Security Weekly

Risk management

Supply chain

Third-party risk

Architecture

Cloud

Cloud security

Device Security

Hardware security

Strategy

Incident response

Security awareness

Email security

Threats

Physical security

Policy

Compliance

Critical infrastructure

ICS security

Endpoint Security

SWN #31

North America

Group Podcast

Related Events

Earn up to 6.5 CPE credits by attending this virtual event.



The adoption of cloud-based services among the workforce has surged in the era of COVID-19, and yet the business world is struggling with a dearth of infosec professionals who are trained and specialized in cloud security. To compensate, security leaders must understand and overcome the latest cloud-based threats targeting their employees, while relying on creative recruitment and upskilling to secure the cloud talent they desperately need. Don&#8217;t get &#8220;lost in the cloud.&#8221; Attend this eSummit on October 25-26 to learn more about topics like:&nbsp;



<ul><li>CyberRisk Alliance’s exclusive cloud security research</li><li>Advice on recruiting, training and upskilling cloud security talent</li><li>How to shield your workforce from today’s cloud-based phishing and ransomware scams</li><li>Best practices for avoiding cloud misconfigurations, leaks and breaches</li></ul>

eSummit

The Cloud and Your Workforce: Winning the great cloud migration

Earn up to 6.5 CPE credits by attending this virtual event



Securing cloud-as-infrastructure must be a shared responsibility between IT/security professionals; DevOps teams; and cloud-based SaaS, PaaS and IaaS providers. As part of this effort, stakeholders must take steps to deter cloud leaks and misconfigurations, avoid careless API mismanagement, and ensure that cloud services clients and providers have clearly communicated security expectations to each other.&nbsp;



Join SC Media on May 17-18 as we convene industry leading practitioners and experts to learn how to secure cloud infrastructure and topics including:



<ul><li>Results from CyberRisk Alliance&#8217;s Cloud Security Research Survey</li><li>Developing a user-centered model for safely storing content in the cloud&nbsp;</li><li>Assessing cloud services providers, and how to enter a shared responsibility agreement&nbsp;</li><li>Tips for secure cloud-based app development&nbsp;</li><li>The cloud’s lingering privacy and data sovereignty issues&nbsp; </li></ul>



<h2>FEATURED SPEAKERS</h2>



<figure class="wp-block-image size-full is-resized"><img src="https://files.scmagazine.com/wp-content/uploads/2022/05/ContentBlock-01.png" alt="" class="wp-image-243296" width="605" height="519" srcset="https://files.scmagazine.com/wp-content/uploads/2022/05/ContentBlock-01.png 650w, https://files.scmagazine.com/wp-content/uploads/2022/05/ContentBlock-01-300x258.png 300w" sizes="(max-width: 605px) 100vw, 605px" /></figure>



<h2> Agenda</h2>



DAY 1 | May 17&nbsp;



10:45 AM ET&nbsp; Program Opens&nbsp;



11:00 AM ET&nbsp; Opening Keynote – A user-centric approach to securing content in the cloud Dan Meacham: VP, Global Security and Operations &amp; CSO/CISO, Legendary Entertainment



In April 2022, the Motion Picture Association reportedly revealed an expanded industry effort to secure creative content that’s developed and stored in the cloud. The initiative is a high-priority one, considering that insecure cloud access and misconfigurations can result in damaging leaks, piracy and even extortion if the content falls into the wrong hands. In this session, Dan Meacham, CISO at Legendary Entertainment, will discuss these latest developments in the media and entertainment space and how they are relevant to other industries that also must safeguard their highly sensitive assets and materials. Dan will also reveal how he developed a user-centric cloud architecture that has allowed Legendary to secure the remote editing of entertainment projects anywhere in the world.&nbsp;



11:30 AM ET&nbsp; Managing cloud security risks…IYKYK. Maristelle Bagis Hosaka: Director, Product Marketing – Cloud Security, Fortinet&nbsp;



Digital transformation has been a critical enabler for the rapid acceleration in cloud adoption.&nbsp; Despite the benefits, rapid adoption has also outpaced many organizations’ cloud security expertise, preventing them from properly securing their cloud environments and leaving them exposed to potential threats.&nbsp; With over 80% of organizations adopting the cloud, security risk often accumulates faster than it is resolved and mitigated.&nbsp; Understanding the risks in the cloud and how to best work as a team is essential for effectively mitigating risk and choosing the right tools.&nbsp; This session will highlight some of the most common cloud risks and explore the ways to mitigate them.&nbsp; &nbsp;



12:00 PM ET&nbsp; AppSec best practices for securing cloud-based web apps and APIs Sonali Shah: Chief Product Officer, Invicti Security&nbsp;



Web apps and APIs present a major risk for organizations of all sizes, according to the Verizon DBIR about two of every five breaches originate in a web app – and the problem is only growing. And in most organizations, innovation pressures still outweigh security priorities. So, what can AppSec professionals do to reduce their web attack surface? In this presentation, Invicti Security Chief Product Officer Sonali Shah dives into the top five AppSec risks that every organization should be aware of and provides best practices for securing cloud-based web apps and APIs.&nbsp;



12:30 PM ET Penetrating the cloud: uncovering&nbsp;unknown vulns Seth Art: Principal Security Consultant, Bishop Fox Nate Robb:&nbsp;Senior Operator with Bishop Fox&nbsp;



For an increasing number of organizations, the explosion in attack surfaces has reached unmanageable levels amid the widespread adoption of cloud services. In fact, 79% of companies have experienced at least one cloud data breach in the last 18 months, often due to unknown vulnerabilities. &nbsp;



One of the key challenges in the unprecedented growth in cloud infrastructure is understanding which vulnerabilities and misconfigurations are the most exploitable and impactful. While many organizations spend a lot of time fixing the issues they can easily identify with tools, tools have limitations and often do not operate in the same vein as a hacker. Uniquely, an offensive security approach offers the ability to identify the type of attack paths that a malicious attacker will actually take and, therefore, better prepare against. &nbsp;



1:00 PM ET &nbsp; BREAK | Visit Solutions Center&nbsp;



1:15 PM ET&nbsp; Research Session: Cloud security:&nbsp;findings&nbsp;from a CRA business intelligence research study&nbsp; &nbsp;&nbsp; Matt Alderman, EVP, Foresight, CyberRiskAlliance Bill Brenner, VP, Custom Content, CyberRiskAlliance 



What are the main challenges security teams face when it comes to securing their cloud implementations? In this session, CyberRisk Alliance Business Intelligence’s Matt Alderman and Bill Brenner review the findings of a research study Business Intelligence conducted last month among 303 IT cybersecurity decision makers. They will focus on the specific challenges organizations face, and how to overcome those challenges.



2:00 PM ET&nbsp; 10 Steps to cloud security success in 2022. Richard Beckett: Senior Product Manager, Sophos Public Cloud Security Team



With busy IT teams how do you make sure you’re making the right cloud security decisions in 2022? Join Sophos as we discuss how to operationalize your cloud security approach, adding the right security tools and expertise to help you reduce security risk, increase cloud security posture, and improve the efficiency of your security program and internal teams. &nbsp;



2:30 PM ET Planning and building a strategy for comprehensive cloud infrastructure security Lior Zatlavi: Sr. Cloud Security Architect, Ermetic



With so many different variables to consider when designing and implementing a security strategy for your AWS, Azure or GCP environment, it is difficult to organize everything or take the first step. You need a guide to help set priorities and build a plan of action.



Outlining best practices and compliance standards is a good place to start. But these alone don’t enable you to actually assess the maturity of your current cloud security practices and build a roadmap for continuous improvement.



To this end, we created the Cloud Security Maturity Model, a lightweight and easy to understand framework that defines the key guidelines for a comprehensive cloud security strategy. It serves as a guide for prioritizing and implementing security controls and procedures.



3:00 PM ET Enabling trust in cloud-as-infrastructure Seema Kathuria Senior Product Marketing Manager, Cisco/Duo



While there are numerous benefits of adopting cloud-as-infrastructure including cost savings, access and availability of compute resources and services, scalability, and resource optimization, security is not inherent and cannot be taken lightly. Organizations must plan and prepare for mitigating security risks to protect the business and assets hosted in a cloud environment.



In this session, we will discuss security implications of adopting cloud-as-infrastructure and best practices organizations should consider for risk management and enhancing trust in the cloud.



3:30 PM ET&nbsp; Closing Keynote,- Burning questions to ask when developing a shared responsibility agreement Jim Reavis: Co-founder &amp; CEO, Cloud Security Alliance&nbsp;&nbsp;



Cloud service providers and their clients must enter into a shared responsibility model, whereby the two parties divvy up control of all security-related matters and decide who is accountable when an incident occurs. To reach this understanding, organizations must first assess the security capabilities and histories of prospective cloud services providers. Then they must ask the right questions to these third-party providers to determine if they are the right fit, and to ensure that any shared responsibility model is mutually beneficial. This session will review the most important metrics to assess the efficacy of cloud services providers and the key questions you must ask as you negotiate a shared responsibility contract. DAY 2 | MAY 18 &nbsp; 10:45 AM ET&nbsp; Program Opens&nbsp;



11:00 AM ET&nbsp; Opening Keynote &#8211; Privacy shield reborn? the cloud’s lingering privacy and data sovereignty issues Sujit Raman: Partner, Sidley Austin LLP + former Associate Deputy Attorney General, DOJ&nbsp;



Privacy and data sovereignty concerns continue to swirl around companies that manage their assets in the cloud – especially whenever data crosses international boundaries. Just this past March, it was reported that the U.S. and European Union were close to finalizing a new data-sharing pact that would replace the old Privacy Shield agreement that was nullified in 2020 by the EU Court of Justice’s “Schrems II” decision. In this session, Sujit Raman, who coordinated the DOJ’s response to EU court’s decision while serving as an associate deputy attorney general, will share his views on this latest developments, including what needs to be in the latest data-sharing agreement for it to pass muster with the EU courts and privacy advocates. He will also weigh in on other lingering data privacy and jurisdiction concerns that must still be resolved.



11:30 AM ET Survivorship bias, growing attack surface and finding your weakest links when moving to the cloud Fredrik Nordberg Almroth: security researcher and Detectify co-founder&nbsp;



With more organizations moving to the cloud, new systems being exposed online and growing moving parts, security risks continue to change leading to increased complexity. Alongside, the lack of transparency leads to an expanding attack surface that is hard to defend from attackers. Companies &#8211; irrespective of the sector &#8211; must address the issue of the increasing web-facing attack surfaces and in this session, Fredrik will talk about why it is the most pressing issue facing CISOs today.&nbsp; 12:00 PM ET&nbsp; Developer-focused security from code to cloud, and back to code Jim Armstrong: Senior Director, Product Marketing, Synk&nbsp;



Cloud and DevOps practices blur the boundary between application development and the production cloud environment. Solutions that satisfy the needs of only the development team -or- the security &amp; operations teams, in isolation, don’t help where organizations need it the most: reducing security risk while ALSO increasing the speed of application delivery.&nbsp;



12:30 PM ET&nbsp; Silver linings: self-learning ai for cloud and Saas Maria Fung, Technical Manager, Darktrace Holdings 



Cloud and SaaS platforms have created digital environments where businesses can innovate, collaborate, and share more than ever before. However, this is often at the cost of visibility and control. In this session, Maria Fung, Darktrace’s Technical Manager will discuss the challenges of securing cloud and SaaS applications. Discover why Self-Learning AI is best-in-class in protecting organizations’ dynamic workforces and constantly changing digital infrastructure.



1:00 PM ET&nbsp; Break&nbsp;



1:15 PM ET Thought leadership panel: API apprehension: improving API security amidst rampant cloud-based services adoption Jack Hart: Vice President, Information Security Architect, City National Bank Sonya Moisset: Security Advisory Board Member &amp; Ambassador, OpenUK; Omar Shabir Peerzada: Cyber Security Architect, Neiman Marcus



As APIs grow exponentially in number across web and mobile app ecosystems, businesses are increasingly challenged to achieve the visibility, governance and standardization they need in order to prevent and detect code vulnerabilities that open the door to threat activity. Factors contributing to API sprawl include increased adoption of cloud-based services and microservices architectures, version control issues stemming from continuous software development, complex integration challenges, and siloed product and dev teams working on their own separate projects. This panel will examine why API sprawl has created a fertile breeding ground for cyber threats, and what developers and security professionals must do to institute more responsible API policies and practices.



2:00 PM ET&nbsp; Security blind spots in the era of cloud communication &amp; collaboration: are you protected? Shlomi Levin: Security Researcher &amp; Co-Founder, Perception Point &nbsp;



The need to communicate, collaborate and do business on a global level has created a proliferation of cloud-based applications and services. Email. Cloud Storage. Messaging platforms. CRM. Digital Apps and Services. Organizations continue to add new cloud channels to support their business needs. But with new channels come new security blind spots that must be addressed. &nbsp;



2:30 PM ET Hidden risks of using open source software Maciej Mensfeld: Director of Product, White Source Software



With each passing year, open source software use increases. But this trend does not come without a price. Modern software’s heavy reliance on open source components created space for exploitation by malicious actors. New threats are challenging to detect and to protect against. This session should arm you with knowledge about the risks and practical countermeasures you can take to avoid becoming a victim



3:00 PM ET&nbsp; Injection vulnerability: What do developer’s actually know? Amy Baker: Chief Marketing Officer, HackedEDU&nbsp;



In this session, we will discuss the application security landscape and what role secure development training plays in it. We will highlight data from over 100,000 training sessions on our Secure Coding Platform, focused on one of the most common vulnerabilities, injection. We will highlight what developers know today about injection and how you can use that data to build a plan for secure coding training inside your organization.&nbsp;



3:30 PM ET&nbsp; Closing Keynote: The most common visibility and compliance lapses in your cloud vendors&#8217; environments. Kayne McGladrey: Senior Member, IEEE &amp; Cybersecurity Strategist, Ascent Solutions&nbsp;



Whenever a key business function is hosted by a cloud-based vendor, your organization cedes a certain amount of control to the service provider. And that sometimes means that your security team lacks visibility into how this third party handles sensitive data and to what degree it successfully meets regulatory compliance standards around privacy and data security. This session will identify some of the most common gaps in visibility and compliance to develop between companies and their SaaS, PaaS and IaaS providers, and explain the root causes behind these lapses so that your own company hopefully can avoid some of these pitfalls.&nbsp;

eSummit_SecuringCloud_448x275-01

Application security

DevOps

Asset Management

Securing Cloud-as-Infrastructure

The true potential of the cloud is often hindered by security controls that weren’t purpose-built for dynamic, microservice architectures or the shared security and compliance responsibility common to cloud providers. Zero Trust security helps organizations harden their defenses and empower their enterprise with accelerated transformation initiatives. True success in the cloud hinges on secure, agile and unified access for all users to multi-cloud workloads with fine grain microsegmentation policies. This learning session, featuring industry experts from analyst firm ESG and Appgate, the secure access company, will illuminate how to apply Zero Trust principles to modern architectures and showcase the raw potential of secure cloud access.&nbsp;



Key topics include:&nbsp;



<ul><li>Prioritizing user and workload identity and contextual risk</li><li>Unifying policies across multi-cloud, hybrid cloud and on-premises workloads</li><li>Automating security to keep pace with dynamic workload changes&nbsp;</li><li>Using integrations to weave security into cloud, security and business ecosystems</li><li>Empowering developers and users with frictionless just-in-time Zero Trust access&nbsp;</li></ul>



Speakers:



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/12/John-Grady.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about">John GradySenior AnalystESG</div><div class="speaker-description">Senior Analyst John Grady covers network security at ESG. John leverages over 15 years of IT vendor and analyst experience to help clients identify and quantify key market trends to facilitate data-driven business decisions. John has written for Dark Reading and has been quoted in Network World, CSO, eWeek, and TechTarget, among other publications.</div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/12/Colby-Dyess.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about">Colby DyessDirector of Product ManagementAppgate</div><div class="speaker-description">Colby Dyess has 20+ years of experience in leading development, delivery and marketing of enterprise software solutions. As Director of Product Management at Appgate, he works with clients around the globe to accelerate their move to Zero Trust networks.</div></div></div></div>



Sponsored by:



<figure class="wp-block-image size-full"><img width="606" height="165" src="https://files.scmagazine.com/wp-content/uploads/2021/08/Appgate.jpg" alt="" class="wp-image-195814" srcset="https://files.scmagazine.com/wp-content/uploads/2021/08/Appgate.jpg 606w, https://files.scmagazine.com/wp-content/uploads/2021/08/Appgate-300x82.jpg 300w" sizes="(max-width: 606px) 100vw, 606px" /></figure>



*All times listed in Eastern Time (ET)

Cybercast

Unleash and Secure the Cloud With Zero Trust Access

ukraine_protest

Analysis

What happens when ‘protestware’ sabotages open source in response to current events?

The White House in Washington DC

Perspective

Add runtime to an SBOM for even stronger security￼

Stores Offer Shopping Times For Elderly And Vulnerable Citizens To Protect Against Coronavirus Transmission

Ransomware

News

Ransomware seen as No. 1 threat of financial organizations￼

Security Weekly News

<div align="center"><iframe src="https://www.youtube.com/embed/bwQjotYcFbE?rel=0" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe></div>

This week, Hackers are using infected movie downloads to spread malware to PC, Esoteric Exfiltration using Power Supplies on Airgapped machines, US Government bans purchase of bulk power system equipment from hostile foreign powers, Eventbot malware targets banking apps on Android Phones, and Apple makes it easier to unlock your phone while wearing a mask! In the Expert Commentary, we welcome Corey Thuen, Co-Founder at Gravwell, to discuss how Gravwell is built to ingest data from anything for collection and correlation with logs, security events, or network packets. They&#8217;re releasing Packetfleet open source as a tool that makes it easier to do on-demand packet capture from multiple locations!
To learn more about Gravwell, visit: https://securityweekly.com/gravwellVisit https://www.securityweekly.com/swn for all the latest episodes! 
<a href="https://wiki.securityweekly.com/SWNEpisode31">Full Episode Show Notes</a>
<h1>Trojans, VBScripts, I Love You Returns, and Corey Thuen </h1>
<h1>Hosts</h1>
<table>
<tbody><tr>
<td><div id="attachment_210" style="width: 130px" class="wp-caption alignleft"><img aria-describedby="caption-attachment-210" class="wp-image-210" src="http://securityweekly.com/wp-content/uploads/2020/05/Doug_White-0-1.png" alt="Doug White" width="120" height="96">Doug White &#8211; Professor</div></td>
</tr>
</tbody></table>
<h1>Guests</h1>
<table>
<tbody><tr>
<td><div id="attachment_210" style="width: 130px" class="wp-caption alignleft"><img aria-describedby="caption-attachment-210" class=" wp-image-210" src="http://securityweekly.com/wp-content/uploads/2020/05/Corey_Thuen_-0.jpg" alt="Corey Thuen" width="120" height="96">Corey Thuen &#8211; Co-Founder</div></td>
</tr>
</tbody></table>


<audio class="wp-audio-shortcode" id="audio-171012-1" preload="none" style="width: 100%;" controls="controls"><source type="audio/mpeg" src="http://traffic.libsyn.com/sw-all/SWN_31_-_5-5-2020_w_Corey_Thuen-0_converted.mp3?_=1" /><a href="http://traffic.libsyn.com/sw-all/SWN_31_-_5-5-2020_w_Corey_Thuen-0_converted.mp3">http://traffic.libsyn.com/sw-all/SWN_31_-_5-5-2020_w_Corey_Thuen-0_converted.mp3</a></audio>

SWN #31

Trojans, VBScripts, I Love You Returns, and Corey Thuen

Hosts

Guests

Related

What happens when ‘protestware’ sabotages open source in response to current events?

Add runtime to an SBOM for even stronger security￼

Ransomware seen as No. 1 threat of financial organizations￼

Add runtime to an SBOM for even stronger security

Ransomware seen as No. 1 threat of financial organizations