10/09/2026
⚠️ CYBERSECURITY ALERT: LAW ENFORCEMENT & GOVERNMENT EMAIL SYSTEMS TARGETED
The FBI, CISA, NSA, and international partners have issued a joint warning about Chinese government-linked cyber actors targeting government agencies, law-enforcement organizations, critical infrastructure, and other sensitive networks.
These attackers have been observed:
🔑 Spraying stolen or guessed passwords across Microsoft 365 and Exchange accounts
📧 Accessing and stealing emails, calendars, contacts, and credentials
🖥️ Exploiting outdated internet-facing software
🌐 Installing unauthorized VPN software to maintain hidden access
⚠️ Attempting to obtain elevated control of Active Directory environments
This warning does not mean a local agency or North Carolina organization has been confirmed compromised. It does mean every organization—and anyone responsible for sensitive accounts—should take the threat seriously.
What you should do now:
✅ Enable multifactor authentication wherever possible
✅ Use strong, unique passwords for every account
✅ Review recent account activity for unfamiliar devices, locations, or login attempts
✅ Keep operating systems, websites, servers, and security appliances updated
✅ Disable unused remote-access services and internet-facing management pages
✅ Immediately report unexpected MFA prompts, password-reset messages, or unusual email activity
✅ Have your IT provider review Microsoft 365, Exchange, VPN, and administrator logs
Old vulnerabilities do not become harmless simply because they are old. Attackers actively search for forgotten systems that were never updated, replaced, or properly secured.
There is no need to panic—but this is an excellent time to verify that your digital doors are actually locked.
🔗 Official joint advisory:
https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a
Skeleton Key Investigations Inc.
Awareness is the first layer of protection.