Adjust the vertical spacer by editing the class "spacer-X" where X = 0 (none) thru 5 (most)

No More Cookies for You: Attacking and Defending Credentials in Chromium-Based Browsers

Presented by CyberArk Labs

Adjust the vertical spacer by editing the class "spacer-X" where X = 0 (none) thru 5 (most)
Adjust the vertical spacer by editing the class "spacer-X" where X = 0 (none) thru 5 (most)
On-Demand

Register to watch the on-demand webinar


The techniques, tactics and procedures (TTP’s) used to bypass security controls continue to evolve at a rapid pace. Web-based applications have become essential to life and work, and our web browsers, which seemingly know everything about us, have become the prime targets for credential stealing attacks. In fact, threat actors and credentials stealing malware commonly target browsers to compromise stored credentials and session cookies, for they hold the secrets.

Like updating passwords on a regular basis, clearing web browser cookies is a cyber hygiene practice neglected by most. If hijacked, these cookies will enable attackers to bypass Multi-Factor Authentication (MFA), Single Sign-on (SSO) and gain access to critical business applications. Threat actors can use this technique as a jumping point to deploy malicious code, social engineer, and further carry out their attack.

Hear from Shay Nahari, VP of CyberArk Red Team and Andy Thompson, Research Evangelist of CyberArk Labs as they discuss and demonstrate how cookies and session IDs can be stolen with ease and how CyberArk Endpoint Privilege Manager (EPM) credential theft protection can prevent this and many other emerging techniques from being used against your organization.

Attendees of this webinar will walk away with:

  • CyberArk Red Team perspective on the power of stolen cookies and how easy it is to steal them
  • Understanding of various credential and cookie theft tactics, including several new tactics discovered by CyberArk Labs researchers
  • A few real-life examples of how these techniques continue to be the key for high profile breaches
  • How CyberArk EPM threat prevention policies prevent cookie theft on your endpoints and product demo

Presented by

Shay Nahari, VP of CyberArk Red Team Services and Andy Thompson, Global Research Evangelist, CyberArk Labs

WATCH NOW

Adjust the vertical spacer by editing the class "spacer-X" where X = 0 (none) thru 5 (most)
ABOUT CYBERARK

CyberArk is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets.