Phoenix-Scottsdale Cybersecurity Conference

Ransomware has emerged as a pervasive threat in recent years, wreaking havoc and causing millions in damages across global organizations. Its rampant proliferation shows no signs of slowing down, with a diverse range of perpetrators adopting it as a powerful tool for asset seizure and extortion. From criminal syndicates to activists and even sanctioned governments, ransomware is utilized for various nefarious purposes, including acts of cyber warfare. 

However, this threat isn't novel;it draws eerie similarities to historical high seas piracy. In this talk, we will delve into the historical, economic, and geo-political parallels between modern ransomware cartels like DarkSide and Conti and the marauding pirates and privateers of the 17th and 18th centuries, offering insights into the evolution and implications of this digital menace.

Attack surfaces for enterprises are constantly changing due to the integration of cloud-based infrastructure, interconnected devices, and third-party solutions. Every day, proactive cybercriminals are exploiting new vulnerabilities with skill. In this context, comprehensive Identity Security is crucial to managing risks. However, maintaining a strong Identity and Access Management (IAM) strategy can be a complex task given the multitude of tools involved. This session will address how a unified identity security strategy is key addressing the constantly evolving challenges of today and tomorrow’s cyber threats.

Security must improve to protect our enterprises. The old-way of buying “point security solutions” is not working, as these solutions are not integrated, don’t correlate, use different risk scoring, etc. The new and improved method of securing an enterprise is to use a unified and continuous threat exposure management solution, which solves the issues that plague organizations trying to work with their disparate solutions. In this workshop, 19X Microsoft MVP Derek Melber will guide you through the specifics of what a typical exposure management platform includes, focusing on the details so you can immediately update your existing solutions. The workshop will show you how to verify existing security settings, using scripts and PowerShell, to verify that your current solutions are not functioning the way you would expect. This exposure to the reality of your existing security will be eye-opening and become the foundation for moving to a unified exposure management platform! Come prepared to learn a ton, have a list of action items to perform when you get back to the office, and overall learn about:

- What security settings you need to verify today, to ensure you are secure TODAY!

- How you alter your security mindset to secure your network from attacks

- What is included in a unified continuous threat exposure management platform

- What should you look for in a unified CTEM platform

This workshop will be “demo driven” and “action item driven”. Meaning, you will see the scripts and PowerShell commands in action, live (No pathetic recordings!). You will have explanations of each and every setting discussed, so you know the “why” of what you need to verify. 

The workshop is 90 minutes in total, with the final 10 minutes left for Q&A, but Derek's email is derekm@braincore.net... And you can follow up with questions to him about the workshop!

The workshop is only $50! 

Early Bird sign ups will give you a 20% discount to $40! 

Derek is a 19X Microsoft MVP in Security, Active Directory, and Group Policy. Derek has written over 15 books and spoken to organizations in over 35 countries about how to secure their organization. 

When you are done with the workshop, you will receive the following package via email:

1. PowerShell and script toolkit (so you don’t need to take notes on the commands during the workshop)
2. Links to blogs and articles which will continue your learning from the workshop

3. A certificate of completion that can be printed and used for CPE credits

Come join Seth Markzon, Team Lead of LastPass Solutions for SMB. In this session we will talk about security challenges faced by organizations, how password management is essential and solutions that can work for you and your organization.

Organizations of all shapes and sizes are fighting battles against threat actors. As seen in recent years, cyber-attacks have become more sophisticated, making them harder to detect and mitigate. 

Today, there are two main methods relied upon by CISOs, and organizations in general, to verify that their infrastructure and their data and IP are protected. The risk assessment these methods generate might satisfy compliance regulators, but they fail to accurately validate the organization's actual security posture, especially against emerging threats, multi-vector attacks, and APTs. 

In this session, you’ll learn about a three-part purple teaming framework that helps you prepare for future bouts… especially when it comes to sophisticated, multi-vector attacks.

2024 will mark the pivot point when software security finally gets the attention it has been lacking. The impetus for transformation will be driven by the innovation opportunities of AI and the rise of regulation focused on creating better security outcomes for customers. Join Bradley Lee, Sr. GitLab Solutions Architect, in this high-level overview. She will examine standards and regulations your software and application security programs should care about, the impact of non-conformance on your business, and recommendations on how to prepare for this sea change.

Generative AI models can perform tasks that traditionally require creativity

and human understanding. They learn patterns from existing data during training and can subsequently generate new content, such as texts, images, and music, that follow these patterns. Due to their versatility and generally high-quality results, they, on the one hand, represent an opportunity for digitalization. On the other hand, the use of generative AI models introduces novel IT security risks that need to be considered for a comprehensive analysis of the threat landscape in relation to IT security. we will be diving into risk analysis, measures 

and operational model with utilizing Gen AI