Scattered Spider threat actors have been known to use various ransomware variants in data extortion attacks, most recently including DragonForce ransomware. While Scattered Spider often changes tactics, techniques, and procedures (TTPs) to remain undetected.
A Vulnerability has been discovered in Google Chrome which could allow for arbitrary code execution. Successful exploitation of the the vulnerability could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user...
Cyber threat actors are exploiting previously disclosed vulnerabilities in Cisco Identity Service Engine (ISE) and Cisco ISE Passive Identity Connector. CVE-2025-20281 (CVSSv3 10/10) and CVE-2025-20337 (CVSSv3 10/10) were first disclosed in June, and reports of exploitation began around...
In June, the NJCCIC reported on an SMS phishing (SMiShing) scam where threat actors impersonated the New Jersey Department of Labor. We recently received reports of a new phishing scam imitating the NJ DOL and claiming to be an urgent message regarding the target's unemployment...
Russian nation-state cyber actors remain among the most persistent, capable, and strategically aligned threats in the global cyber landscape. Their operations routinely target Western governments, critical infrastructure, defense contractors, and political institutions.
The Cybersecurity and Infrastructure Security Agency (CISA) released an updated Alert to reflect newly released information from Microsoft, and to correct the actively exploited Common Vulnerabilities and Exposures (CVEs), which have been confirmed as CVE-2025-49706.
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
This Joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed...
Multiple Vulnerabilities have been discovered in Microsoft SharePoint Server, which could allow for remote code execution. Microsoft SharePoint Server is a web-based collaborative platform that integrates with Microsoft Office. Successful exploitation of these vulnerabilities
The NJCCIC observed a new iteration of ClickFix leading to the download of a recently discovered infostealer, MonsterV2. This infostealer can grab cryptocurrency wallets, account credentials, personally identifiable information such as Social Security numbers, and browser information.
