Security teams have made huge defensive strides in the last five years: reduced dwell times of attackers and improved intelligence sharing; integrated MITRE Att&CK into risk frameworks and identified gaps in visibility, detection, and response; and, leveraged SaaS, IDM, and MFA solutions to accommodate the cloud journey and remote workforces.
But the adversary has not been idle. They’ve adapted, collaborated, and borrowed TTPs, targeted firmware below the OS, and used machine learning and deep-seated supply chain attacks against us.
In the end analysis, are we winning the fight? Have we enabled our businesses better than in years past? Join for an open discussion asking the hard questions and sharing examples of failures and successes against our common adversaries.