Webinar - On Demand

How AI broke the Pyramid of Pain

Join the latest webinar from Push Security Field CTO Mark Orlando unpacking the challenges facing analysts and incident responders in the AI era, and what’s needed to level the playing field.

Mark OrlandoField CTO

Got questions for John or Luke?

Agenda: How AI broke the Pyramid of Pain

David Bianco's Pyramid of Pain has shaped detection philosophy for over a decade. Its core logic is still sound: the higher up the Pyramid you detect, the harder you are to evade.

What's changed is the operational reality beneath it. AI has collapsed the practical value of the lower layers so fast that organizations still investing there are falling further behind every week.

Data from Push Security's threat hunting pipeline, which includes 15 million browser events per day across approximately one million deployments, makes this case.

Join Mark Orlando, Field CTO, to unpack the challenges facing analysts and incident responders in the AI era, and what’s needed to level the playing field.

Agenda: Why the Browser is the New Battleground

The browser is the new endpoint, and it's under attack. Attacks are happening entirely inside the browser sandbox, targeting applications directly over the internet, and blending in with legitimate web and network traffic, application access, and user activity. This is a significant challenge for security teams. Existing security tools can't get visibility of what's happening inside the browser. Attackers know this, and are ruthlessly exploiting the browser blindspot. This is fuelling a lot of attacker innovation, with new tools and techniques constantly emerging. Push Security VP R&D Luke Jennings is joined by John Hammond, Senior Principal Security Researcher at Huntress, to demonstrate the latest browser-based attack techniques. Ride along with Luke and John as they analyse real-world attacks, covering:

ConsentFix, the browser-native ClickFix attack linked to Russian APTs
Session-stealing, MFA-bypassing phishing campaigns targeting enterprises over LinkedIn and Google Ads
The latest social engineering tradecraft and detection evasion techniques
What the future of browser-based attacks looks like and what security teams can do about it

Luke JenningsVP Research

Got questions for John or Luke?

Trusted by: