Trust in Government (Websites) Over the last several weeks, the NJCCIC has observed an increase in typosquat domains impersonating New Jersey State government agencies. Typosquatting, or domain impersonation, occurs when threat actors register a domain name that visually resembles a trusted organization's official website. These websites are used by cybercriminals to trick users into providing [...]
A vulnerability has been discovered in Apple products. Successful exploitation of the vulnerability could allow for arbitrary code execution. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights [...]
October is Cybersecurity Month, a time to bring the importance of cyber safety to the forefront in your workplace and at home. Whether it is learning how to not to "take the bait" from phishing scams, tightening up your passwords, making sure to do all those pesky updates, or just getting rid of old devices [...]
NJCCIC ADVISORY: Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA)—hereafter referred to as the authoring agencies—published this Fact Sheet to highlight considerations for critical infrastructure entities to reduce risk and minimize vulnerabilities when working with third-party industrial control system (ICS) [...]
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution TLP: CLEAR September 8, 2026 This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist agencies, organizations, and individuals in guarding against the persistent malicious actions of cybercriminals. NOTE: In an effort to reduce duplicate emails, if you currently receive cybersecurity advisories direct [...]
The Rise of Device Code Phishing Companies, such as Microsoft, Google, and Apple, offer device login codes through a legitimate OAuth 2.0 Device Authorization Grant that is designed for devices with limited input capabilities, like TVs, printers, and game consoles. For example, if a user wants to log in to a streaming app on a new Smart [...]
The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and U.S. Department of Health and Human Services (HHS) have released an updated joint advisory to disseminate known Medusa ransomware tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) identified through FBI investigations as recently as April 2026. Medusa is a ransomware-as-a-service [...]
A vulnerability has been discovered in Zoom Clients. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and install malware. Threat Intelligence There are currently [...]
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; [...]
Beware of Threat Actors Targeting IT Help Desk Staff Information technology (IT) help desk staff are heavily targeted because they often possess privileged administrative rights and provide an entry point for account recovery, such as resetting passwords and bypassing multi-factor authentication (MFA). To identify high-value targets, threat actors perform reconnaissance on corporate websites, networking platforms [...]
© Copyright 2026 | NJ MEL-JIF | All rights reserved
