A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution for the logged on user. Attackers could install programs; view, change, or delete data; or create new accounts.
A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for attackers to install programs; view, change, or delete data; or create new accounts with administrative user rights.
The NJCCIC’s email security solution detected a new LockBit campaign dubbed LockBit Black. This campaign was also reported to the NJCCIC via incident reports and observed by information-sharing and analysis centers. The emails in this campaign contain malicious ZIP attachments.
There have been attempts by Democratic People’s Republic of Korea (a.k.a. North Korea) Kimsuky cyber threat actors to exploit DNS Domain-based Message Authentication, Reporting and Conformance (DMARC) record policies to conceal social engineering attempts.
The FBI released this Private Industry Notification (PIN) to highlight cybercriminals using phishing and Short Message Service (SMS) phishing (SMiShing) against employees at US retail corporate offices in order to create fraudulent gift cards resulting in financial loss.
Organizations are vulnerable to cyberattacks as users connect to more technologies, systems, and networks. Employees are the first line of defense against cyberattacks, making them prime targets for threat actors attempting to exploit human weaknesses.
SocGholish, also known as FakeUpdates, has been a dominant cyber threat; however, Balada has recently been observed more frequently in attempted malware campaigns, performing reconnaissance and deploying malicious payloads.
The Cyber Army of Russia Reborn, a hacktivist group connected to the Russian government, is actively targeting Water and Wastewater facilities across the United States to break into Supervisory Control and Data Acquisition (SCADA) systems, which control water utilities.
Phishing attacks posing as popular delivery services are becoming more challenging to spot. Many of these scams begin with a text message or email , often claiming that a package cannot be delivered. They may use language, such as “final notice,” to scare users into acting immediately.
The NJCCIC previously reported on the ransomware attack against Change Healthcare, a large healthcare technology company. This cyberattack showcases the cascading ramifications of ransomware incidents, including financial impacts and risks of paying ransom demands.
