Login
Cisco XDR is a leader in providing comprehensive threat detection and response across the entire attack surface. We’ll be showcasing new capabilities that will give security teams even more insight, a… Read more on Cisco Blogs
Join the guided tour outside the Security Operations Center, where we’ll discuss real time network traffic of the RSA Conference, as seen in the NetWitness platform. Engineers will be using Cisco S… Read more on Cisco Blogs
We have come a long way from making our first sourdough starter batch to exploring new hobbies — or in my case exhausting the Netflix library! We have craved human connection and insightful conversations. It was just over two years ago that we were together at the RSA Conference in San Francisco promising the next leap in cybersecurity with Cisco’s introduction of SecureX.
And soon, the cybersecurity world finally comes together again at two mega-events this year: RSA Conference and Cisco Live 2022. As you start planning your RSAC and Cisco Live 2022 experiences, we invite you to explore the progress we have made in offering radically simple security with a platform approach that is transformative to the industry and for our customers. Since it became generally available in June 2020, we have continued to add both capabilities and out-of-box integrations that unlock the full potential of our security portfolio. At both events, you’ll find Cisco SecureX is front and center again with exciting innovations built on our initial promise of providing simplicity and automation without compromising visibility and security efficacy.
Join us on Monday, June 6, to hear Jeetu Patel, EVP, and GM of Cisco Security and Collaboration, and Shailaja Shankar, Senior Vice President, and General Manager of Cisco Security Business Group speak on the topic of “What Do We Owe One Another in the Cybersecurity Ecosystem?”
Key highlights to explore:
| Topic | Date | Time (20 mins) |
| Level up your SOC strategy with security automation | 6/6/22 | 5:30 PM |
| Operationalizing Network Behavior Analytics | 6/7/22 | 10:30 AM |
| Extended Detection with Cisco SecureX | 3:30 PM | |
| Prioritizing Risk to Maximize Security Resilience | 5:30 PM | |
| Level up your SOC strategy with security automation | 6/8/22 | 2:30 PM |
| Prioritizing Risk to Maximize Security Resilience | 3:00 PM | |
| Beyond XDR with Cisco SecureX | 6/9/22 | 11:30 AM |
Check out the ‘Cisco Week at a Glance’ to see what we have to offer throughout the week, onsite in Las Vegas. Here are some highlights you won’t want to miss:
Ben Greenbaum, Product manager of Cisco SecureX with over 20 years of experience in SecOps products talks about ‘SecureX All The Things (With Hosted and Remote Relays)-BRKSEC-1483’.
Distinguished Engineer Aaron Woland‘s session lets you in on his secret to saving time with extended visibility ‘Save Countless Hours with SecureX’s Latest Feature: Device Insights- BRKSEC-2754’.
Come geek out with Matt Vander Horst, our resident orchestration and automation expert at the DevNet zone or/and crash his in-depth 4-hour lab session titled ‘SecureX Orchestration hands-on Crash Course- TRSEC-2103’.
In addition, SecureX experts like Aditya Sankar talk about how to unlock value for Firewall customers in his session ‘SecureX and Secure Firewall Better Together-BRKSEC-2201’.
Matthew Robertson, Principal engineer for XDR products discusses cross-product uses cases with ‘Building Network Security Policy Through Data Intelligence- BRKSEC-2267’.
And much more:
| Breakout Sessions (45 Minutes) | Date | Time (EST) |
| BRKSEC-2834 – Cisco’s Unified Agent: Cisco Secure Client. Bringing AMP, AnyConnect, Orbital & Umbrella together | 6/15/22 | 2:30 PM |
| BRKSEC-2754 – Save Countless Hours with SecureX’s Latest Feature: Device Insights | 6/14/22 | 10:30 AM |
| BRKSEC-2201 – SecureX and Secure Firewall Better Together | 6/14/22 | 10:30 AM |
| BRKSEC-2101 – Malware Execution as A Service: a Deep Dive into CSMA Advanced File Analysis | 6/13/22 | 9:30 AM |
| BRKSEC-1483 – SecureX All the Things (With Hosted and Remote Relays) | 6/16/22 | 8:00 AM |
| BRKSEC-2267 – Building Network Security Policy Through Data Intelligence | 6/14/22 | 2:30 PM |
| BRKSEC-3019 – Visibility, Detection and Response with Cisco Secure Network Analytics | 6/15/22 | 4:00 PM |
| BRKMER-2003 – Meraki & Secure Network and Cloud Analytics: Threat Detection for the Rest of Us | 6/16/22 | 9:30 AM |
| Instructor Led Lab (4 Hours) | ||
| LTRSEC-2103 – SecureX Orchestration hands-on crash Course | 6/15/22 | 8:00 AM |
| DevNet | ||
| DEVLIT-1553 – Webhooks in SecureX orchestration (Lightning Talk – 15 Minutes) | 6/14/22 | 3:00 PM |
| DEVWKS-2190 – Getting started with SecureX orchestration workflows and atomics (Workshop – 45 Minutes) | 6/14/22 | 10:00 AM |
| DEVWKS-2190 – Getting started with SecureX orchestration workflows and atomics (Workshop – 45 Minutes) | 6/16/22 | 10:00 AM |
| DEVNET-1083 – Security Automation: Developing with SecureX (Theater – 45 Minutes) | 6/14/22 | 1:00 PM |
| SecureX – DevNet Takeover Booth | 6/14/22 | All day |
| Digital | ||
| HOLSEC-2001.a – Crash Course: Automating with SecureX Orchestration (4 Hours) | 6/23/22 | 8:00 AM |
| HOLSEC-2001.b – Crash Course: Automating with SecureX Orchestration (4 Hours) | 6/29/22 | 7:00 AM |
We’re so excited to be on this journey with our customers and partners. For a live demo and exploration of the latest SecureX features, visit us at our booth at RSA Conference 2022 and World of solutions at Cisco Live 2022. We look forward to seeing many of you in person.
We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!
Cisco Secure Social Channels
Instagram
Facebook
Twitter
LinkedIn
Video conferencing has really taken off this year. With more people working and learning from home than ever before, video calling has rapidly become the mainstream method for remote communication, allowing users to stay connected. But very few may realize that they might be giving away their passwords on video calls through their body language. According to Tom’s Guide, call participants can guess a user’s passwords through the arm and shoulder movements they make while they type.
Let’s unpack how this threat works so you can continue to connect via video calls worry-free.
Keyboard snooping, or a keyboard interference threat, occurs when an attacker is present on a video call and observes the target’s body and physiological features to infer what they are typing. To pull off this attack, the hacker would need to record the meeting or video stream and feed it through a computer program. This program eliminates the visual background and measures the user’s arm and shoulder movements relative to their face. From there, the program analyzes the user’s actions to guess which keys they are hitting on the keyboard – including passwords and other sensitive information.
So, how accurate is this program, anyway? While this shows that the program was only correct 20% of the time when subjects were on their own devices in an uncontrolled environment, the program’s accuracy increased to 75% if their password was one of the one million most commonly used passwords. And suppose the program already knew their email address or name. In that case, it could decipher when the target was typing this information during the video call (and when their password would immediately follow) 90% of the time. The less complex the target makes their password, the easier it is for the program to guess what they’re typing.
Keystroke inference attacks can have potentially dangerous effects, since the text typed can often contain sensitive or private information even beyond passwords, like credit card numbers, authentication codes, and physical addresses. It’s also important to note that any video conferencing tool or videos obtained from public video sharing/streaming platforms are susceptible to this attack.
Therefore, to prevent your meeting attendees from snooping on what you’re typing, follow these tips for greater peace-of-mind:
Avoid giving keyboard snoopers the upper hand by making your password or passphrase as unique as the information it’s protecting. If a hacker does manage to guess your password for one of your online accounts, they will likely check for repeat credentials across multiple sites. By using different passwords or passphrases for your online accounts, you can remain calm and collected knowing that the majority of your data is secure if one of your accounts becomes vulnerable.
Two or multi-factor authentication provides an extra layer of security, as it requires multiple forms of verification like texting or emailing a secure code to verify your identity. Most popular online sites like Gmail, Dropbox, LinkedIn, Facebook, etc. offer multi-factor authentication, and it takes just a few minutes to set it up. This reduces the risk of successful impersonation by criminals who may have uncovered your information by keyboard snooping.
Take your security to the next level with a password manager, like the one included in McAfee Total Protection. A password manager can help you create strong passwords, remove the hassle of remembering numerous passwords, and log you on to websites automatically.
To stay updated on all things McAfee and on top of the latest consumer and mobile security threats, follow @McAfee_Home on Twitter, listen to our podcast Hackable?, and ‘Like’ us on Facebook.
The post How to Prevent Keyboard Snooping Attacks on Video Calls appeared first on McAfee Blogs.
FreshRSS 