Upper Saddle River Police

3 days ago

Sparrowbush Road will be closed to eastbound traffic at Briarcliff Road until 2:00 PM. Please follow posted detour ... See MoreSee Less

Upper Saddle River Police

4 weeks ago

Traffic Alert!
Due to the recent storm, there are multiple road closures throughout the Borough. Sparrowbush Road, Plymouth Drive, and Knollwood Road are currently closed. Please use alternative routes. ... See MoreSee Less

Upper Saddle River Police

2 months ago

This is an important traffic advisory from the Upper Saddle River Police Department:

The annual USR Thanksgiving Day 5K Run will take place on Thursday, November 27th 2025. For the safety and security of all participants, the following roadways will be closed from 8:30am until approximately 9:45am.

• West Saddle River Road between Lake St and Old Stone Church Road.

• Old Stone Church Road entire length

• East Saddle River Road between Old Stone Church Road and Lake St.

• Lake St from East Saddle River Rd to West Saddle River Rd

If you live on one of the above noted streets or any side street along the race route it is recommended that you plan accordingly. If you should need any assistance please feel free to contact the Upper Saddle River Police Dispatch Center at 201-327-2700. ... See MoreSee Less

Upper Saddle River Police

2 months ago

Attention USR Residents,
Plymouth Drive is now RE-OPENED ... See MoreSee Less

Upper Saddle River Police

2 months ago

Attention all USR residents!!!
Plymouth Dr will be closed until further notice. Please plan a alternate route. ... See MoreSee Less

Upper Saddle River Police

2 months ago

FOUND CAT

If any resident is missing a Calico Cat with a predominantly white face, please contact the Upper Saddle River Police Department at 201-327-2700. The cat was found in the vicinity of Lake Street and Spring Street. ... See MoreSee Less

Upper Saddle River Police

3 months ago

The Upper Saddle River Police Department would like to extend our sincere thanks to all the residents of the Cider Hill area for your cooperation and community spirit in helping make this Halloween safe, enjoyable, and memorable for our families.

If you took photos with any of our officers during the festivities, we’d love to see them! Please share your pictures by sending them to mspina@usrpd.net.

Thank you for helping us keep the tradition alive and our community connected! ... See MoreSee Less

Upper Saddle River Police

3 months ago

On National First Responders Day, the Upper Saddle River Police Department proudly recognizes and thanks our dedicated partners in Fire, Rescue, and EMS. Your commitment and teamwork make our community stronger and safer. We are honored to serve beside you. ... See MoreSee Less

Upper Saddle River Police

3 months ago

STORM ALERT: AS NOR’EASTER INTENSIFIES THROUGHOUT THE HUDSON VALLEY, ORANGE AND ROCKLAND UTILITIES CREWS ARE READY TO RESPOND


PEARL RIVER, NY, October 12, 2025, 12:00 p.m. – Orange and Rockland Utilities, Inc. (O&R) has mobilized its emergency response workforce and is ready respond to any potential power outages that may occur from the nor’easter impacting the service territory.

Throughout the course of the afternoon and evening, the storm is expected to strengthen, bringing wind gusts up to 45 m.p.h. and rain accumulations of over one inch. Rainfall is expected to be heaviest during the night, and the strongest wind gusts are expected to linger through early tomorrow afternoon.

In addition to O&R’s emergency response team, the company has secured 100 mutual aid workers.

For the latest information about power outages, please view the Outage Map. For a brief video that provides a step-by-step guide to the Outage Map’s basic operation:
In English
In Spanish

O&R Warns
For safety’s sake, O&R warns the public not to touch or approach any downed wire. Assume the wire is energized and dangerous. Call O&R immediately toll-free 1-877-434-4100. Depending on the situation, you may also consider calling your local police to divert traffic from the downed wire’s location until an O&R crew arrives.

How to Report an Outage
If you experience a power outage, don’t assume that O&R automatically knows about it. You can report it and check to see when your lights will be back on through:
Report an Electric Service Problem | Orange & Rockland (oru.com) from any computer or web-based mobile device.
O&R mobile app from your iPhone, iPad or Android device --- download via Apple Store or Google Play.
Text messaging by texting “OUT” to 678797 (ORUPWR) or
Call 1-877-434-4100

Restoring Service
Once the weather clears enough to safely assess damage and begin electric service restoration, O&R crews will give priority to clearing downed wires blocking roads and making repairs to critical and emergency facilities (police and fire stations, and hospitals, for example) and to those locations where the repair will provide power to the largest number of customers as quickly as possible. Then, crews will restore smaller outages and individual customers’ outages.

Important Safety Tips
• For safety’s sake, don’t touch or approach any downed wire. Assume it is energized and dangerous. Call O&R immediately toll-free 1-877-434-4100. Depending on the situation, you may also want to call your local police to divert traffic until an O&R crew arrives.

• Maintain a distance of at least 50 feet from downed wires and anything they are in contact with including puddles of water and fences. Supervise your children so that they are not in the vicinity and keep pets on a leash or otherwise secure.

• If a fallen wire is draped over a car, do not approach the car to make rescue attempts. Remain a safe distance away and try to keep the occupant of the vehicle calm. If possible, emergency personnel should handle the situation.

• Pole-top transformers --- those small, grey-colored metal drums attached to the wires at the tops of most utility poles --- also should be avoided when they have been knocked to the ground.

• Portable generators pose a serious hazard if used improperly. They should be used and installed according to the manufacturer’s instructions. A wrong connection could feed electricity back through the lines and endanger our repair crews. Never plug a generator into a wall unit, use it indoors or set it up outdoors near open home windows or air-handling vents.

• Have emergency equipment within reach --- portable radio, flashlights, spare batteries, first aid kit, cell phone and important medications. Keep O&R’s toll-free number 1-877-434-4100 near the phone to report power outages.

• Remember: if the base station of your cordless phone plugs into the wall, your phone will be unusable during a power outage.

How To Prepare Your EV for A Power Outage
Just as is the case with traditional gasoline vehicles, you need to ensure your electric car is fueled up in the event there is a power outage that lasts longer than expected.

Guidance is to always keep your EV charged between 75-90% in case of an emergency.
While EVs don’t need a gas station, they do need to be charged up, which is easily done at home.

All EVs come with a plug and adapter that are compatible with the outlets in your garage or outside your house. Furthermore, there are Level 2 chargers available for your home. These charge your vehicle at a higher rate than a regular outlet because they use 220 volts, just like what a clothes dryer uses.

Can’t charge at home? Take your vehicle to a publicly accessible Level 2 or DCFC Fast Charger. ... See MoreSee Less

Upper Saddle River Police

4 months ago

Uptick in Fraudulent Unemployment Insurance Claims

The NJCCIC received reports of an uptick in fraudulent New Jersey Department of Labor and Workforce Development Unemployment Insurance (UI) claims, primarily targeting public sector education employees who are still employed. The availability of employee information posted on official websites or social media platforms, combined with personally identifiable information (PII) exposed in past data breaches or sold on the dark web, enables threat actors to apply for and collect UI benefits illegally.

Victims may not be aware that fraudulent UI benefits applications are being attempted under their name until they try to apply for UI benefits and are denied or rejected because a claim has already been filed under their name, or they receive a determination letter indicating that an application has been received under their name, but they did not apply for UI benefits. Additionally, a current or former employer may notify the victim that a claim has been submitted with their PII.

Recommendations

• Reduce your digital footprint so threat actors cannot easily target you.
• If PII compromise is suspected or detected, contact your local law enforcement department and review the Identity Theft and Compromised PII NJCCIC Informational Report for additional recommendations and resources.
• Suspected unemployment insurance fraud can be reported to the New Jersey Department of Labor and Workforce Development via their Report Fraud online form or by phone at 609-777-4304.
• Report malicious cyber activity to the NJCCIC, the FBI's IC3, and the FTC.
.

Phishing Campaign Impersonates Social Security Administration

The NJCCIC identified a phishing campaign impersonating the Social Security Administration. The email notifies the user that their "Social Security Statement" is available online and instructs them to click the included link to access the statement.

This link leads to a webpage, hxxp://getssafile[.]help/sxa/, that displays stolen Social Security Administration branding and instructs users to download an executable file to view instructions.

The executable attempts to download a remote monitoring and management tool, which cyber threat actors can use to gain unauthorized access and take control over systems to install additional malware, access sensitive information, deploy ransomware, and more. Known, trusted organizations are often impersonated by cyber threat actors in social engineering schemes to convince users to take actions that enable the threat actor's ultimate goals.

Recommendations

• Verify communications before clicking links delivered in emails. Government communications will be sent from official email accounts, and the included links will direct users to government websites.
• Log in to official account websites or apps to access documents or statements.
• Do not download files from unofficial or unverified sources.
• Run an updated, reputable anti-malware program on all devices.
• Report suspected phishing communications to the impersonated agency, the NJCCIC, and the FBI's IC3.
.

Calendaromatic Malware

The NJCCIC received reports of the Calendaromatic malware affecting multiple New Jersey public sector organizations, including local and county government entities. Calendaromatic malware is a potentially unwanted application (PUA) primarily targeting entities in the United States. It is disguised as a benign calendar desktop application designed to manage holiday schedules. Threat actors behind the Calendaromatic malware employ an aggressive and sophisticated online advertising campaign, leveraging NeutralinoJS, Unicode homoglyphs, and hidden payloads to evade detection, gain initial access, maintain persistence, and exfiltrate data.

Threat actors target potential victims with Calendaromatic malware by luring them to third-party websites with advanced holiday planning tools. The “calendaromatic” executable file is a 7z self-extracting archive setup file. Although it is signed with a valid digital certificate by CROWN SKY LLC, the certificate has since been revoked. If extracted and installed, the victims grant the seemingly benign calendar tool permission to interact directly with the operating system. The malware establishes a hidden command and control (C2) channel within Unicode holiday names and executes covert operations against the host operating system. The app’s “clean()” function checks for look-alike characters to tidy up holiday data, reads and decodes secret instructions, and executes commands on the host.

Artificial intelligence (AI) accelerated the investigation and forensic process by parsing the obfuscated JavaScript and highlighting anomalous code sequences for Unicode character mapping. The AI tools traced the “clean()” function logic and revealed how the malware parsed and executed instructions embedded within holiday data.

Recommendations

• Exercise caution when downloading and installing unfamiliar or untrusted applications from web searches.
• Refrain from installing unsigned or unverified software.
• Reset passwords on any compromised hosts, including credentials stored in browsers.
• Keep systems, browsers, and anti-virus/anti-malware software up to date with PUA detection enabled.
• Restore affected systems from backup or perform a complete operating system reinstallation.
• Review the GuidePoint Security blog post for technical information and indicators of compromise (IOCs).
• Report malicious cyber activity to the NJCCIC and the FBI's IC3.
.

These Emails Are Best Left in Quarantine

The NJCCIC has observed a phishing campaign posing as an automated notification about quarantined emails. Many companies employ email security protection, which often includes a quarantine feature that holds potentially risky emails for user review.

If a user clicks on one of the provided links, a CAPTCHA page will load, requiring the user to verify before they can proceed. These pages are often utilized in phishing scams because they can prevent email security systems from detecting the malicious nature of the emails.

Once verified, a page that appears to be a legitimate Microsoft login page loads; however, the URL is a warning sign that this is not a genuine Microsoft page. Any credentials entered will be harvested through synchronous relay capabilities, a technique known as an Adversary-in-the-Middle (AiTM) attack. Associated session cookies will also be collected. Researchers have discovered that the threat actor behind this campaign is using the ODx Phishing-as-a-Service (PhaaS) kit, also tracked as Storm-1167.

Finally, the target will receive a request for approval from the Microsoft Authenticator. Although the request may seem legitimate, approving it will grant the threat actors access to the target’s account.

Recommendations

• Avoid clicking links and opening attachments in unsolicited emails.
• Confirm requests from senders via contact information obtained from verified and official sources.
• Users should only submit account credentials on official websites.
• Maintain robust and up-to-date endpoint detection tools on every endpoint.
• Consider leveraging behavior-based detection tools rather than signature-based tools.
• If you suspect an account has been compromised, change the account's password immediately and add a secondary authentication method.
• Report other malicious cyber activity to the NJCCIC and the FBI's IC3.
Announcements

CISA Strengthens Commitment to SLTT Governments

NIST: Guidelines for Media Sanitization

NIST: Recommendation for Random Bit Generator (RBG) Constructions

Check Point: The Manufacturing Security Report 2025

INTERPOL: 260 Suspected Scammers Arrested in Pan-African Cybercrime Operation

Threat and Vulnerability Advisories

MS-ISAC Advisories

CISA Cybersecurity Alerts & Advisories

CISA Known Exploited Vulnerabilities Catalog

CISA Secure by Design Alerts

CISA Shields UP

Breach Notifications

Allianz Life Insurance Company
Allianz Life Insurance Company disclosed a data breach impacting approximately 1.4 million customers, financial professionals, and select Allianz Life employees. The security incident that occured on July 16 was limited to a third-party cloud-based customer relationship management (CRM) system. The breach was contained and mitigated. Stolen personal information includes names, addresses, dates of birth, and Social Security numbers. Allianz Life notified impacted individuals and provided two years of free identity theft and credit monitoring services. The NJCCIC recommends that affected individuals review the Compromised PII and Identity Theft NJCCIC Informational Report.

Motility Software Solutions
Motility Software Solutions, a provider of dealer management software (DMS), detected unusual activity within specific computer servers supporting business operations around August 19. An unauthorized threat actor deployed malware that encrypted some systems, restricting access to internal data. Approximately 766,000 customers may have had their information exposed, including full name, portal address, email address, telephone number, date of birth, Social Security number, and driver’s license number. Motility is providing one year of free identity monitoring services to impacted individuals. The NJCCIC recommends that affected individuals review the Compromised PII and Identity Theft NJCCIC Informational Report.

.

. ... See MoreSee Less