[Tech-l] FW: Message from the MS/EI-ISAC: CISA Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities - TLP:WHITE

Tue Mar 9 10:51:48 EST 2021

Good morning Superintendents and Technical Contacts.
Although most districts are using Google for district email, we would like to make contact with any district running an on-premise Exchange server.  If you are running an Exchange server inside the district, please see below and contact me directly so we can confirm that your systems have been patched.
Thank you,
Thor

Thor Sage
Executive Director
Miami Valley Educational Computer Association
937-767-1468  x3101
[http://www.mveca.org/images/logo.gif]<http://www.mveca.org/>       [i] <https://www.linkedin.com/company/mveca/> [t] <https://twitter.com/mvecarcog> [f] <https://www.facebook.com/MVECA-707401659416692/>
Not-for-profit Technology Services for Education and Local Governments

From: MS-ISAC Advisory <MS-ISAC.Advisory at msisac.org>
Sent: Monday, March 8, 2021 10:12 PM
To: Michael Aliperti <Michael.Aliperti at cisecurity.org>; Ben Spear <Ben.Spear at cisecurity.org>
Subject: Message from the MS/EI-ISAC: CISA Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities - TLP:WHITE
Importance: High

TLP: WHITE
TO: All MS-ISAC and EI-ISAC Members

DATE: March 8, 2021

SUBJECT: : (TLP:WHITE) Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) urges all organizations to immediately address recent critical vulnerabilities in Microsoft Exchange. The message below has been provided by CISA to be shared with all SLTT and Election Infrastructure members.

(TLP:WHITE)

Greetings state, local, tribal, and territorial partners,

CISA has released (TLP:WHITE) CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities<https://us-cert.cisa.gov/ncas/current-activity/2021/03/08/cisa-strongly-urges-all-organizations-immediately-address>. The Current Activity details that CISA has published a Remediating Microsoft Exchange Vulnerabilities<https://www.us-cert.cisa.gov/remediating-microsoft-exchange-vulnerabilities> web page that strongly urges all organizations to immediately address the recent Microsoft Exchange Server product vulnerabilities.

Exploitation of these vulnerabilities is widespread and indiscriminate.

CISA Recommendations:

·         follow the guidance laid out in the web page. The guidance provides specific steps for both leaders and IT security staff and is applicable for all sizes of organizations across all sectors

We kindly request any questions, feedback, or incidents related to these products be reported to CISA at Central at cisa.dhs.gov<mailto:Central at cisa.dhs.gov> or 888-282-0870.

V/R,

CyberLiaison

Cybersecurity Division

Cybersecurity and Infrastructure Security Agency

CyberLiaison_SLTT at cisa.dhs.gov<mailto:CyberLiaison_SLTT at cisa.dhs.gov>

(TLP:WHITE)

Please note that this message is marked TLP:WHITE. We encourage you to share it within your organization and with your partners

24×7 Security Operations Center
Multi-State Information Sharing and Analysis Center (MS-ISAC)
Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC)
31 Tech Valley Drive
East Greenbush, NY 12061
SOC at cisecurity.org<mailto:SOC at cisecurity.org> - 1-866-787-4722
[cid:image001.jpg at 01D40C67.01A3BDE0]
[cid:image002.png at 01D291DE.F838E090]<https://www.facebook.com/CenterforIntSec/>[cid:image003.png at 01D291DE.F838E090]<https://twitter.com/CISecurity/> [cid:image004.png at 01D291DE.F838E090] <https://www.youtube.com/user/TheCISecurity/>  [cid:image005.png at 01D291DE.F838E090] <https://www.linkedin.com/company/the-center-for-internet-security/>

TLP: WHITE
Disclosure is not limited. Subject to standard copyright rules, TLP: WHITE information may be distributed without restriction.
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.

. . . . .
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 4126 bytes
Desc: image001.jpg
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 1354 bytes
Desc: image002.png
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1474 bytes
Desc: image003.png
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 1338 bytes
Desc: image004.png
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 1395 bytes
Desc: image005.png
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.jpg
Type: image/jpeg
Size: 3184 bytes
Desc: image006.jpg
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.jpg
Type: image/jpeg
Size: 1229 bytes
Desc: image007.jpg
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.jpg
Type: image/jpeg
Size: 1197 bytes
Desc: image008.jpg
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.jpg
Type: image/jpeg
Size: 1194 bytes
Desc: image009.jpg
URL: <http://listserv.mveca.org/pipermail/tech-l/attachments/20210309/72265c8b/attachment-0004.jpg>