Why HEAT attacks mark the next era of the cyber threat landscape - ERP Spain.com - España y América Latina

Enterprises today are more complex than ever. Data and applications increasingly reside in the cloud, and the users accessing them often do so remotely. Yet traditional on-premises security approaches still dominate the landscape. With web browsers constantly being updated to address vulnerabilities and SaaS applications further expanding the attack surface, this distributed work model – as well as corporate data – needs to be protected. Threat actors understand this paradigm shift and have adapted by creating Highly Evasive Adaptive Threats (HEAT), which are used as beachheads for initiating ransomware payload and causing other endpoint breaches that result in account takeovers. HEAT attacks are evading existing security defenses, including Secure Web Gateway anti-virus engines and sandboxes, network and HTTP-level inspections, malicious link analysis, and indicator of compromise (IOC) feeds. During this insightful conversation, ESG Senior Analyst John Grady will dive deep into the challenges that HEAT attacks present organizations with Eric Schwake, senior manager of cybersecurity strategy at Menlo Security. Attendees will learn: • How modern work has given rise to HEAT attacks. • The delivery mechanisms these attacks leverage to evade detection. • What organizations can do to prevent HEAT attacks.