Public service

Intelligence Feed

TeliApp consolidates information from multiple cybersecurity threat intelligence feeds — commercial, open-source, and government — and publishes anything we believe is useful to the public right here. No login. No paywall. No tracking pixels.

Free for everyone.

• 
  Nov 10, 2026Vulnerability

  Adobe November Updates Address Critical Server and Creative-App Flaws

  Review patches for Adobe Connect, Experience Manager and creative tools. No exploitation is reported; Photoshop 2025 users need a supported newer release.

• 
  Nov 10, 2026AppleVulnerability

  Apple Updates Address Bluetooth, Messages and Memory-Safety Flaws

  Review Apple's November 9 security updates across supported devices. MS-ISAC reports no known exploitation as of November 10.

• 
  Nov 10, 2026Vulnerability

  Chrome Update Fixes Exploited XML Vulnerability

  Google reports exploitation of CVE-2026-125350. Update Chrome's Stable desktop channel and verify the installed version.

• 
  Nov 10, 2026Vulnerability

  Firefox and ESR Updates Fix High-Severity Security Flaws

  Update Firefox to 160 or the applicable ESR release, 153.7 or 115.45. MS-ISAC reports no known exploitation as of November 10.

• 
  Nov 10, 2026Vulnerability

  Fortinet Updates Address Multiple Product Vulnerabilities

  Review Fortinet's product-specific fixes. MS-ISAC reports no known exploitation at issuance; affected versions and attack conditions vary.

• 
  Nov 10, 2026Vulnerability

  Microsoft November Updates Address Exploited Outlook Flaw

  Prioritize the November security updates, including CVE-2026-124194 in Outlook. Microsoft confirms exploitation; opening a malicious file is required.

• 
  Nov 10, 2026Vulnerability

  SAP November Security Updates Address Critical Vulnerabilities

  Review SAP’s November patches for critical flaws across NetWeaver, Web Dispatcher, Gateway and other components. MS-ISAC reports no known exploitation as of November 10.

• 
  Nov 10, 2026VulnerabilitySecurity

  SonicOS Updates Address Authentication Bypass and Other Vulnerabilities

  Organizations using SonicWall Gen7 or Gen8 firewalls should review the latest SonicOS security advisory and prioritize the applicable updates.

• 
  Nov 5, 2026Critical InfrastructureSecurity

  Cyberattacks Target Commercial Refrigeration Systems in Europe

  In mid-October and again this week , commercial refrigerator and freezer systems - largely in Europe - were targeted in cyberattacks that caused temperatures in these units to sharply rise. This activity, while not entirely unprecedented, marks a pivotal expansion from recent targeting of industrial

• 
  Nov 5, 2026Critical InfrastructureSecurity

  Joint Fact Sheet Warns of Threats to Refrigeration Controllers Across Critical Infrastructure

  The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), US Department of Agriculture (USDA), and Department of Transportation (DOT) recently released a Joint Fact Sheet warning that malicious cyber actors are

• 
  Nov 5, 2026PhishingScams

  Phishing Campaign Impersonates ZoomInfo Personal Information Notices

  The NJCCIC has recently identified an email campaign impersonating ZoomInfo, a legitimate business intelligence platform. The message, presented as a "Personal Information Notice," resembles standard data privacy disclosures, such as GDPR or CCPA notices. It informs recipients that their professiona

• 
  Oct 30, 2026VulnerabilitySecurity

  Cisco Secure Firewall Vulnerability Could Allow Denial of Service

  A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (

• 
  Oct 30, 2026VulnerabilitySecurity

  GitLab Vulnerability Could Allow Remote Code Execution

  A vulnerability has been discovered in GitLab that could allow for remote code execution. GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collabo

• 
  Oct 29, 2026PhishingSecurity

  Newly Registered Domains Fuel Social Engineering Campaigns

  Threat actors often leverage newly registered domains (NRDs) in targeted social engineering campaigns. NRDs, typically defined as domain names registered within the previous 30 days, are deemed risky as they lack established historical reputation, threat intelligence telemetry, and domain categoriza

• 
  Oct 29, 2026PhishingScams

  Seasonal Phishing Campaigns Emerge Ahead of the Holidays

  The holidays are rapidly approaching, so seasonal phishing campaigns are already emerging. These campaigns exploit seasonal behaviors, increased message volumes, and heightened urgency. Cyber threat actors commonly target both consumers and organization employees by taking advantage of typical year-

• 
  Oct 29, 2026ScamsPhishing

  Tech Support Scam Impersonating Microsoft Targets Public Sector Organization

  Tech support scams are social engineering schemes in which threat actors impersonate technical support or customer service from well-known, trusted companies. The threat actors contact their targets to gain access to the target’s device, obtain sensitive data, such as account credentials or personal

• 
  Oct 28, 2026GoogleVulnerability

  Multiple Vulnerabilities in Google Chrome Could Allow Arbitrary Code Execution

  Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities c

• 
  Oct 27, 2026AppleVulnerability

  Multiple Vulnerabilities in Apple Products Could Allow Arbitrary Code Execution

  Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution.

• 
  Oct 27, 2026VulnerabilitySecurity

  Vulnerability in Brotli Library Could Allow Remote Code Execution

  A vulnerability has been discovered in the Brotli library that could allow for remote code execution. Brotli is a compression algorithm developed by Google and commonly used to compress web content be

• 
  Oct 26, 2026VulnerabilitySecurity

  CISA Updates Alert on Critical PHP “php2shell” Vulnerabilities

  The Cybersecurity and Infrastructure Security Agency (CISA) has published an updated alert to: (1) provide a SIGMA detection rule to help identify potentially suspicious activity; (2) incorporate partner resources; and (3) reinforce existing mitigation guidance. CISA strongly urges organizations to

• 
  Oct 22, 2026PhishingMalware

  Compromised Email Accounts Used to Send Fake Zoom Meeting Invitations

  Threat actors who compromise and take over legitimate email accounts can conduct further malicious activity. For example, they can send fake video teleconferencing (VTC) meeting invitations to impersonate popular platforms, such as Zoom, Google Meet, and Teams. These fraudulent invitations may promp

• 
  Oct 22, 2026PhishingScams

  Generic Phishing Emails Use Adobe PDF Pretext to Deliver Malicious Links

  The NJCCIC identified a phishing campaign that uses generic messaging to prompt recipients to act. The message does not identify the sender, the organization it purports to represent, or the purpose of the invitation. By keeping the content generic, attackers can distribute the same template to…

• 
  Oct 22, 2026RansomwareSecurity

  Ransomware Incidents Rise Across New Jersey Organizations

  The NJCCIC has recently received multiple reports of ransomware incidents affecting public and private organizations in New Jersey. The activity has been attributed to established ransomware operations, including Qilin, INC Ransom, and SafePay, as well as emerging groups such as Booba Project and Da

• 
  Oct 22, 2026ScamsPhishing

  Threat Actors Impersonate New Jersey Organizations to Redirect Payments

  In the past week, the NJCCIC observed an uptick in threat actors impersonating multiple New Jersey organizations to redirect legitimate payments and steal funds, resulting in significant financial losses. Threat actors leverage publicly available information to identify and target potential victims…