Course Library

►

From Malicious Actors to Unauthorized Access: 5 Doors You Can't Afford to Lock

Eddie Glenn - DigiCert  •  December 5, 2023 @ 1:00 PM (EST) • 

Cyberattacks target the very platforms and processes that your software development teams use. And too often this occurs because responsibility for software security falls in the cracks between your product teams and your enterprise security team. Register and attend this live webinar, where we will discuss: ...

►

5 Strategies to Protect Your Software Development Teams from Software Supply Chain Attacks

Eddie Glenn - DigiCert  •  December 5, 2023 @ 1:00 PM (EST) • 

Cyberattacks target the very platforms and processes that your software development teams use. And too often this occurs because responsibility for software security falls in the cracks between your product teams and your enterprise security team. Register and attend this live webinar, where we will discuss: ...

►

Live Webinar | Gen AI and Secure Code: Mitigating Risks and Maximizing Rewards with Checkmarx and Mobb.ai

Pete Chestna - Checkmarx North America, Eitan Worcel - Mobb  •  December 15, 2023 @ 11:30 AM (EST) • 

Dive into the exciting intersection of innovation and security! Join this session to unlock the secrets of securing your code while harnessing AI's potential. Explore parallels between past open source security concerns and today's AI-generated code anxieties, and where AI can play a role in securing your ...

►

Incident Response Plans: Global Compliance Mandates and Obligations

Darrin Kimes - US Secret Service, Sadia Mirza - Troutman Pepper  •  In Development • 

Creating a cybersecurity incident response plan is a fundamental requirement of any cybersecurity program - and a requirement of many global regulations, including GDPR and PCI DSS. During this workshop, Troutman Sanders' Sadia Mirza will discuss the benefits of table top exercises. She then will be joined by law ...

►

Monitor and Identify Malicious Threat Before they Cripple your Organization

Dave Martin - Open Systems  •  November 16, 2030 @ 12:00 AM (EST) •  Available Exclusively for Premium Members • 

Today's threats are more sophisticated than ever and despite significant investment in prevention technologies many organizations continue to suffer damaging attacks. Join Dave Martin, Open Systems' Senior Director of Product Management- Threat Response as he share best practices model to minimize risk that combines ...

►

Card-Not-Present: Fraud on the Move, Back to the Future

Randy Vanderhoof - US Payments Forum  •  Archived •  Available Exclusively for Premium Members • 

As fraudsters switch focus back to card-not-present (CNP) schemes, research from the Aite Group indicates that it will soon outpace card-present fraud in the U.S. by 3:1. Globally, payments provider ACI Worldwide saw a 30-percent increase in CNP fraud in the first half of 2015. In fact, ACI says that approximately 1.2 ...

►

Identity as the Great Enabler: Improving Security, Privacy and Customer Experiences

Eric Chabrow - ISMG Security Report, Jeremy Grant - Venable, Liz Votaw - Bank of America  •  Archived •  Available Exclusively for Premium Members • 

Nearly every major breach over the last three years - including Anthem, Target, Home Depot, Office of Personnel Management, the Internal Revenue Service, the National Security Agency - shared a crucial commonality: attackers gained entry using compromised or stolen credentials. This range of identity-centric ...

►

Et Tu, Brute? - Your Government Can Take You Down Too

Joseph Burton - Duane Morris LLP, Mike Daugherty - LabMD, Mathew J. Schwartz - DataBreachToday & Europe  •  Archived •  Available Exclusively for Premium Members • 

After any significant breach, many parties, ranging from customers, clients, business partners and government agencies, will demand clarity as to how and what data was stolen. The FTC, for example, will be acting to ensure that any given organization is not negligent or reckless with private information, but upon ...

►

Panel: Data Breach Outlook: Tracking the Next, Seemingly Inevitable Attack

Malcolm Harkins - Intel, Dr. Christopher Pierson - BLACKCLOAK, Matthew Rosenquist - Intel Corporation, Dominique Shelton - Alston & Bird, LLP  •  Archived •  Available Exclusively for Premium Members • 

It's a boom time for cybercrime and cyber-espionage, aided by at least two factors. First, many organizations' websites and databases sport well-known technical weaknesses, while employees remain all to susceptible to low-cost social-engineering attacks. Second, attackers can pummel these technical and human targets ...

►

Panel: The Apple vs. FBI Crypto Debate

Joseph Burton - Duane Morris LLP, Elvis Chan - San Francisco Division, FBI, Mark Mao - Trautman Sanders, LLP, Jim Pflaging - Chertoff Group, Mathew J. Schwartz - DataBreachToday & Europe, Scott Swantner - Western Union  •  Archived •  Available Exclusively for Premium Members • 

We've all heard about Apple's refusal to comply with a court order to assist the FBI in bypassing security features built into an iPhone that was issued to a San Bernardino shooter. The resulting debate - and the implications for law enforcement, national security, privacy and personal freedom - have led to serious, ...

►

Authentication Challenge: The "Dark Side" of SSN Randomization

Ken Meiser - ID Analytics  •  Archived •  Available Exclusively for Premium Members • 

While the Social Security Administration's 2011 decision to randomize Social Security Number (SSN) issuance made the identifier less susceptible to fraudsters, it also caused a series of unintended consequences for organizations that rely on the number's sequencing as a key part of identity-verification and fraud ...

►

New Account Fraud: Still a Model of Success

Al Pascual - SVP - Enterprise Risk Solutions, Sontiq, a Transunion Company  •  Archived •  Available Exclusively for Premium Members • 

Account origination fraud remains one of the fastest growing threats today for organizations ranging from banks to government entities. According to statistics from the Javelin Strategy & Research firm, this type of fraud has risen from $2 billion total loss in 2014 to $3 billion in 2015, while the number of victims ...

►

Case Study: When Government Oversight Goes Wrong

Mike Daugherty - LabMD, Tom Field - ISMG, Randy Sabett - Cooley LLP  •  Archived •  Available Exclusively for Premium Members • 

After any significant breach, many parties - ranging from customers, clients, business partners and government agencies - will demand clarity as to how and what data was stolen. The Federal Trade Commission, for example, acts to ensure that any given organization is not negligent or reckless with private ...

►

Creating 'Trustability' to Strengthen Breach Defenses

Robert Bigman - 2BSecure  •  Archived •  Available Exclusively for Premium Members • 

The problem with breach defenses isn't the lack of security standards, commercial security products and services or even cybersecurity competence, but the fact that the existing collection of commercial hardware, firmware and software employed to provide IT services contain inherent design and implementation ...

►

Internet of Everything: Please Don't Connect It First and Secure It Later

Marc-Anthony Signorino - IDESG  •  Archived •  Available Exclusively for Premium Members • 

The number of IoT devices will proliferate to over one trillion in the next few years, but any device that can communicate with another potentially can provide a direct conduit from the public internet to some very private and valuable information. In our rush to connect everything together, secure connectivity and ...