Welcome
Welcome
Hello and Welcome!
Be sure to attend our monthly meetings. Lots of good information there. Register for our Thursday December 4th Virtual Meeting on our site ISC2CT.org
Also come Join our (ISC)2 Connecticut Chapter Discord Server
Upcoming events:
CISO Forum Virtual Summit | November 12th, 2025 | Free to Attend the Virtual Summit The CISO Forum Virtual Summit will take place online in SecurityWeek’s Virtual Conference Center, where attendees can immerse in a virtual environment to discuss the latest cybersecurity trends and gain insights into security strategies and emerging cyber threats faced by businesses. Through a cutting-edge platform, attendees can interact with speakers and sponsors, and visit networking lounges, specific zones & sponsor booths. Registration for the virtual summit is free and open to business users. All sessions are available to view free on demand. Registration
NEACS - The NorthEast Annual Cybersecurity Summit | Thursday, November 13th 2025 | Quinnipiac University, North Haven, CT Succinct presentations will focus on topics that give cyber leaders immediately actionable insights. Moderated discussion will follow each topic, with streamlined talking points to maximize audience take-aways. Agenda focus: The intersection of academics and enterprise for cybersecurity leadersCyber industry trends with respect to vendors, investment, product sprawl for 2026 planning. Case studies from law enforcement agencies, focusing on recent trends. The convergence of fraud prevention/risk management and cybersecurity Zero Trust, what it means in the context of risk strategy vs products & services Agenda and Registration Link
Upcoming Training:
NII Certified AI Security Practitioner v2.0 (CAISP v2.0) Training Workshop | November 3rd - 6th, 2025 Online 16 CPE Credits | USD 199 (Regular participant) USD 159 (ISC2 members) We’re excited to announce our upcoming updated program, Certified AI Security Practitioner v2.0 (CAISP v2.0) training, a deep dive into AI/ML cybersecurity with enhanced focus on LLMs, secure MLOps, and emerging AI risks. Certified AI Security Practitioner v2.0 (CAISP v2.0) training, builds on the foundation by diving deeper into technical, practical, and hands-on aspects of AI/ML security. It introduces advanced topics such as adversarial testing, secure MLOps, agentic AI, jailbreak attacks, and governance standards (ISO 42001, NIST AI RMF, OWASP LLM Top 10). With more case studies, and real-world simulations, participants gain practical skills in testing, securing, and governing AI/ML systems in enterprise environments Registration
NII ISO 42001 Lead Auditor Training (Exemplar Global, USA Certified) | November 17th - 19th 2025 8AM-3PM EST Online 21 CPE Credits | Regular Participant - USD 799 | ISC2 Member/Clients -USD 699 | Early Bird Discount (registering before 15 Oct 2025)- USD 575 The course intends to equip participants with the skills and knowledge required to understand how an AIMS is implemented based on Annex B of ISO/IEC 42001:2023, lead Artificial Intelligence audits effectively, ensuring compliance with ISO 42001:2023. It will cover audit planning, execution, and reporting while emphasizing risk management, governance, and continual improvement Registration
Thank you to our Sponsors
Quinnipiac University is committed to helping advance the field of cybersecurity through its School of Computing & Engineering. To support the growth of professionals within cybersecurity and computing, Quinnipiac offers flexible online and on-campus opportunities that deliver practical skills you can immediately apply on the job. Both its MS in Cybersecurity and MS in Computer Science programs feature hands-on experience in lab settings that simulate real-world scenarios. To learn more about these exciting opportunities, Visit Quinnipiac University ...
ISC2CT
Cyber News
Why You Should Swap Passwords for Passphrases
Passphrases boost security and usability by prioritizing length over complexity, aligning with NIST guidance.
thehackernews.com
CISA and partners take action as Microsoft Exchange security risks mount
CISA and NSA warn of WSUS and Exchange attacks, urging immediate patching and zero trust adoption.
helpnetsecurity.com
The US refuses to sign UN’s cybercrime treaty
The United States declined to sign the United Nations’ Convention against Cybercrime in Hanoi this weekend, stating that it continues to review the treaty.
cybernews.com
ChatGPT Atlas Vulnerability Turns AI Browser Into Weapon
Research reveals a security flaw that can turn OpenAI’s newly launched ChatGPT Atlas browser into an attack vector against its own users.
eweek.com
Windows LNK File UI Misrepresentation Enables Remote Code Execution Attacks
Windows LNK file - A critical Windows shortcut vulnerability is enabling advanced persistent threat actors to execute covert malware.
cyberpress.org
LotL Attack Hides Malware in Windows Native AI Stack
Security programs trust AI data files, but they shouldn't: they can conceal malware more stealthily than most file types.
darkreading.com
Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline
The smart vacuum cleaner was remotely bricked for not collecting data.
tomshardware.com
Malicious NPM Packages Disguised With 'Invisible' Dependencies
In the "PhantomRaven" campaign, threat actors published 126 malicious npm packages that have flown under the radar, while collecting 86,000 downloads.
darkreading.com