Blog

Blog

• Fake CAPTCHA Malware Campaigns March 21, 2025
  The NJCCIC’s email security solution identified a fake CAPTCHA malware campaign sent to New Jersey State employees in an attempt to deliver the SectopRAT infostealer. The emails contain links directing targets to malicious or compromised websites and prompting deceptive CAPTCHA verification challenges. In the background, the visited website copies a command to the target’s clipboard. […]
  blogmirnet
• Register for the NIST NCCoE IoT Onboarding Open House Event! March 21, 2025
  REGISTRATION OPEN | Trusted IoT Onboarding Open House Event Date/Time: April 17, 2025 | 8:30 a.m. – 4:00 p.m.  Location: NCCoE at 9700 Great Seneca Highway, Rockville, MD 20850 The NIST National Cybersecurity Center of Excellence (NCCoE) invites you to join us for our in-person Open House Event to discuss trusted IoT Onboarding! Untrusted provisioning […]
  blogmirnet
• A Vulnerability in Veeam Backup & Replication Could Allow for Arbitrary Code Execution – PATCH NOW March 21, 2025
  A vulnerability has been discovered in Veeam Backup & Replication, which could allow for arbitrary code execution. Veeam Backup & Replication is a comprehensive data protection and disaster recovery solution. With Veeam Backup & Replication, you can create image-level backups of virtual, physical and cloud machines and restore from them. Exploitation of this vulnerability requires […]
  blogmirnet
• Microsoft 365 Copilot Training for IT March 18, 2025
  Join us at Microsoft 365 Copilot Training for IT to learn how to use Microsoft Copilot to simplify your everyday tasks. During this free event, discover how Copilot can help you enhance efficiency, simplify complex tasks, and optimize technical workflows. You’ll be able to: Use Copilot to summarize the information in a product spec document […]
  blogmirnet
• Draft CSF 2.0 Quick Start Guide: Cybersecurity, ERM & Workforce Development March 14, 2025
  Draft Released Today for Public Comment— NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick Start Guide The Initial Public Draft (IPD) of NIST Special Publication 1308, NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick Start Guide is now published! This document shows how the Workforce Framework for […]
  blogmirnet
• Multiple Vulnerabilities in Google Android OSCould Allow for Remote Code Execution March 14, 2025
  Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution with no additional execution privileges needed. Android is an operating system developed by Google for mobile devices, including, but not limited to, smartphones, tablets, and watches. Successful exploitation of the most severe of these vulnerabilities […]
  blogmirnet
• Wire Transfer Fraud for Real Estate Transactions March 14, 2025
  Threat actors can perform reconnaissance by searching for and weaponizing publicly disclosed data and using a variety of impersonation techniques to convince their target that they are known and trusted parties involved in real estate transactions, including attorneys, real estate agents, brokers, title agencies, escrow services, mortgage companies, third-party vendors, buyers, and sellers. To appear […]
  blogmirnet
• Browser Extensions and Malicious Downloads Install Infostealers March 14, 2025
  Cybercriminals use information-stealing malware, also known as infostealers, to gather data about users, their devices, and their networks. This information can include personal information, account information like online passwords, and other sensitive data. Infostealers are installed on victim devices in several ways, such as malicious browser extensions and downloads. Users download browser extensions for a […]
  blogmirnet
• Root certificate will expire on 14 March — users need to update Firefox to prevent add-on breakage March 13, 2025
  On 14 March a root certificate (the resource used to prove an add-on was approved by Mozilla) will expire, meaning Firefox users on versions older than 128 (or ESR 115) will not be able to use their add-ons. We want developers to be aware of this in case some of your users are on older versions of […]
  blogmirnet
• Apple just released an emergency security update for a flaw- update your devices right now March 12, 2025
  Apple has patched its third zero-day flaw of the year with a new emergency security update for iPhones, iPads, Macs and its other devices. An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in vision OS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1. Maliciously crafted […]
  blogmirnet