A vulnerability has been discovered in Zoom Clients. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and install malware. Threat Intelligence There are currently [...]
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; [...]
Beware of Threat Actors Targeting IT Help Desk Staff Information technology (IT) help desk staff are heavily targeted because they often possess privileged administrative rights and provide an entry point for account recovery, such as resetting passwords and bypassing multi-factor authentication (MFA). To identify high-value targets, threat actors perform reconnaissance on corporate websites, networking platforms [...]
The NJCCIC observed a phishing campaign impersonating UPS delivery notifications. These messages use subject lines such as “Parcel Arrival Notification,” “Your Package Is Ready for Pickup,” and “Your Parcel Has Arrived” and are purported to be from the following sender(s): "UPS Parcel Services" <contact[@]shipfasts[.]com> "UPS Delivery Support" <contact[@]learnstax[.]com> Messages include an Adobe PDF attachment that [...]
NJ.com is reporting that at least two New Jersey water systems were hit by cyberattacks similar to those reported in several other states in recent days, officials said Monday. The New Jersey Office of Homeland Security and Preparedness said the incidents affected some automated controls, but did not cause any interruption in service. The attack temporarily limited operators’ ability [...]
The NJCCIC observed a recent uptick in threat actors targeting New Jersey critical infrastructure and public sector organizations, including local municipalities, school districts, and police departments. Threat actors send phishing emails with links intended to capture account credentials and compromise accounts, and then send additional phishing emails from legitimate accounts to avoid suspicion and keep [...]
Organizations Beware: Requests for Assistance Prompting Malicious Zoom Extension Downloads Public and private sector organizations post available services on their websites and online platforms. They may also provide referrals and offer an online search feature to find local assistance. Threat actors exploit this feature to send supposed requests for assistance and trick their targets into [...]
Nationwide Zoning and Planning Scam Targeting SLTT Residents and Businesses The Federal Bureau of Investigation (FBI) and the Center for Internet Security (CIS) Cyber Threat Intelligence (CTI) team are publishing this product to provide updates to State, Local, Tribal, and Territorial government entities (SLTTs) about a scam in which threat actors masquerade as local and [...]
The NJCCIC has observed a phishing campaign claiming recipients have been selected to enter a giveaway for a prize tied to the FIFA World Cup. This type of free-prize-at-the-cost-of-a-shipping-fee scam tricks users into providing their credit card details to an attacker. The messages claim the offer expires on the day of receipt, and the subject [...]
On Friday, June 26, the Everbridge mass emergency notification system experienced an outage due to a distributed denial-of-service (DDOS) attack, which lasted overnight until June 27. Additionally, on June 28 the US National Weather Service was targeted in a DDOS attack that cause an outage of a few hours. Responsibility for both incidents were claimed [...]
© Copyright 2026 | NJ MEL-JIF | All rights reserved
