#mwiseconference2024

mWISE 2024

Welcome to August 2024’s second edition of Cloud CISO Perspectives. The Mandiant Worldwide Information Security Exchange (mWISE) Conference is coming up, and today, Google Cloud Security’s Peter Bailey discusses why CISOs, security leaders, and those aiming to advance through the ranks should attend.

mWISE Conference

What is absent when one does not participate in mWISE

Knowing the primary threats to your sector and prioritizing defensive measures across people, processes, and technologies has always been the foundation of a successful cyberdefense program. In addition to compliance, security directors must actively manage their organization’s security posture using a sophisticated blend of process- and technology-based solutions. Having access to the finest knowledge about dangers and how to defend against them is a crucial component of that equation.

Attending mWISE, which is being held this year for the first time in Denver, Colorado, on September 18–19, is one of the greatest ways to get knowledge and the most recent information on risks and best practices. mWISE is the place for security leaders and practitioners to meet and form relationships with colleagues, whether you’re a CISO, security operations leader, engineer, journalist, or analyst. You can also hear directly from Mandiant’s frontline experts and security practitioners.

Mandiant mWISE conference

Mandiant hosts an annual cybersecurity and knowledge-sharing conference called mWISE. It might be the only one created by a vendor that doesn’t care about the vendor in the entire universe. Security professionals of all stripes from entry-level to CISO gather at mWISE to exchange their distinct experiences and defensive strategy know-how.

It’s intentional for what transpires at mWISE to be different from other conferences. Attendees should leave with a greater grasp of the threat landscape, a more robust peer network to rely on for information exchange, and an improved knowledge of how cybersecurity is changing in tandem with the technology it supports.

At the conference, security executives and practitioners debate four important questions, which are as follows:

Are the risks we are considering appropriate?

What do we know from past occurrences that have occurred?

Which modern methods and approaches are considered best?

How can we improve the breadth and depth of our knowledge on risk management and security posture?

Mandiant mWISE 2024

This year’s keynote speakers include Charles Carmakal, CTO of Mandiant Consulting; Jen Easterly, director of CISA; John Hultquist, chief analyst of Mandiant Intelligence; and Kevin Mandia, founder of Mandiant and strategic security advisor to Google Cloud. A distinguished panel of cybersecurity experts will discuss the current state of ransomware, and novelist and neuroscientist David Eagleman will ponder when artificial intelligence will be able to match human intelligence.

Google Cloud will be looking at how creative businesses are utilizing AI to bolster defenses, automate threat detection, and thwart AI-based attacks in order to address the new challenges presented by the usage of AI in cybersecurity. Leaders in the field who are at the forefront of security innovation powered by AI will discuss what they have discovered so far about the AI revolution.

The Next-Gen CISO track comprises specially selected sessions led by CISOs from top 1,000 global businesses. The aim of the program is to prepare the upcoming security professionals to confidently take on the role of CISO. Topics discuss include:

Addressing both important and unimportant cybersecurity issues to the board of directors

Addressing the dynamic threat landscape, data breaches, and rapid injection assaults

Navigating the criteria for regulatory compliance

Handling risks associated with outside vendors

Providing strong privacy and safety for data

Addressing worries about lawsuits brought about by individual violations

Acquiring skilled cybersecurity personnel in a demanding work setting

mWISE Conference 2024

For security practitioners and leaders who wish to learn more about the current threat and risk environment and how other people are acting in it, many people believed that mWISE is an essential event to attend.

With the backing of a sizable community with common goals, cybersecurity is essentially a team sport. mWISE is one of the best venues to connect with peers, who can help us get much better at managing the various risks we face.

Here are the most recent information, goods, services, and tools from Google Cloud security teams so far this month, in case you missed it:

mWISE Conference 2024: A front-row seat to cybersecurity’s future Mandiant, Google Cloud, and other cybersecurity experts will convene on September 18–19 at mWISE in Denver, Colorado. Here’s your opportunity to learn about the most recent threat information, utilize state-of-the-art tools, and network with the visionary leaders influencing the direction of cybersecurity.

At the Google Cloud Security Summit in 2024, rethink security by utilizing the potential of convergence. Boost your security by combining AI, frontline threat intelligence, and security skills to allow the next generation of proactive protection.

Differentially testing your LLMs Security updates from Google Cloud’s most recent report, Cyber Snapshot: Discover how protecting LLMs differs from and is similar to typical web app security in their most recent Cyber Snapshot Report.

A week-long curiosity: How Etsy become an expert in SIEM migration: Could you imagine being able to successfully complete your next SIEM migration in a few weeks instead of months? Etsy carried it out.

A new method of keeping your secrets safe is called delayed destruction. A crucial first step in giving Secret Manager deletion prevention capabilities is delayed destruction. Here’s how it functions.

Assured Workloads’ latest developments: Activate fresh control packages and updates: The newest products in Google’s collection of software-defined policies and controls that can simplify the process of meeting your compliance needs on Google Cloud are listed below.

Google Cloud enhances data sovereignty and AI capabilities while expanding its offerings in Saudi Arabia: Google is thrilled to share with you the Kingdom of Saudi Arabia’s Google Cloud region‘s new data residency, sovereignty, security, and artificial intelligence capabilities.

The utilization of dual-region buckets in Google Cloud Storage can help organizations reduce risks and enhance performance, data availability, regulatory compliance, and compliance.

News on threat intelligence

Cracking the memory-only, cunning virus known as PEAKLIGHT: Using a multi-step, intricate infection technique, Mandiant has discovered a novel memory-only dropper. PEAKLIGHT is a PowerShell-based downloader that is executed and decrypted by this dropper.

credentials for “WireServing” up: Increasing access levels for Azure Kubernetes services: If an attacker managed to get access to a Microsoft Azure Kubernetes services cluster that was susceptible, they may have increased their privileges and obtained credentials for services that the cluster relies on. The flaw has been fixed by Microsoft.

Hacking outside of dot-com: List of exclusive TLDs: In a recent assignment, Mandiant researcher Idan Ron sought to locate newly undiscovered attack surfaces by identifying top-level domains (TLDs) that belonged to a client. Idan collaborated with ProjectDiscovery to develop a tool as there wasn’t one that already existed to fulfill this purpose.

Listen to this now: Mandiant podcasts and Google Cloud Security

Overcoming SOC challenges: What are the key attributes of a modern-day SOC leader that include burnout, leadership, and the evolution of SIEM? The hosts of the Cloud Security podcast, Anton Chuvakin and Tim Peacock, talk with Nicole Beckwith, senior security engineering manager, Threat Operations, Kroger, about the condition of the SOC, how to handle burnout, and how she goes about creating and sustaining a high-functioning SOC team.

Tim and Anton argue over tools: Is it better to rely on third parties or cloud providers? Google Cloud hosts, Anton and Tim, engage in a heated debate in this episode over whether it is better to purchase most cloud security measures from third-party vendors or from cloud providers.

The significance of CoSAI to you: Artificial intelligence poses a wide range of threats. With Google Cloud’s Secure AI Framework, they have come a long way. Google’s senior engineering director David LaBianca informs Tim and Anton.

The field of cybersecurity is always changing, and using collective intelligence to remain ahead of the curve is essential. The mWISE Conference 2024 offers you the opportunity to interact with the visionary thinkers influencing the future of cybersecurity and immerse yourself in the most recent threat intelligence and Cutting-Edge Technology

mWISE Conference 2024 is a three-year-old program that was specifically created by the security community for the security community. Attendees will share information, get insight from personal experiences, and view the most recent, tried-and-true solutions that are assisting organisations in fending off significant threats throughout the two-day event, which is vendor-neutral.

On September 18–19, at mWISE in Denver, Colorado, experts from Mandiant, Google Cloud, and the larger cybersecurity community will convene.

The keynote address: Expert perspectives

Feature the most recent information from luminaries and pioneers in security on keynote stage.

Kevin Mandia

The first day of the conference begins with statements from Google Cloud strategic security advisor Kevin Mandia. The threat environment and how organisations should secure their most valuable assets will be covered tactically.

Jen Easterly

What worries the Cybersecurity and Infrastructure Security Agency? CISA director Jen Easterly discusses the biggest cybersecurity issues on day two.

The growing cash cow of cyberspace

Groups and their affiliates are still being driven to increase operations and make additional investments in their businesses by the profitability of ransomware. Experts in cybercrime Brett Callow of FTI Consulting, Kimberly Goody of Mandiant, and Allan Liska of Recorded Future talk about the most recent data and trends surrounding ransomware, including a rise in aggressive extortion tactics, and how businesses may better protect themselves against and handle threats. Journalist Kim Zetter, an expert in cybersecurity and national security, will moderate the panel.

Defending against complex threats

Firsthand observations Mandiant Consulting’s CTO, Charles Carmakal, leads a mainstage conversation with seasoned business executives who have guided their companies through well-publicized cybersecurity incidents. Discover how cybersecurity leadership is changing in-depth, with insights that can be applied by professionals of all stripes.

John Hultquist

Leaders need to employ dynamic, frontline intelligence in the current threat scenario in order to anticipate changing enemies. John Hultquist, chief analyst at Mandiant Intelligence, examines the most recent front-line findings and solutions for the most pressing threats in a fireside chat.

What will they know when AI becomes intelligent?

Author and researcher David Eagleman analyses how artificial intelligence may surpass human intelligence and how google cloud might forecast it.

Large sessions: Dive deeply into the crucial cybersecurity problems of the day

Over 70 presentations covering nine tracks Cloud Security, Threat Intelligence, the Intersection of AI and Cybersecurity, Next Gen CISO, Security Engineering, Security Operations, Security Threats and Exploits are offered at this year’s mWISE Conference 2024. We’ve picked a few sessions to highlight here to pique your interest

How generative AI changes defense

Leaders in Google Cloud Security Steph Hay and Umesh Shankar explain macro trends at the nexus of security and AI and what they represent for your company using insights from talks with CISOs, the most recent Mandiant research, and Google DeepMind breakthroughs.

North Korean-backed threat actor goes from job interview to bitcoin heist

Clearing a job interview is the first step towards an insider bitcoin theft. Listen as Mandiant Senior Consultants Yi Han Ang and Sun Pu reveal a highly skilled cyber-espionage operation that was launched against a cryptocurrency corporation by a North Korean threat actor. They intend to talk about how crucial it is to put in place thorough security measures in the cloud in order to lessen the likelihood of assaults like this one.

Generative AI-era secure remote identity verification

In the age of generative AI, secure remote identity verification Science-based biometrics-as-a-service can prevent deepfake assaults by enabling dependable, simple-to-manage remote identification for employees and customers. The CEO and creator of iProov, Andrew Bud, discusses the difficulties in implementing remote identity throughout the company and offers customer best practices in this presentation.

The supply-chain attack summer taught us

In the summer of 2023, there were an unprecedented amount of supply chain attacks. Key issues like legal exposure, cyber reporting, and handling threats to company officials or their families will be covered by Erin Joe (Google Cloud Office of the CISO), Lyn Brown and Megan Brown (Wiley Rein), and Jennifer Burnside (Crisis Communications for Google Cloud Security). They will also share lessons learnt and talk about emerging trends.

Construct a low-cost, high-value quantitative risk management program

Tim Anderson and Matthew Harding of ID.me have provided a systematic guide to implementing quantitative risk management. Find out how to report and communicate risk from the boardroom to the security team room. The application and operation of quantitative program design using people, procedures, and technology will be covered.

The cloud security dilemma Unsecure use, safe cloud

Cloud service providers make significant investments in security, far more than what most businesses could accomplish on their own. But leaks and breaches in the cloud dominate the headlines. Why is that? In actuality, cloud security is a shared opportunity as much as a shared obligation. Google Cloud‘s Anton Chuvakin explores this somewhat perplexing conundrum in this session.

Opportunities for networking: Establishing your cybersecurity community

Building a network that can help you in your profession and interacting with peers to gain knowledge from their experiences are all important aspects of mWISE Conference 2024. Make the most of the many breakout sessions, social events, and networking opportunities to establish meaningful relationships.

Among these chances is a special Capture the Flag challenge where you may put your cybersecurity prowess to the test. This CTF game simulates a threat hunt using real-world information from ransom notes, the dark web, and CISA advisories. Using a new Google Threat Intelligence product, follow the clues, evaluate the evidence, and work through the puzzles to identify the flags.

On September 18–19 in Denver, Colorado, They look forward to building Google defender’s community and sharing their most recent security findings with you.