October is Cybersecurity Awareness Month, an international initiative to educate people about online safety. The theme of this year’s Cybersecurity Awareness Month is Empowering You to Secure 2025 and Beyond. We are planning to host speakers showcasing a variety of security topics.

All sessions will be held in Aliso Hall 150 on Friday, October 3rd, 2025.

Event Schedule (15-minute break between events)

9:30–10:30 AM —  Exploring Cybersecurity Careers with Lessons from the Front Lines | James Villa — Senior Security Consultant, Mandiant 

10:45 AM–11:15 AM — Physical Security of Locks: Cybersecurity Starts at the Door | Loren Fleming and Carlos Miranda

11:30 AM–12:00 PM — InfoSecMap: The Global Nexus for Events & Communities | Martin Villalba — Founder, C13 Security

12:00–1:30 PM — Lunch Break

1:45 PM–2:15 PM — E-Sports Club Presentation | Christopher Hernandez (President) & Nicholas Hernandez (Event Coordinator)

Our Cybersecurity Awareness Month webpage will be regularly updated with more information.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

There has been a recent rise in the number of phishing attacks that incorporate a direct phone call with the target. This technique, known as Telephone-Oriented Attack Delivery (TOAD) often starts by sending the user a phishing email urging them to call a phone number. During the call, attackers pretend to be a legitimate customer service representative and attempt to trick their target into downloading malware or disclosing sensitive information. 

Follow these tips to not fall victim to a TOAD attack:

• Always verify contact information by cross-referencing the phone number or email address in the message with the official contact details listed on the organization’s website.
• Never share sensitive information over the phone, including passwords, PINs, or multi-factor authentication (MFA) codes.
• Be wary of urgent language; TOAD scammers use urgency or threats to push you into acting fast.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

Playing video games is a fun way to connect and interact with others online. However, the hobby does come with some security risks. Keep these tips in mind to keep your information safe.

1. Make sure the software you download comes from a reputable source. For example, a trusted storefront.

2. Use strong, unique passwords on all your accounts: If a threat actor gets control over one of your accounts, having unique passwords prevents them from getting into all your other accounts. Using a password manager makes the task of remembering all those unique passwords much simpler.

3. Enable Multi-factor Authentication if possible: This provides an additional layer of account security to ensure your information does not fall into the wrong hands.

4. Be wary of suspicious messages delivered to you over chat services. Never provide your account details to anyone.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

The holiday season is here, and so many deals are appearing online. Keeping your data secure is a must, so to stay safe with your online shopping check out these quick tips:

• Email Ads: The latest deals will start to appear in your inbox. Make sure the sender is who they say they are before clicking.
• Verify the Site: When trying to find that perfect gift, you never know what online shop you may stumble into. Before signing up and checking out your cart, make sure the store is legitimate and trusted by others.
• Securely Connect: It is always a good idea to double-check the website URL beginning with “https://” to better secure your information.
• Beware Scalped Goods: Don’t buy outside of a trusted retail seller to ensure you’re paying the right price for trendy items.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

In a recent cybersecurity triumph, the U.S. government successfully thwarted a sophisticated botnet linked to the People's Republic of China. This botnet was allegedly utilized to conceal hacking activities targeted at critical infrastructure, posing a potential threat to national security.

The nation-state hackers used comprised routers from Cisco, NetGear, and other routers that were vulnerable because they had reached “end of life” status; that is, they were no longer supported through their manufacturer’s security patches or other software updates.

The Department of Justice spearheaded a coordinated effort to dismantle the botnet, severing the connection between compromised devices and the central server. This strategic move neutralized an immediate threat and signaled the United States' commitment to defend against cyber threats.

Critical infrastructure, including power grids and communication networks, is increasingly vulnerable to cyber-attacks. The disruption of this botnet is a pivotal step in protecting these essential systems and attributing cyber-attacks to their perpetrators. The incident also emphasizes the need for international cooperation in addressing evolving cyber threats.

Your home network and EOL devices can lead to a cyber-attack. Ensuring devices are updated and replaced in a timely manner is crucial to protecting yourself from an attack like this. 

Source: https://www.justice.gov/opa/pr/us-government-disrupts-botnet-peoples-republic-china-used-conceal-hacking-critical

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

CSUCI Information Technology Services would like to bring attention to a great opportunity for students looking for scholarship opportunities in the field of Information Security.

Educating Future Information Security Professionals

The International Information System Security Certification Consortium (ISC2) and its Center for Cyber Safety and Education are deeply committed to encouraging and supporting students pursuing a degree focusing on cybersecurity, information assurance, or similar fields. The scholarships, sponsored by ISC2, support students globally. Efforts like these can lead students to long-term career success in a rewarding and critically important field. The scholarships are part of an effort to bridge the cybersecurity workforce gap—which stands at 3.4 million needed professionals—by providing future cybersecurity professionals across the globe with scholarships to prepare them for a rewarding career in this important field.  

Find more information about all the scholarships at https://www.iamcybersafe.org/s/scholarships.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

On Friday October 20, 2023, as part of Cybersecurity Awareness Month (CSAM) CSUCI had 4 members of L.A.’s F.B.I. Division on campus for a session about "Internships, Careers with the FBI". This session/webinar provided valuable insights into opportunities for individuals interested in working for the Federal Bureau of Investigation (FBI). The session covered the following key points:

1. Introduction to the FBI

An overview of the FBI's mission, which is to protect and defend the United States against terrorist and foreign intelligence threats, uphold and enforce the criminal laws of the United States, and provide leadership and criminal justice services to federal, state, municipal, and international partners.

2. Internship Programs

• The FBI offers a variety of internship programs for undergraduate and graduate students.
• Interns can gain experience in areas such as cybersecurity, intelligence analysis, criminal investigation, and more.
• These internships provide a valuable opportunity to work alongside experienced professionals and contribute to the FBI's mission.

3. Entry-Level Careers

• The FBI recruits individuals with diverse backgrounds and skills, including law enforcement, intelligence analysis, linguistics, computer science, and more.
• Special Agent positions were discussed, which require a rigorous application process, including background checks, physical fitness tests, and interviews.
• The webinar highlighted the need for candidates to meet certain requirements, such as U.S. citizenship and a minimum age of 23.

4. Career Development

• Participants were informed about the various career paths within the FBI, including leadership roles and specialized positions in fields like cybercrime, counterterrorism, and counterintelligence.
• Ongoing training and development opportunities were emphasized, showcasing the FBI's commitment to continuous growth and learning.

5. Application Process

• Detailed information on the application process for internships and careers was provided, including how to submit applications through the FBI's official website.
• The importance of thorough and accurate applications, as well as the significance of integrity in the selection process were highlighted.
  
  

6. Q&A Session

The session concluded with a question-and-answer session, where attendees could ask specific questions about the FBI's recruitment process, work culture, and opportunities.

In summary, the "Internships, Careers with the FBI" session served as a comprehensive introduction to the FBI's various programs and career paths. It aimed to educate and inform potential candidates about the opportunities available within the organization and the steps needed to pursue a career with the FBI.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

October is Cybersecurity Awareness Month (CSAM), and we have several webinars for this month all about cybersecurity. Join us on Oct. 26 from 11 a.m. to noon via Zoom.

We are lucky to be joined by CompTIA's Chief Technology Evangelist, Dr. James Stanger, who will present on "The Cybersecurity Professional Diaries: A Day in the Life". This webinar discusses the myriad of job roles in the world of cybersecurity. We will discuss various roles from SOC analyst, to pen tester, GRC/compliance specialist, auditor, and more. Please use your .edu email address to register for the event. 

We will also have a panel of several CSU CISOs: Carlos Miranda (CSUCI), Cuc Du (CSULB), and Chris Witthans (CSU Chico). We will give a lucky participant a CompTIA Sec+ Voucher and Educational training bundle (worth $1,000), so please be sure to use your .edu email address to register for the event.

For a complete list of Cybersecurity webinars hosted by CSU campuses, please visit CSU Cybersecurity Awareness 2023 Webinars.

CompTIA: "The Cybersecurity Professional Diaries: A Day in the Life" event link: 
https://csuci.zoom.us/webinar/register/WN_a4eDPiTbQvykAxtgM0FIJA#/registration

CSU Cybersecurity Awareness 2023 Webinars link:
https://www.calstate.edu/impact-of-the-csu/technology/pages/webinars.aspx

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

CSUCI ITS would like to bring attention to a great opportunity for a free exam voucher for an ISC2 exam of your choice (CISSP, CSSLP, CCSP, SSCP, CGRC, ISSAP, ISSEP, ISSMP).

ELIGIBILITY

• You do not need to be a United States citizen or reside in the United States. The scholarship is open to applicants globally. 
• Applicants must belong to a historically underrepresented minority in STEM – including but not limited to women, Black, Native American, Asian American & Pacific Islander, Hispanic, LGBTQIA+, neurodiverse, and persons with disabilities. 
• Must plan to sit for the exam within one year of receipt of the award. 
• Current ISC2 members and non-members are eligible to apply. 

WHAT YOU WILL NEED

• One Letter of Recommendation outlining the following:
• How long have you known the applicant and in what capacity? 
• What skills or abilities does the applicant have that will support them in achieving certification? 
• What other information about the applicant should be taken into consideration? 

• Resume/CV – No more than 4 pages maximum

• Answers to the following essay questions in 500 words or less
• What experience/s do you have that’s relevant to the cybersecurity field? What sets you apart from other applicants?
• Describe why you need the scholarship in order to achieve an ISC2 certification. 
• Describe your personal and educational backgrounds. 
• What makes you a candidate for success in information security and what are your goals for your professional career? How will the certification be a benefit to you? 
• Describe any contributions to the cybersecurity field i.e., volunteer work, articles, etc., and any other hobbies or extracurricular activities and what they mean to you.  
• Please tell us anything else you would like us to know about you in consideration of your application. 

SCORING CRITERIA

Applicants will be scored by members of the ISC2 and will be based on the following categories:

• Passion 25%
• Merit 25%
• Financial Need 50%

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

October 2023 marks the 20th Cybersecurity Awareness Month (CSAM).

The focus of this year’s CMAM is on four key behaviors:

1.    Turning on Multi-Factor Authentication (MFA). Having a strong password is not good enough; using MFA can increase your ability to prevent scammers from getting access to your accounts. MFA is available from Apple, Google, Microsoft, Instagram, LinkedIn, and other companies. To look for what companies offer MFA try using https://2fa.directory/us/  

2.    Using strong passwords and a password manager. It is difficult to remember different passwords for various applications, websites, and services, especially when they are complex. Having a good password manager can help keep your password organized.

3.    Updating software regularly. Your software on your phone, computer, and even your car needs regular updates. Not only do you get new features, but a lot of security fixes and enhancements are incorporated into the updates.

4.    Recognizing and reporting phishing. Take a moment and read the email. Who is the email address that sent the email? Never click on a link in the email; always go to the site by typing the address manually. For more tips on avoiding scams, the FTC has several more examples: https://consumer.ftc.gov/articles/how-avoid-scam.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

 Dear Ekho Tech Technology Partners, Supporters, and Advocates,

Did you know…. October is Cyber Security Month!

Please join the CSU & Cofense on a WEBINAR to explore the latest phishing scams and techniques. Learn how to identify attacks, why attackers are targeting higher education, and what you can do to protect your devices and data.  

Don’t miss out!  Learn more, and register for this special event today. 

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

October is National CyberSecurity Awareness Month!

In support of this annual cybersecurity event, ITS Information Security in concert with Professional Development will be hosting a webinar on Thursday, October, 22 from 10:00am – 11:00am titled “BeCyberSmart | Securing your “Smart” Home”. 

Follow this link for additional information about this event including how to sign up please.   We encourage you to share this awareness opportunity with all of your staff. 

Thank you

ITS Information Security

Celebrate CyberSecyruity Awareness Month.  Do Your Part, be #BeCyberSmart.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest