Harry Hoffman

We've received reports of threat actors impersonating multiple New Jersey local municipalities to steal sensitive data and funds and exploit public trust by using common phishing tactics to demand payments. Learn more; https://lnkd.in/e6Pu9WMi #cybersecurity #infosec #phishing #NJCCIC

9

New #NexusPodcast available this week with Gus Serino about a successful cybersecurity collaborative between six Massachusetts water and wastewater utilities. There's a lot of great work done here. You should listen: 🎧 https://hubs.li/Q047y1Hw0

1

🔒 October is Cybersecurity Awareness Month! 🔒 EOPSS and @MassEOTSS are working with partners across Massachusetts to strengthen cybersecurity and protect our communities from online threats. 🛡️💻 Stay cyber-smart: ✅ Use strong passwords ✅ Enable two-factor authentication ✅ Avoid suspicious links ✅ Keep software updated Cybersecurity starts with you. Stay smart. Stay secure.

3

Boston-area towns are being hit with more cyber threats – and many still rely on outdated systems and overworked staff 🛠️ Keep your services running: https://lnkd.in/eqsRS6_G #MunicipalIT #BostonGov #Cybersecurity

3

Shawn Murphy and Jeff Cassidy, CISSP explain how threat hunting fits into the “Left of Bang” strategy and mindset, a driving principle of WEI’s deep cybersecurity practice. @CyberTrust Massachusetts 💡 Listen to the full #podcast episode here: https://lnkd.in/eYGXQfmz

4

Join SVAM International Inc. at the Annual NYS Cybersecurity Conference on June 3-4 at the Empire State Plaza Convention Center in Albany, NY. Meet Kiran Bhujle and Cecil McMaster on June 3rd, 2025, for an in-depth session of NIST's Cybersecurity Framework (CSF) Version 2.0 - Session Title: NIST CSF 2.0 Decoded: Navigating the Evolution of Cybersecurity Risk Management - Date & Time: June 3rd, 2025. 11:00 – 11:50 a.m. This session will unpack the significant updates resulting from two years of extensive public engagement, including: - An overview of the CSF 2.0 Core and its structure - Detailed analysis of updates to existing Functions and Categories - Introduction of the new "Govern" Function, highlighting leadership’s role in cybersecurity - Expansion from five to six key Functions: Identify, Protect, Detect, Respond, Recover, and now Govern. If you're looking to future-proof your cybersecurity strategy and stay aligned with best practices, this is a must-attend session. We'll highlight how the new “Govern" Function emphasizes the critical role of leadership in cybersecurity management. This session is essential for organizations looking to align with the latest cybersecurity best practices and prepare for future challenges. #Cybersecurity #NISTCSF #CSF2 #LeadershipInSecurity #NYCCybersecurityConference #SVAMInternational #CyberRiskManagement #GovernFunction #SecurityFrameworks #CISOs #RiskAndCompliance NYS Office of Information Technology Services

44

1 Comment

🤖 𝐓𝐡𝐞 𝐍𝐞𝐰 𝐅𝐚𝐜𝐞 𝐨𝐟 𝐒𝐜𝐚𝐦𝐬: 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐧𝐠 & 𝐒𝐭𝐨𝐩𝐩𝐢𝐧𝐠 𝐀𝐈-𝐏𝐨𝐰𝐞𝐫𝐞𝐝 𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐢𝐧 𝐖𝐞𝐬𝐭𝐞𝐫𝐧 𝐌𝐚𝐬𝐬 By: The Staff of the Richard E Neal Cybersecurity Center of Excellence, Springfield, MA Today’s cyber threats are evolving fast—right here in Springfield and throughout Western Massachusetts. AI-powered social engineering is now one of the most dangerous trends facing families, businesses, and local government. But knowledge is power! In this article, learn how to spot, prevent, and fight back against digital scams fueled by artificial intelligence. 𝐖𝐡𝐚𝐭 𝐢𝐬 𝐀𝐈-𝐏𝐨𝐰𝐞𝐫𝐞𝐝 𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠? 🤔 Social engineering means manipulating people instead of hacking computers. With AI, scammers can create convincing fake emails, texts, voice calls—even videos—that look and sound legitimate. These tactics steal sensitive information, trick people into sending money, or help break into secure systems. 𝐇𝐨𝐰 𝐃𝐨 𝐘𝐨𝐮 𝐒𝐩𝐨𝐭 𝐭𝐡𝐞 𝐒𝐢𝐠𝐧𝐬? 🔍 𝐔𝐧𝐞𝐱𝐩𝐞𝐜𝐭𝐞𝐝 𝐑𝐞𝐪𝐮𝐞𝐬𝐭𝐬: Be very skeptical of messages or calls that create urgency (“𝑦𝑜𝑢𝑟 𝑎𝑐𝑐𝑜𝑢𝑛𝑡 𝑤𝑖𝑙𝑙 𝑐𝑙𝑜𝑠𝑒!” or “𝑦𝑜𝑢𝑟 𝑏𝑜𝑠𝑠 𝑛𝑒𝑒𝑑𝑠 𝑡ℎ𝑖𝑠 𝑟𝑖𝑔ℎ𝑡 𝑛𝑜𝑤!”). 𝐒𝐮𝐛𝐭𝐥𝐞 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥𝐢𝐳𝐚𝐭𝐢𝐨𝐧: AI can use basic details from social media or public sources—like your workplace, local team, or even your recent purchases—to sound trustworthy. 𝐔𝐧𝐮𝐬𝐮𝐚𝐥 𝐆𝐫𝐚𝐦𝐦𝐚𝐫 𝐨𝐫 𝐓𝐨𝐧𝐞: Some AI scams get the details right, but language may feel robotic or unfamiliar. 𝐑𝐞𝐪𝐮𝐞𝐬𝐭𝐬 𝐟𝐨𝐫 𝐒𝐞𝐧𝐬𝐢𝐭𝐢𝐯𝐞 𝐈𝐧𝐟𝐨: A call or email asking for passwords, Social Security numbers, or payment info should always be verified through another channel! 𝐏𝐫𝐞𝐯𝐞𝐧𝐭𝐢𝐨𝐧 & 𝐌𝐢𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧: 𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐚𝐥 𝐒𝐭𝐞𝐩𝐬 𝐟𝐨𝐫 𝐀𝐥𝐥 🛡️ Slow Down! Don’t respond immediately—scammers want you to act fast. 𝐕𝐞𝐫𝐢𝐟𝐲 𝐑𝐞𝐪𝐮𝐞𝐬𝐭𝐬: Use another communication method (phone, direct visit, official app/website) to confirm any urgent request. 𝐏𝐫𝐨𝐭𝐞𝐜𝐭 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐈𝐧𝐟𝐨: Be mindful of what’s shared online, especially on public profiles. 𝐌𝐮𝐥𝐭𝐢-𝐅𝐚𝐜𝐭𝐨𝐫 𝐀𝐮𝐭𝐡𝐞𝐧𝐭𝐢𝐜𝐚𝐭𝐢𝐨𝐧: Enable MFA to make accounts harder to steal. 𝐔𝐩𝐝𝐚𝐭𝐞 & 𝐄𝐝𝐮𝐜𝐚𝐭𝐞: Keep up-to-date security software on devices and talk with friends/family about new scam tactics. 𝐓𝐡𝐞 𝐍𝐞𝐚𝐥 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐞𝐧𝐭𝐞𝐫: 𝐇𝐞𝐫𝐞 𝐟𝐨𝐫 𝐖𝐞𝐬𝐭𝐞𝐫𝐧 𝐌𝐚𝐬𝐬 🚀 Our center at Union Station is dedicated to empowering residents, students, businesses, and local officials with training, hands-on simulation exercises, and community seminars. Together, we can outsmart tomorrow’s social engineers! #AIsecurity #SocialEngineering #CyberAwareness #SpringfieldCCE #WesternMass #CyberSafety #CommunityStrong 💪

2