The NJCCIC received reports of a business email compromise (BEC) campaign circulating using a compromised emergency management email account. The phishing email referenced a contract and directed the recipient to click a link to view a related document.
First discovered in 2022, XWorm malware is a remote access trojan (RAT) capable of evading detection and collecting sensitive information, including financial details, browsing history, saved passwords, and cryptocurrency wallet data. XWorm tracks keystrokes, captures webcam...
This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist agencies, organizations, and individuals in guarding against the persistent malicious actions of cybercriminals. Multiple vulnerabilities have been discovered...
Stark Aerospace, a US missile systems and aerial weapons manufacturer based in Mississippi, was targeted by the INC Ransom group. The group claims to have exfiltrated 4TB of sensitive data, including source code, design plans, employee passports, etc.
UnitedHealth Group (UHG) reported that last year's breach of its technology subsidiary, Change Healthcare, affected 190 million people— double the initial estimate following the cyberattack on February 21, 2024. This incident is the largest healthcare data breach in history.
New Jersey high school students in grades 9 through 12 are invited to register for our first annual Garden State Capture the Flag (CTF) competition! The competition starts with an online CTF running from February 24-28. The top-performing teams will then compete in the finals.
Last week, the NJCCIC reported increased phishing attempts targeting NJ state employees by impersonating the IRS. Proofpoint analysts noted a rise in tax-themed phishing campaigns, particularly as tax deadlines approach in the US and the UK.
Multiple vulnerabilities have been discovered in SimpleHelp RMM that could allow for arbitrary code execution. SimpleHelp is a popular remote access software. Successful exploitation of the most severe of these vulnerabilities when chained together could allow for...
Data Privacy Week (January 27-31) is an annual campaign to spread awareness about online privacy and empower users and organizations to respect privacy, safeguard data, and enable trust. A user’s online activity generates a wealth of data that websites and companies can collect.
This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist agencies, organizations, and individuals in guarding against the persistent malicious actions of cybercriminals. Multiple vulnerabilities have been discovered in Apple...
