Agenda

Do your cybersecurity presentations leave Executives saying “Why do we need to do these projects” or “I don’t get it, do we need to spend this much”?

In this session, Dr. Glenn Stout, Ph.D. will provide a way to communicate to your Executives answering their questions of “Are we ok?”, and “If we are not ok, how do we get to ok?

As more threats emerge and adversaries’ TTPs increasingly change, the ability to rapidly assess relevant coverage across the defensive stack becomes increasingly important.

As more threat reports & repositories now contain detections around recently observed indicators & behaviors (a positive trend), it’s tempting to think that deploying only those detections means successful implementation of “threat-informed defense”. However, our research suggests adversaries are evolving their tactics, techniques, & procedures with increasing frequency and in ways that specifically target parts of the attack surface that are especially challenging to defend.

Layering (and distributing) defensive capabilities against today’s threats is essential but making a quick assessment of coverage – that is both deep and wide – for each new threat is near-impossible if using traditional approaches. This talk will review recommendations for speeding up coverage assessments through threat & defensive prioritization, using two real examples as walkthroughs.

Too many organizations have opted into the false narrative that with the right technology and outsourcing, sprinkled with a little artificial intelligence, they are buying down risk. Then it happens. The groundhog is back for revenge, and this time, artificial intelligence can’t help. We’ll dive into how adopting a strategy shift, known as zero trust, aligns with business’ strategic planning above all other methods. Leveraging the right mental accounting techniques and choice bracketing, we can embrace how to really make a difference.

This presentation aims to tell the story of the dynamic landscape of cyber threats by delving into the Tactics, Techniques, and Procedures (TTPs) employed by cybercriminals, along with an exploration of the diverse file types used in these malicious activities. Some of these include:

• SVG files
• Use of WebDav
• Internet Shortcut (.URL) files

Based on Proofpoint’s telemetry of billions of messages per day, we show how Cybercriminals are are constantly trying old and new tricks in response to defenders. The presentation also illustrates how techniques are quickly identified by the security community to continue to keep our users safe from evolving threats.