The Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing & Analysis Center (MS-ISAC) are releasing this Joint White Paper to raise awareness of cyber threat actors (CTAs) activity targeting vendor accounts within vendor portals belonging to US state, local, tribal...
Over the last several years, there has been a recent increase in video teleconferencing (VTC) hijacking incidents, specifically "Zoom Bombing." These incidents involve unwanted individuals accessing a VTC meeting, sharing inappropriate or hateful content, etc.
Credential harvesting remains a constant threat to digital security. As more services find their way online, a deluge of passwords is needed to keep up with different services used daily, leading to insecure password practices, including password reuse, simple passwords...
Over the last several months, security researchers have observed threat actors targeting Microsoft 365 (M365) accounts in phishing campaigns that bypass security controls. The technique allows threat actors to spoof internal M365 users and deliver emails using Microsoft Exchange...
Cyber threat actors are exploiting previously disclosed vulnerabilities in Cisco Identity Service Engine (ISE) and Cisco ISE Passive Identity Connector. CVE-2025-20281 (CVSSv3 10/10) and CVE-2025-20337 (CVSSv3 10/10) were first disclosed in June, and reports of exploitation began around...
In June, the NJCCIC reported on an SMS phishing (SMiShing) scam where threat actors impersonated the New Jersey Department of Labor. We recently received reports of a new phishing scam imitating the NJ DOL and claiming to be an urgent message regarding the target's unemployment...
Russian nation-state cyber actors remain among the most persistent, capable, and strategically aligned threats in the global cyber landscape. Their operations routinely target Western governments, critical infrastructure, defense contractors, and political institutions.
The Cybersecurity and Infrastructure Security Agency (CISA) released an updated Alert to reflect newly released information from Microsoft, and to correct the actively exploited Common Vulnerabilities and Exposures (CVEs), which have been confirmed as CVE-2025-49706.
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
This Joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed...
