The NJCCIC observed an increase in phishing emails with human resources (HR)-related lures. These messages claim to distribute revised employee handbooks and ask recipients to confirm receipt by completing the acknowledgment form that is included in the attachment.
The NJCCIC observed a QR code phishing campaign targeting New Jersey State employees. Threat actors sent urgent messages claiming that the target’s mailbox would be deleted, without providing further instructions and leaving users with only the option to click the attachment.
The US-Israel military operations against Iran that commenced this past weekend represent a significant escalation in hostilities that carries substantial cyber risk for US public and private sector organizations. Iran has a demonstrated capability and willingness...
Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution. Android is an operating system developed by Google for mobile devices, including, but not limited to, smartphones, tablets, and watches. Successful exploitation...
This Malware Analysis Report (MAR) was originally published on March 28, 2025 to share indicators of compromise (IOCs) and detection signatures for RESURGE Malware. The Cybersecurity and Infrastructure Security Agency (CISA) has updated this MAR to provide deeper technical...
Multiple vulnerabilities have been discovered in Cisco Catalyst SD-WAN products, the most severe of which could allow for authentication bypass. Cisco Catalyst SD-WAN (formerly Viptela) is a secure, cloud-delivered software-defined WAN architecture that optimizes application...
The Federal Bureau of Investigation (FBI) released this FBI Liaison Alert System (FLASH) to disseminate indicators of compromise (IOCs) and technical details associated with malware enabled ATM jackpotting. Threat actors exploit physical and software vulnerabilities in ATMs.
CISA is holding a Securing Systems Training Awareness webinar, Defend Against Ransomware Attacks, on Friday, March 6 at 11:00 AM ET. This webinar includes the following information and more: Common attack methods: Learn the definition of ransomware, a summary...
Want to get hands-on experience at the NJCCIC? Our Summer program is a paid ($20/hr) internship opportunity for college and graduate students, conducted at our Hamilton, West Trenton, or Newark offices during standard business hours. The Summer internship will run for 12 weeks.
The FBI launched Operation Winter SHIELD, an initiative to promote the top 10 most impactful actions organizations can take to improve resilience against cyber intrusions. These recommendations were developed with domestic and international partners.
