The Cyber Solutions Fest will explore implementations via the lens of people, process, and technology. Technology that enables people to implement process effectively will feature heavily as vendors highlight actual customer deployments and their implementations of artificial intelligence and machine learning. There will also be highlights on managed service offerings and cloud deployments, as our IT deployment and the security applied to them...

In this series, Dean Parsons will review observed ICS attacks in the Oil & Gas, Electric and Water sectors and map them to the MITRE ATT&CK ICS framework. Throughout this series, Dean will review the most common attacker tactics and techniques used across commonly targeted critical infrastructure sectors. In this second part of the series, Dean will specifically speak to the Electric sector. This webcast will dive into Initial Access,...

Whether you are just getting started in cloud security, or overseeing a team of technical cloud practitioners, you likely have questions about the process, journey, technology, and career path of cloud security professionals. In this talk, we’ll discuss the myriad responsibilities of people working in cloud security from viewpoints such as: Privacy, compliance, data protection, engineering, offensive security, as well as leadership. We...

Industrial control system (ICS) security represents one of the more challenging areas for security professionals. The typical ICS is complex and interconnected. It’s often a legacy system that wasn’t designed with security in mind and, because it’s different from traditional IT assets, it has very different security requirements. And no surprise—such systems are increasingly targeted by sophisticated cyberattackers, inc...

Gartner’s recent report on Application Security Posture Management (ASPM) includes a projected 40% adoption rate by 2023. But what’s so transformative about ASPM and what does it mean for you? Traditional AppSec tools fail to provide holistic visibility and security coverage across the entire SDLC, leaving an urgent need for ASPM to centrally manage application risks from code creation to runtime deployment. Join James Robinson, De...

How does an organization’s external attack surface impact its offensive security initiatives? In our experience, a comprehensive understanding of this attack surface can help better emulate real-world attack scenarios and reduce threat exposure. In this webcast, we’ll explore the results of our survey that was designed to understand how knowledge of an organization’s external attack surface can help its security team evaluate...

How does an organization’s external attack surface impact its offensive security initiatives? In our experience, a comprehensive understanding of this attack surface can help better emulate real-world attack scenarios and reduce threat exposure. In this webcast, we’ll explore the results of our survey that was designed to understand how knowledge of an organization’s external attack surface can help its security team evaluat...

In the modern age of cloud migration and deployment, many security and operations teams are having to adapt their controls, processes, and overall strategies to better accommodate hybrid on-premises and cloud environments. While some architecture and control concepts stay relatively static, many don't. So what should organizations do? How can traditional firewalls and cloud-native controls co-exist? What network security controls are most read...

The NIST cybersecurity framework (CSF) is a well-known and respected framework for building cybersecurity programs. The NIST CSF organizes the framework beginning with functions that organize basic cybersecurity activities at their highest level. These functions are Identify, Protect, Detect, Respond and Recover. The NIST CSF functions can help cloud organizations express their management of cybersecurity risk by organizing information, enabli...

X may have given it to the free Twitter API but there are still A LOT of data sources out there that we can monitor for free and fire alerts when things meet our criteria. In this webinar, we’ll look at multiple sources that can be monitored, what value they can provide, and provide sample Python code you can use to achieve great results on extremely low powered hardware.