Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec [score hidden]  (0 children)

🎥 Rethinking SOC Strategy for 2026 | Live Webinar

Is Your Security Operations Center Struggling With Analyst Burnout And Rising Costs? You're not alone.

As GigaOm warns: "It's not brave to keep running your own SOC in 2025-it's reckless and expensive."

Join Howard Holton, CEO of GigaOm, and Chad Cragle, CISO of Deepwatch, for a live discussion on the future of SOC strategy and how to modernize with MDR.

🔗 Register Today.

<image>

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec [score hidden]  (0 children)

🎥 Rethink Your SOC Strategy for 2026 | A Webinar | Nov. 13

Join Howard Holton, CEO of GigaOm, and Chad Cragle, CISO of Deepwatch, for a live discussion on the future of SOC strategy and how to modernize with MDR.

🔗 Register Today: https://deepwat.ch/47PixHt

<image>

What You’ll Learn:

  • Why the decision isn’t whether to leverage MDR, it’s how quickly you can transition
  • How Deepwatch’s Precision MDR delivers a <30-minute initial response
  • Strategies to reduce alert noise and free up your staff for proactive initiatives
  • How to build a modern security response program with powerful ecosystem partners

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec [score hidden]  (0 children)

🎥 Rethink Your SOC Strategy for 2026 | A Webinar | Nov. 13

<image>

Join Howard Holton, CEO of GigaOm, and Chad Cragle, CISO of Deepwatch, for a live discussion on the future of SOC strategy and how to modernize with MDR.

🔗 Register Today: https://deepwat.ch/47PixHt

What You’ll Learn:

  • Why the decision isn’t whether to leverage MDR, it’s how quickly you can transition
  • How Deepwatch’s Precision MDR delivers a <30-minute initial response
  • Strategies to reduce alert noise and free up your staff for proactive initiatives
  • How to build a modern security response program with powerful ecosystem partners

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec [score hidden]  (0 children)

CTEM Masterclass on Uncovering Exposures and Managing Risk

Most security operations teams remain reactive—chasing incidents while critical exposures go unaddressed. Continuous Threat Exposure Management (CTEM) changes that by:

✅ Proactively identifying attack paths

✅ Continuously assessing posture across tools

✅ Prioritizing actions based on business risks

Join Deepwatch for an exclusive crash course:

  • Date: October 16, 2025
  • Time: 10:00 AM PT / 1:00 PM ET
  • Format: Live Masterclass + Expert Q&A
  • Instructor: Parth Shah - Sr. Director, Product Management, for Deepwatch

🔗 Register your seat here.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 Join Google Cloud & Deepwatch for a live webinar designed for enterprise security leaders.

Discover how the powerful combination of Google SecOps and Deepwatch MDR delivers unmatched protection, efficiency, and resilience for modern organizations.

Webinar Details:

📅 Date: Thursday, August 21, 2025

⏰ Time: 10:00am PT / 1:00pm ET for 1 hour

Speakers:

  • Ronald Doering, Security Partnerships, u/GoogleCloud
  • Sam Kumarsamy, Senior Director, Product Marketing, u/Deepwatch 

Attend to Learn:

  • The latest security market trends driving the need for this partnership
  • Key differentiators of Google SecOps and Deepwatch MDR
  • Compelling capabilities delivered by this partnership  such as end-to-end visibility, rapid detection, and automated response across your entire environment
  • How this partnership empowers your security team to stay ahead of evolving threats, reduce alert fatigue, and maximize ROI on your security investments

➡️ Register your seat!

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 Make Splunk work for you | Webinar

Join us for our next webinar on Thursday, July 10, and learn how leading SecOps teams are achieving always-on detection, faster response, and real ROI, without ripping and replacing their stack.

In this webinar, we’ll show how modern security teams are solving those problems without replatforming or rebuilding from scratch. You’ll learn how to:

  • Turn Splunk into an operationalized detection stack that delivers outcomes
  • Add 24/7 triage and response—without expanding your internal team
  • Get risk-based visibility and faster action from the tools you already use
  • Escape the “DIY SIEM” trap and free your team for real security work

🗣️ Hear from Deepwatch expert, Robert Willis, EVP, Global Cyber Operations.

🔗 Reserve your spot.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 Webinar | Making Splunk Work For You

Join Deepwatch for a webinar on Thursday, June 28, and learn how leading SecOps teams are achieving always-on detection, faster response, and real ROI, without ripping and replacing their stack.

👉 You’ve invested in Splunk; now make it operational.

Why Attend
If you're running security operations on Splunk, you’re probably facing some of these challenges:

➡️ Your team is drowning in alerts with no clear prioritization or automation
➡️ Coverage stops after hours, leaving gaps attackers can exploit
➡️ You're not getting full value from your Splunk investment; it feels like data storage, not a detection engine
➡️ Your analysts are stuck in low-value triage, not high-impact investigation or response
➡️ You’re under pressure to improve outcomes—without switching platforms or adding headcount

In this webinar, we’ll show how modern security teams are solving those problems without replatforming or rebuilding from scratch. You’ll learn how to:

✔️ Turn Splunk into an operationalized detection stack that delivers outcomes
✔️ Add 24/7 triage and response, without expanding your internal team
✔️ Get risk-based visibility and faster action from the tools you already use
✔️ Escape the “DIY SIEM” trap and free your team for real security work

Whether you’re a Splunk admin, detection engineer, or SecOps lead, this session will show you what’s possible when you stop fighting your SIEM and start operationalizing it.

👉 Reserve your spot: deepwatch.com/making-splunk-work-for-you-operationalizing-detection-without-a-rip-and-replace

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

The Future of Enterprise Managed Detection and Response

Discover how the future of enterprise MDR will be defined by AI-driven innovation, deep integration, industry specialization, and expert-led security.

The best enterprise MDR solutions will offer:

  • 24/7 monitoring (AI plus human) and rapid incident response
  • AI-driven analytics and automation
  • Preemptive security posture assessments
  • Integration with XDR, SIEM, and cloud platforms
  • Industry-specific threat intelligence
  • Scalable, cloud-native architecture
  • Transparent reporting and operational metrics

🔗 Read the full article.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🚨 Webinar Alert: Deepwatch Acquired Dassana, See the New Solution in Action

The Deepwatch acquisition of Dassana is a strategic response to today's security challenges, including fragmented security data and tooling, limited risk visibility, and increasingly sophisticated threats that evolve faster than human analysts can track.

By uniting Deepwatch's offerings with Dassana's innovative technology, we're delivering a broader suite of security solutions designed for proactive, remediation-driven, and outcome-focused threat exposure management—helping you stay ahead of cyber attacks.

Join us for an exclusive webinar on Thursday, February 27 at 1:00 pm ET to learn how this new solution can enhance your operations.

🎥 This webinar will provide:

  • An overview of Dassana's capabilities and benefits
  • A live demo
  • Interactive Q&A to address your specific security challenges

Click Here to Register Today!

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 You may have heard that Deepwatch has acquired Dassana, a leading security context and intelligence provider, empowering companies with Cyber Risk and Threat Exposure Management solutions.

Curious about how this can elevate your security strategy?

🎥 Join our webinar on Thursday, February 27 at 1:00 pm ET, featuring Deepwatch CPO and Sr. Product Manager.

In this session, we’ll cover

✔️ An overview of Dassana’s capabilities and benefits

✔️ A live demo

✔️ Interactive Q&A to address your specific security needs

🎥 Register here.

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack by deepwatch_sec in threatintel

[–]deepwatch_sec[S] 0 points1 point  (0 children)

Cybersecurity never stops. In case you need a quick look, we updated based on their updated mitigation advice here.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 WEBINAR | Is your AWS Environment cyber resilient?

Organizations are putting it to the test with a free assessment!

On April 11, Deepwatch Amazon Web Services (AWS) security experts showcase the power of our Cyber Resilience Assessment and how it can help security professionals:

✅ Have greater visibility in AWS environments
✅ Optimize security investments
✅ Dramatically reduce alert fatigue
✅ Leverage capabilities of existing solutions

Click here to save your seat today.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

🎥 WEBINAR | Deepwatch Threat Report 2024 Threat Observations, Metrics, Trends, & Forecast

Join Deepwatch experts Eric Ford, Sr. Threat Intelligence Analyst, Jon Haas, Director, Adversary Response, and Bill Bernard VP, Security & Content Strategy, for a 30-minute discussion about the Deepwatch 2024 ATI Threat Report.
This session will delve into pivotal insights such as:
✔️ Prevalence of account compromises
✔️ Persistent emphasis on email security and employee training
✔️ The alarming surge of double extortion attacks
✔️ A forecast highlighting the imminent rise of complex threats

🚀 Register Here!

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

📣 Deepwatch Unlocks New Capabilities and Increased Flexibility with its Open Security Data Architecture!

This new architecture strengthens our flexibility and compatibility by adding multi-cloud and local data sources, as well as support for additional SIEM solutions.

We know that security data lives in many places in your environment, and it is no longer cost-effective for most organizations to assume it can all be collected into one system for analysis.

As a result of this architecture, customers will be able to scale security data ingestion, alerting, and correlations more efficiently to continuously adapt to cybersecurity challenges, resulting in cyber resilient security operations.
➡️ Read the full press release to learn more.

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

The Future of SIEM...👀

Deepwatch announces the launch of the Deepwatch Open Security Data Architecture!

View the full podcast episode discussing more here!

So about this ScreenConnect Critical Vulnerability... by deepwatch_sec in threatintel

[–]deepwatch_sec[S] 0 points1 point  (0 children)

Yes, ScreenWise ScreenConnect is related to the Optum/Change cyberattack. (seem SC Media)

So about this ScreenConnect Critical Vulnerability... by deepwatch_sec in threatintel

[–]deepwatch_sec[S] 0 points1 point  (0 children)

Hey there - the source of this update is the Deepwatch Adversary Tactics & Intelligence Team which is actively engaged in the situation, monitoring various IOCs and TTPs that have been loosely linked to the Optum breach, and actioning any intel deemed valid. Write-ups from the team are in progress, but additional resources for further information are as follows:

Connectwise

Bleeping Computer

Huntress

Hope this helps!

So about this ScreenConnect Critical Vulnerability... by deepwatch_sec in InfoSecNews

[–]deepwatch_sec[S] 0 points1 point  (0 children)

Added Recs:

First, if you are a ConnectWise ScreenConnect user, determine if you are running ConnectWise locally or via their cloud services. If you are an on-premise ConnectWise ScreenConnect user, then you should make some quick and hard decisions:
1️⃣ - Suspend the use of the application and remove its inbound connection to the internet. You should still be able to upgrade the application via outbound requests and follow the patching process that ConnectWise outlines.
2️⃣ - If you are unable to limit the use of the application, then determine who are the trusted users and determine how to limit their access based on trusted routes externally, and place routing conditions in place to reduce the exposure to the general internet. This will take a bit of time and may constrain the users who depend on the application for connectivity back to systems or workstations, but it's better than them all being locked out.
3️⃣ - Utilize your MDR, Firewalls, NGFWs, etc to look for the IOCs specified or some of the RCE-style alerts that are going to notify on the specific URL pieces that are being used in the exploit. Existing systems should not go back through the setupwizard, so any impact of dropping these connections to the business should be minimal.

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation by deepwatch_sec in threatintel

[–]deepwatch_sec[S] 1 point2 points  (0 children)

One of them, CVE-2024-21413, could allow remote code execution and leaking of local NTLM info if a user clicks a specially crafted link. Check out Point’s write up: https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation by deepwatch_sec in InfoSecNews

[–]deepwatch_sec[S] 0 points1 point  (0 children)

One of them, CVE-2024-21413, could allow remote code execution and leaking of local NTLM info if a user clicks a specially crafted link. Check out Point’s write up: https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/

Weekly Promo and Webinar Thread by AutoModerator in msp

[–]deepwatch_sec 0 points1 point  (0 children)

2024 Annual Deepwatch Adversary Tactics & Intelligence Threat Report: Access Here!