Issue 26 June 1st 2024

Welcome

Hello and Welcome!

We hope that your 2024 is going fantastic!

To help boost the GREATNESS, be sure to attend our meetings. Lots of good information there.

Be sure to register for our June 2024 meeting from our site ISC2CT.org

Also join our new ISC2CT Discord Server

Upcoming events:

Zero Trust Meet & Expo Hartford June 20th & 21st

Hartford Cyber Security Summit June 25th

Thank you to our Sponsors

Visit Quinnipiac University

Cyber News

93% of vulnerabilities unanalyzed by NVD since February | TechTarget

VulnCheck published a report titled 'The Real Danger of NVD Backlog' following recent disruptions to vulnerability analysis.

YouTube Becomes Latest Battlefront for Phishing, Deepfakes

Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.

9 Tips to Avoid Burnout in Cybersecurity

When security professionals are at the end of their rope — feeling both mentally and physically exhausted — it's often because of burnout. Here are ways to combat it.

RansomLord: Open-source anti-ransomware exploit tool - Help Net Security

RansomLord is an open-source tool that automates the creation of PE files, which are used to exploit ransomware pre-encryption. "I created RansomLord to

Truecaller Unveils AI Call Scanner to Detect AI-Generated Voice Scams

Three seconds! That’s how much of your voice an AI voice synthesizer needs to generate a complete clone of your voice. Illegitimate voice cloning and speech synthesis technologies are improving at an incalculable rate of change and are, unfortunately, already commoditized and ubiquitous. This next wave of AI scams will prey on the most vulnerable side of our psyche: the threat of our loved ones in danger.

Data shows workers are using AI on the sly

A Microsoft and LinkedIn report found that companies haven’t caught up with employee generative AI usage.

Japan To Launch Active Cyber Defense System To Prevent Cyber Attacks

Japan is creating a consultative body to implement an active cyber defense system, which aims to improve their ability to counter

Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’

Super fund boss and Google Cloud global CEO issue joint statement apologising for ‘extremely frustrating and disappointing’ outage

Unveiling the Privacy Implications of ChatGPT

Safeguarding Your Data in the Age of Conversational AI

Mystery malware destroys 600,000 routers from a single ISP during 72-hour span

An unknown threat actor with equally unknown motives forces ISP to replace routers.

OpenAI has stopped five attempts to misuse its AI for 'deceptive activity'

Sam Altman-led OpenAI said on Thursday it had disrupted five covert influence operations that sought to use its artificial intelligence models for "deceptive activity" across the internet. The artificial intelligence firm said the threat actors used its AI models to generate short comments, longer articles in a range of languages, made up names and bios for social media accounts over the last three months.

NIST Launches ARIA, a New Program to Advance Sociotechnical Testing and Evaluation for AI

Assessing Risks and Impacts of AI (ARIA) aims to help organizations and individuals determine whether a given AI technology will be valid, reliable, safe, secure, private and fair once deployed.