ProxyLogon. Log4Shell. Print Nightmare – 2021 was the worst year ever for major vulnerabilities and exploits, and there’s no reason to believe the pace is slowing down. Rushed code development, third-party libraries, and a growing array of API bugs are overwhelming companies’ efforts to manage and patch vulnerabilities in their systems and devices. With that in mind, this eSummit will explore how companies can adjust their st...

The saying “easy to learn, difficult to master” fits network security to a T. We know tools like SIEM and SOAR can help prevent and mitigate system intrusions and other anomalous events. But these solutions are only as effective as the threat intelligence your SOC team is leveraging to create detection rules and response policies. And don’t forget: the bad guys have their own tricks up their sleeve to evade your defenses ...

Email continues to be a top vector of attack, with phishing and business email compromise (BEC) scams among the top payloads of email-based attacks. Email was designed to be open and accessible, which, unfortunately opens the door for spam campaigns, malware and phishing attacks, sophisticated targeted attacks, BEC, and privilege escalation. As risks become more serious and attackers grow more sophisticated, email security has become a multi-l...

Email continues to be a top vector of attack, with phishing and business email compromise scams among the most serious of threats. Email was designed to be open and accessible, which unfortunately opens the door to campaigns designed to overload you with spam, steal your information, or socially engineer your employees. To counter these sophisticated schemes, email security has become a multi-layered discipline involving people, process and te...

Digital transformation is driving more cloud usage and development towards the cloud, with Gartner estimating an 18.4% increase in spending on cloud infrastructures. As soon as this transformation started building steam, attacks against cloud-based assets rose more than 600%. Securing cloud-as-infrastructure must be a shared responsibility between the ITSec and the DevOps teams. Join SC Media on May 17-18 as we convene industry leading practit...

Stealthy threats still evade detection. Attackers hide between security silos and disconnected solution alerts, while overwhelmed security analysts try to triage and investigate with narrow, disconnected attack viewpoints. eXtended Detection and Response (XDR) is the next evolution of data collection and correlation across multiple security layers to improve detection and response. Coupled with automated analysis, XDR speeds up investigations...

Threat hunting is no easy task. Security analyst most pore through scores of data and threat intelligence and use their own familiarity with the network to create hypotheses about potential attacks and exploits. Fortunately, advancements in technology, strategy, intel-sharing and automation have improved our ability to continuously seek out indicators of compromise and proactively root out malicious actors before they can do damage. And it...

A year and a half into a pandemic, months into a new administration, and still reeling from cyberattacks that hit government agencies, contractors, and critical infrastructure partners, federal security professionals face unprecedented challenges. Tackling those challenges will require a strategic blend of technology, policy, and partnership.  SC Media will host a two-day free event to dissect the challenges and opportunities facing the...