• How to secure RPA credentials using CyberArk and how to integrate with existing procedures and management policies
• How to implement a seamless, out of box integration with UiPath (Demo)

To address ongoing privilege account risk posed by evolving threat tactics, attend this session to learn how, through machine learning and cloud-based analytics, to stop attackers from gaining a foothold on endpoints. By detecting potentially malicious applications, timely, well-informed privilege and application control policy decisions can be made.

During this session we’ll demonstrate:

• New threat detection capabilities that provide a risk framelet via a dashboard to indicate the
  
• amount of accounts that are potentially exposed to credential theft. The ability to detect and control unknown applications from installing and running using file-based machine learning algorithms.
  

Earlier this year, US-CERT and others warned organizations worldwide about ongoing and eminent cyber attacks targeting ERP applications. A critical part of running a business effectively, securing these high value applications and the related sensitive data they house is a major initiative for virtually every organization.

In this webinar, we’ll explain how organizations can effectively manage, secure and control the use of privileged accounts used by SAP applications and admin. CyberArk augments native SAP security features and best practices, enabling a holistic approach to enterprise security while addressing the elevated risks in an SAP environment.

We’ll discuss and demonstrate how to:

• Integrate CyberArk & SAP
  
• Discover and onboard SAP privileged accounts via native CyberArk REST API 
  
• Secure HANA and other SAP systems on the cloud
  
• Control SAP applications’ and systems’ access throughout the infrastructure, operating system, and data center
  

Be on your best behavior, the saying goes. In this session, we’ll highlight use cases and best practices for comprehensive privileged access as well as credential and secrets management for widely used applications, third party tools, containers and DevOps environments.

The CyberArk Application Access Manager, which combines CyberArk Application Identity Manager and Conjur Enterprise helps organizations to control, manage and audit non-human privileged access for a wide range of applications including in-house developed, COTS and dynamic containerized applications.

Fortunately, the security principles that protect human credentials can also apply to non-human credentials. However – due to higher performance and scale requirements and the special technologies required to strongly authenticate applications or code and other factors – protecting non-human credentials requires its own solution. Least privilege, role-based access controls, credential rotation, management and audit can all be applied to non-human credentials.

Key take-away points include:

• Clear understanding of machine vs application identity
• Benefits of agentless and agent-based solutions
• When to use which credential and access provider
• Next steps to take to secure your applications

The CyberArk Labs team recently released zBang – an open source tool designed to help security teams discover critical risks associated with privileged accounts. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic interface or by reviewing the raw output files.

In this session, our cybersecurity researcher will introduce the tool and demonstrate how it can be used to discover critical findings including:

1. The most privileged accounts that must be protected, including suspicious Shadow Admins.
   
2. Possible infected DCs with Skeleton Key malware.
   
3. Suspicious SID history with hidden privileges.
   
4. Risky configurations of SPNs that might lead to credential theft of domain admins.
   
5. Risky Kerberos delegation configurations in the network.
   

During the webinar, we will explain these threats and how to eliminate them with the help of the zBang tool.The tool is freely available on GitHub.

With defense in depth as a mantra in security, organizations have a natural tendency to deploy a variety of solutions in their security portfolio. There is a fundamental layer of protection that many organizations miss - the removal of local administrative rights. In this presentation, we'll talk about why the removal the local admin rights is the foundation of endpoint security and highlight some of the threats that remain on the endpoint including credential theft.

While the removal of local admin rights greatly reduces the threats landscape, end users can still store a variety of passwords on their laptops. This might be corporate social media accounts, such as Twitter and Facebook, or administrative credentials stored in IT applications and remote access tools.

In this session, we’ll review:

• How credentials are stored
• How attackers can easily access credentials
• How to prevent and audit this malicious behavior

Often, attackers need to achieve admin privilege in order to steal credentials, perform lateral movement and inflict maximum damage. There has been a significant rise in the awareness of the advantages of following the principle of least privilege – this awareness coupled with the improvements made to operating systems makes escalation attempts more challenging than ever before. Nonetheless, attackers are persistent and continue to discover new privilege escalation vulnerabilities on almost a weekly basis. Attend this webinar to better understand privilege escalation vulnerabilities. We will showcase real privilege escalation attacks, and we will give a technical demonstration of how an attacker might escalate privilege on a fully patched system:

• Obtaining domain admin privileges by having local administrative rights.
  
• Misconfiguration of SUID allows an attacker to gain Root privileges
  

Daily repetitive tasks can be inadvertently damaging to a business caused by things human error (typos!) and abuse of privileged access (insider threats!). Automated task management, both in the cloud and on-premises, safeguards your remote vendors and internal users alike by automating manual sometimes critically sensitive privileged tasks while simultaneously improving workflow productivity.

Join this session to see how CyberArk can automate an array of regular tasks with a single click to establish user accountability and better protect your environment.

In this OTFL session, Shay Nahari, CyberArk’s Red Team lead, will present a new technique for domain fronting, which enables attackers to abuse Content Delivery Networks (CDNs) to mask malware command and control (C2) traffic. While many CDNs are potentially impacted, Akamai is one of the largest. During our research we identified tens of thousands of high reputation domains served by Akamai’s CDN that can be used for domain fronting.

This research demonstrates a new technique for hiding a C2 channel completely within a CDN. We will show POC tools that utilize this technique.

In Part 2 of our DevOps series, we’ll demonstrate how developers can integrate Conjur into their projects with minimal effort.  In order to maintain the software delivery pipeline integrity and to help reduce security risks associated with unprotected privileged credentials embedded into applications, CyberArk Conjur immediately incorporates and mirrors privileged account security policies consistently across the DevOps ecosystem. Attend this session to learn how the CyberArk Conjur Solution:

• Secures Build Products & CI/CD Tools
  
• Provides RESTful API support for automated account provisioning of build products with orchestration tools
  
• Removes credentials from code/configuration files
  
• Reverts credentials back in case of disruption
  
• Authenticates CI/CD tools, images and build product to maintain pipeline integrity
  
• Enables credential-protected configuration and orchestration process
  

Personal Privileged Users are Strong Named accounts that are owned by individuals in the organization. They could be Domain users that are member of the strongest groups in the ActiveDirectory, such as “Domain Admins”, but they could also be local users with highest permissions on Operating Systems including Unix/Linux and also on Corporate Business Applications.

This session will explore why the Personal Privileged Users are under the highest risk in your organization and how to mitigate those risks.