In this webinar, we will discuss the anonymized, aggregate findings of consulting engagements conducted by Coalfire Labs for external network, internal network and application penetration tests and social engineering in the retail industry. These results were recently published in our 2019 Securealities Penetration Risk Report.
Key findings from the report to be discussed:
- Unlike the 2018 report, large enterprises have taken the “sweet spot” for overall security due to a demographic shift toward cloud providers.
- Our data shows that the move to the cloud is having a tangible effect on security posture and vulnerabilities—we tested more cloud clients and saw more cloud-related vulnerabilities, with cross-site scripting, injection, and security misconfiguration topping the list.
- In parallel with last year’s results, external networks remain relatively secure and internal networks fairly insecure. However, app security has increased mainly due to migration of in-house-developed applications to the cloud and by leveraging appropriately skilled resources.
Mike Weber, Coalfire Labs’ practice leader, will detail report findings and discuss the penetration testing methodology, analysis, and recommendations to mitigate commonly found vulnerabilities in retail organizations worldwide.
About the Speaker:
Mike Weber, VP - Innovation, Coalfire Labs
Mike oversees all Coalfire Labs operations, including penetration testing, application security assessments, compliance validation, digital forensics services, and incident response services. He has more than 20 years of experience in senior security positions in various technical fields, including enterprise security planning and policy development, network engineering, vulnerability assessment, risk assessment, penetration testing, system administration, and programming.