Webináře

Many years ago we decided that protecting our data just behind username and password authentication is a bad idea. Yet today, we are still heavily relying only on this technology. And, in turn, cybercriminals rely on stolen credentials to enter our realm to wreak havoc. Let’s take a look at how your credentials are valued today, how they are stolen and abused. Then let’s discuss available safeguards including not only MFA but other viable defenses for our society that still holds on to its P@ssword1!

After the recent Twitter account compromise many questions come into focus about security of our social media and events leading to account takeovers. Our investigations of similar cryptocurrency schemes show a pattern of abuse of people’s trust. However, the current Twitter incident is significantly more than meets the eye. The magnitude and impact do not match the financial gains. Sophistication of the breach of high-profile accounts pales in comparison to a sophomoric monetization scheme.

We often don’t realize the full impact of cyber crime, which then relapses us into repeating the same mistakes. Even large companies do not completely understand how their data and services are being abused. I want to take you on a journey of observing credit card fraud and abuse from stealing a credit card to trafficking of stolen goods. Learning about these vectors of abuse will help you and your organization to mitigate a number of common attacks and abuses.

In August 2019, Hold Security ran a table top exercise with Wisconsin Ingragard focusing on potential electronic tampering of the 2020 Wisconsin elections by foreign influences. We leveraged our insights in identifying and reporting Russian interference during the 2016 US election to derive critical lessons. The results were fascinating and scary. In this session, we will focus on the 2020 US election through our unique cybersecurity perspective focusing on current events and technical understanding to analyze use of social media manipulations, civil unrest, disinformation campaigns, cyber attacks, and more.

Examination of the threats and advances of malware in 2020. New techniques from existing threat groups and emerging trends. Examination of popular botnets, attack techniques, and current defenses.

Today, as we are trying to adjust to the new normal, cyber criminals are rushing to take advantage of our drive towards learning. Phishing using COVID-19 related messages is rising to a new high with not only a number of phishing attacks but with a number of victims who are falling for it. We will discuss the new trends and techniques that you should be implementing within your organization to minimize impact of phishing in this new normal.

As our journey towards better security continues, we need to learn from mistakes of the past. We will discuss capitalization on past successful experiences and learn cautionary tales from failures. Secure-by-design is our goal but it cannot be at the expense of user experience or product quality.

On the way to maturity, we are to learn from our own mistakes but how well do we do it? Are we also able to learn from mistakes of our peers and our industry? We will examine the common pitfalls and provide actionable advice on improving the information security posture for organization on many levels.