This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist agencies and organizations in guarding against the persistent malicious actions of cybercriminals. watchTowr released proof of concept code and a demo publicly for...
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for privilege escalation. Successful exploitation of the most severe of these vulnerabilities could allow a user to elevate privileges. Depending on the privileges associated with the user...
A vulnerability has been discovered in F5 Products that could allow for remote code execution. F5 BIG‑IP APM is an access policy management solution designed to enforce secure access to applications, APIs, and sensitive data. It is commonly deployed by enterprises, financial...
Multiple Vulnerabilities have been discovered in NetScaler ADC and NetScaler Gateway, the most severe of which could allow for memory overread. Successful exploitation of these vulnerabilities could lead to memory overread of potentially sensitive data from the appliance...
Elementary, Middle, and High School Summer Internship Programs. The NJCCIC is happy to announce that the application window for the following summer internship programs are now open. Please see the program webpages for more details, dates, requirements, and how to apply.
The NJCCIC observed multiple phishing campaigns aimed at financial gain. In one campaign, users receive a phishing email impersonating American Express that claims a large amount of earned reward points are about to expire. The messages include a URL that directs to a fake...
The Federal Bureau of Investigation (FBI) released this FBI Liaison Alert System (FLASH) to disseminate information on malicious cyber activity conducted by actors on behalf of the Government of Iran Ministry of Intelligence and Security (MOIS). Specifically, MOIS cyber actors are...
The NJCCIC continues to receive reports of compromised accounts of public and private sector New Jersey organizations resulting from compromised credentials and phishing emails. Consequently, the NJCCIC also observed an uptick in fraudulent wire transfers from...
Following the February 28 US–Israeli strikes on Iranian infrastructure, Iran‑aligned and pro‑Palestinian hacktivist groups rapidly increased operations. The activity is high-volume, opportunistic, and propaganda‑driven, but poses real risk.
