Issue 24 April 2nd 2024

Welcome

Welcome Chapter

Hello and Welcome!

We hope that your 2024 is starting off fantastic.

To help boost the GREATNESS, be sure to attend our meetings. Lots of good information there.

Be sure to register for our April 2024 meeting from our site ISC2CT.org

Also join our new ISC2CT Discord Server

Upcoming events:

SANS AI Cybersecurity Forum: Insights from the Front Lines April 25th Free Virtual Forum

APISEC The API Security Conference May 22nd Free to Attend Virtually

Hartford Cyber Security Summit June 25th

Cyber News

Biggest Cybersecurity Threats for Modern Enterprises in 2024

A multi-layered approach to cybersecurity is required to protect organizations from evolving threats. Awareness programs and training create a security culture.

AT&T confirms data for 73 million customers leaked on hacker forum

AT&T has finally confirmed it is impacted by a data breach affecting 73 million current and former customers after initially denying the leaked data originated from them.

Shadow AI is the latest cybersecurity threat you need to prepare for - Help Net Security

Shadow AI includes AI products and platforms used within your organization without department knowledge, posing risks.

Millions of Hotel Rooms Worldwide Vulnerable to Door Lock Exploit

Hotel locks have been vulnerable to cyber compromise for decades and are extending their run into the digital age.

Malicious AI: The Rise of Dark LLMs

Threat Indicators Show 2024 Is Already Promising to be Worse Than 2023

In just the first two months of 2024, threat intelligence firm Flashpoint has logged dramatic increases in all major cyber threat indicators.

Massively Popular Safe Locks Have Secret Backdoor Codes

Senator Ron Wyden has found that the DoD banned the use of such locks for U.S. government systems, but deliberately kept information about the backdoors from the public.

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

Secret backdoor found in XZ Utils compression library used by major Linux distros, like Fedora, Kali Linux, and openSUSE.

Tycoon 2FA, the popular phishing kit built to bypass Microsoft and Gmail security protections, just got a major upgrade — and it’s now even harder to detect

Phishing attacks powered by the Tycoon 2FA service are now harder for security products to detect after developers released a large, stealth-oriented update to the phishing kit

Exploring the Threat Landscape of Adversarial AI with MITRE ATLAS - SOCRadar® Cyber Intelligence Inc.

Recognizing the imperative need to shield these intelligent systems from adversarial threats, MITRE ATLAS emerges as a pivotal resource...

Chinese snoops exploit F5, ConnectWise bugs to sell access

Crew may well be working under contract for Beijing