leader and Outperformer in the ASM market.

GigaOm Radar for Attack Surface Management 2023

"The first half of 2021 saw 1.5 billion attacks on smart devices, more than 100% growth in cyberattacks against Internet-of-Things (IoT) devices. Lack of IoT visibility and security is becoming a huge gap in a cybersecurity strategy.

Current security solutions lack the visibility and control needed to manage security risks. As a result, IoT devices have become a network gateway to malicious actors and are vulnerable to a wide variety of threats.

Join this session to hear from Tazy Khan, Senior Technical Marketing Engineer from Palo Alto Networks to see how you can uplevel your network security strategy, implement Zero trust policies and simplify IoT device visibility and security."

Network Security Bytes: IoT Security 2.0

Join our Network Security Bytes session with Palo Alto Networks to learn about what’s new in network security.

Palo Alto Networks and Amazon Web Services (AWS) introduce Cloud NGFW. Enterprise-grade network security is now integrated into how you already work with AWS. It protects your cloud workloads and virtual private clouds (VPCs) against today’s targeted and sophisticated threats and can be deployed in minutes.
 
In this session, you’ll hear directly from the industry experts about: 

*Benefits you gain with a managed cloud network security service.
*Current challenges of cloud network security and how we’ve addressed them.
*How you can increase your security network posture with Palo Alto Networks Cloud NGFW.
 
This is your opportunity to get the inside track on what’s new in the network security industry. 
Sign up today—don’t sleep on this opportunity!

Network Security Bytes: Cloud NGFW for AWS

Does your organization use point products from multiple vendors for cybersecurity? You’re not alone. For years, many have responded to the latest threats with point products. This approach created massive complexity, inefficiency, and expense–while increasing risk. It’s time for a strategic, consolidated approach to security. Palo Alto Networks portfolio can streamline your existing security stack, boost efficiencies, and reduce complexity while enabling a threat-informed approach.

Register today to learn how Palo Alto Networks can help your organization accelerate cyber transformation. Discover how you can consolidate your security tools while breaking down security silos.

Discussion topics include:

• Streamlining your existing security portfolio
• Boosting efficiencies, reducing complexities and closing critical gaps
• Adopting a threat-informed approach to security

Here is your opportunity to get the inside track on what’s new in the network security industry.

Network Security Bytes: Achieving Cyber Resilience Through Consolidated Security

A MITRE ATT&CK® Leader for the Fifth Year in a Row


MITRE ATT&CK® has become the industry standard for evaluating the performance of cybersecurity vendors in rigorous real-world attack scenarios. In 2023, MITRE simulated the methods of the notorious Russian-based threat group, Turla. 

They put 29 vendors to the test and revealed their performance. Cortex XDR® delivered 100% Prevention and 100% Analytic Coverage. Outperforming the competition.

Reserve a front-row seat as our experts break down the 2023 MITRE ATT&CK Evaluations. You’ll gain insights into:

-The process of the MITRE ATT&CK Evaluations.
-Turla, the threat group simulated in this year’s evaluation.
-The tactics used by Turla and how to defeat them.
-The real-world performance of EDR vendors against Turla attacks.
-How Cortex XDR outperformed and why it matters.

Unbiased Testing. Unbeatable Results. Explore the 2023 MITRE ATT&CK® results.

Is your organization taking full advantage of AI to protect your users and data? Don’t leave your IT teams hanging. Let intelligent AI operations do the work for you.

Join us for a one-hour technical session to learn how you can simplify and automate your ITOps with integrated AI solutions from Palo Alto Networks®. Our industry-leading technology and expertise can help you get the most out of AIOps while increasing performance for mission-critical workloads. Our AI gurus will be on deck to answer your toughest technical questions, so be sure you come prepared.

Discussion topics include:

* Using ML-powered insights to proactively improve security and prevent network disruptions
* Leveraging continuous security recommendations and offline best practice assessment tools
* Overcoming operational challenges such as misconfigurations, compliance issues and resource usage
* …and more!

Sign up today—don’t sleep on this opportunity!

AIOps for NGFWs

Attack surfaces are expanding in complexity due to growing cloud services and edge computing adoption. However, it’s challenging for security teams to keep track of assets to manage their attack surface effectively.

Unit 42® studied Cortex® Xpanse™ data from 250 organizations and discovered attackers are taking advantage of new Common Vulnerabilities and Exposures (CVEs) and other vulnerabilities faster than ever before.

To learn the key findings, predictions and recommendations, join our experts as they shine a light into our “2023 Unit 42 Attack Surface Threat Report.” Attendees will walk away with an understanding of:

Top attack surface risks across the world.
The uniqueness of different industry attack surfaces.
Key recommendations to proactively manage your attack surface.

2023 Unit 42 Attack Surface Report

Attack Surface Management

Incident Response

Risk Assessment

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

2023 Unit 42 Attack Surface Report

Presented by

About this talk

More from this channel