In direct deposit or payroll diversion scams, threat actors research the targeted organization and identify an employee to impersonate. They typically register a free email address using the employee’s name and utilizing display name spoofing in the messages.
The application window for high school, middle school, and elementary school summer internships will be open from April 24 - May 9, 2025. Please click on the links below for more information on each of the internships offered, including program dates and format.
For the first quarter of 2025, the NJCCIC received reports of increased cryptocurrency scams, primarily pig butchering schemes. In these fraudulent investment schemes, threat actors impersonate legitimate individuals or organizations to steal personally identifiable information...
Over the past several weeks, the NJCCIC received reports of unauthorized account access facilitated by phishing campaigns. While the targeted accounts varied, the images in this post originate from a campaign that aims to access users' Microsoft 365 accounts.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
Multiple vulnerabilities have been discovered in Oracle products, which could allow for remote code execution. It is recommended to apply appropriate patches or appropriate mitigations provided by Oracle to vulnerable systems immediately after appropriate testing.
Fortinet is aware of a technique employed by cyber threat actors to maintain read-only access to vulnerable FortiGate devices by creating a symbolic link connecting the user filesystem and the root filesystem in a folder used to serve language files for the SSL-VPN.
Threat actors can use phone numbers obtained from past data breaches and public records to randomly call or send messages claiming to be a member of a loan processing team and providing a loan offer that appears too good to be true. They may provide vague details...
The NJCCIC continues to receive reports of unauthorized access resulting from a failure in identity and access management or patch management, such as virtual private network (VPN) accounts without multi-factor authentication (MFA) implemented.
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Adobe Commerce is a composable ecommerce solution that lets you quickly create global, multi-brand B2C and B2B experiences.
