CLTCC Cybersecurity Program

What a New AI Executive Order Means for Government Cybersecurity (and Your Local Bank)

If you’ve been watching the news lately, you’ve probably noticed that artificial intelligence (AI) is no longer just a tool for writing emails or generating fun images. It is becoming the backbone of national security. Recently, President Trump signed a major Executive Order (EO) focused entirely on securing artificial intelligence. This week, the Cybersecurity and Infrastructure Security Agency (CISA)—the federal agency essentially tasked with being America's neighborhood watch for the internet—announced it is fast-tracking its implementation of these new rules....

What a New AI Executive Order Means for Government Cybersecurity (and Your Local Bank) If you’ve been watching the news lately, you’ve probably noticed that artificial intelligence (AI) is no longer just a tool for writing emails or generating fun images. It is becoming the backbone …

Why employees resisT IT updates

The Modernization Dilemma While enterprise leadership focuses on technical merit, efficiency, and competitive survival, employees judge systems based on familiarity, reliability, and daily routine support. Familiarity as an Economic Asset Organizations routinely underestimate the deep baseline value of user habits. Over years of operational repetition, employees build heavy muscle memory and institutional shortcuts around existing legacy interfaces. "Familiarity is a form of competence......

cltcccybersecurity.wordpress.com

People are the best defense

In the world of cybersecurity, we often talk about "silver bullets"—the next big firewall, the AI-powered scanner, or the unhackable encryption. But as I tell my students on day one: Tech is a tool, but people are the perimeter. I recently came across a compelling piece by A. Stryker on Dark Reading that hits this nail on the head. The core message?...

People are the best defense In the world of cybersecurity, we often talk about “silver bullets”—the next big firewall, the AI-powered scanner, or the unhackable encryption. But as I tell my students on day one: Te…

Security Brief: Malicious Notifications and Prompt Injections

Security Brief: Malicious Notifications and Prompt Injections in Google Gemini Cybersecurity researchers have identified a critical structural vulnerability involving Google Gemini for Workspace. Attackers can leverage indirect prompt injection to trick the AI assistant into generating unauthorized actions, displaying fake security alerts, or creating rogue data channels without requiring direct exploitation of system permissions or software code. How the Vulnerability Works…...

Security Brief: Malicious Notifications and Prompt Injections Security Brief: Malicious Notifications and Prompt Injections in Google Gemini Cybersecurity researchers have identified a critical structural vulnerability involving Google Gemini for Workspace. A…

How to Stop AI “People Pleasing”: The One Question for Better Results

In the world of cybersecurity and digital strategy, we often talk about stress-testing. We don't just ask if a system works; we try to break it to find the hidden vulnerabilities. When you use AI tools like ChatGPT or Claude, they often suffer from a built-in bias called sycophancy. Because they are trained to be helpful and polite, they tend to agree with your ideas—even if those ideas are flawed....

How to Stop AI “People Pleasing”: The One Question for Better Results In the world of cybersecurity and digital strategy, we often talk about stress-testing. We don’t just ask if a system works; we try to break it to find the hidden vulnerabilities. When you us…

The AI Social Engineering Threat Is Already Here.

Are Your Clients Ready? Five years ago, cybersecurity training was relatively straightforward: teach employees to look for poorly written emails, suspicious sender addresses, and obvious typos. Today, that playbook is obsolete. Cybercriminals are now leveraging advanced Artificial Intelligence to launch highly sophisticated, targeted attacks against businesses of all sizes. As a cybersecurity instructor, I see firsthand how rapidly this threat landscape is evolving....

The AI Social Engineering Threat Is Already Here. Are Your Clients Ready? Five years ago, cybersecurity training was relatively straightforward: teach employees to look for poorly written emails, suspicious sender addresses, and obvious typos. Tod…

Cybersecurity Alert: The “Code of Conduct” Phishing Trap

In the world of cybersecurity, scammers often weaponize professionalism and urgency to bypass our natural defenses. This week, we are highlighting a sophisticated phishing campaign that uses an "official" HR or compliance notification to steal employee credentials. How the Scam Works The attack begins with an email designed to look like an internal communication from your organization’s management or compliance department....

Cybersecurity Alert: The “Code of Conduct” Phishing Trap In the world of cybersecurity, scammers often weaponize professionalism and urgency to bypass our natural defenses. This week, we are highlighting a sophisticated phishing campaign that uses an & #8…

Can a Picture Hack an AI? Understanding Cisco’s New Security Discovery

As we integrate Artificial Intelligence into our daily lives, we often think of "hacking" as someone typing lines of code or sending a fishy email. However, recent research from Cisco has revealed a much more subtle threat: Typographic Prompt Injection. In the world of AI, many models don't just read text; they "see" images. These are called Vision Language Models (VLMs)....

Can a Picture Hack an AI? Understanding Cisco’s New Security Discovery As we integrate Artificial Intelligence into our daily lives, we often think of “hacking” as someone typing lines of code or sending a fishy email. However, recent research from Cisco h…

The “Helpful” Hacker: Why Your Biggest Security Risk Might Be a Friendly Chat

As a cybersecurity instructor at our college, I’m sharing this post to help our community stay safe from a growing trend in digital fraud. We often think of hackers as people who "break" into systems using code, but some of the most dangerous attacks happen simply by "talking" their way in. In the world of cybersecurity, we have a term for manipulating people into giving up secrets: …...

The “Helpful” Hacker: Why Your Biggest Security Risk Might Be a Friendly Chat As a cybersecurity instructor at our college, I’m sharing this post to help our community stay safe from a growing trend in digital fraud. We often think of hackers as people who “break& #8221…

Scam of the Week: The “Emergency” Purchase Alert

The Anatomy of the Attack In this week's featured threat, cybercriminals are distributing sophisticated phishing emails designed to exploit Apple users through artificial urgency. The message typically arrives with a subject line similar to "Your Apple Account information has been updated." The body of the email claims that an unauthorized purchase—frequently a high-ticket item like an iPhone—has been charged to your account....

Scam of the Week: The “Emergency” Purchase Alert The Anatomy of the Attack In this week’s featured threat, cybercriminals are distributing sophisticated phishing emails designed to exploit Apple users through artificial urgency. The message…