<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxxxmsonormal, li.xxxxxmsonormal, div.xxxxxmsonormal
{mso-style-name:x_xxxxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xmsoplaintext, li.xmsoplaintext, div.xmsoplaintext
{mso-style-name:x_msoplaintext;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:#1F4E79;}
p.xxxmsonormal, li.xxxmsonormal, div.xxxmsonormal
{mso-style-name:x_xxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxxxxmsonormal, li.xxxxxxmsonormal, div.xxxxxxmsonormal
{mso-style-name:x_xxxxxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxxmsonormal, li.xxxxmsonormal, div.xxxxmsonormal
{mso-style-name:x_xxxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxmsoplaintext, li.xxxmsoplaintext, div.xxxmsoplaintext
{mso-style-name:x_xxmsoplaintext;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:#1F4E79;}
p.xxxxxxxxmsonormal, li.xxxxxxxxmsonormal, div.xxxxxxxxmsonormal
{mso-style-name:x_xxxxxxxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxxxxxmsonormal, li.xxxxxxxmsonormal, div.xxxxxxxmsonormal
{mso-style-name:x_xxxxxxmsonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Arial",sans-serif;
color:windowtext;}
span.EmailStyle28
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1542664236;
mso-list-template-ids:1851538790;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1953975761;
mso-list-template-ids:917535032;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Good morning Superintendents and Technical Contacts.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Although most districts are using Google for district email, we would like to make contact with any district running an on-premise Exchange server. If you are running an Exchange server inside the district,
please see below and contact me directly so we can confirm that your systems have been patched.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Thor Sage<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Executive Director<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Miami Valley Educational Computer Association<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">937-767-1468 x3101<o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://www.mveca.org/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="174" height="64" style="width:1.8125in;height:.6666in" id="_x0000_i1033" src="cid:image006.jpg@01D714D2.33656650" alt="http://www.mveca.org/images/logo.gif"></span></a><span style="color:#1F497D">
</span><a href="https://www.linkedin.com/company/mveca/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1032" src="cid:image007.jpg@01D714D2.33656650" alt="i"></span></a><a href="https://twitter.com/mvecarcog"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1031" src="cid:image008.jpg@01D714D2.33656650" alt="t"></span></a><a href="https://www.facebook.com/MVECA-707401659416692/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1030" src="cid:image009.jpg@01D714D2.33656650" alt="f"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="color:#1F497D">Not-for-profit Technology Services for Education and Local Governments<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> MS-ISAC Advisory <MS-ISAC.Advisory@msisac.org> <br>
<b>Sent:</b> Monday, March 8, 2021 10:12 PM<br>
<b>To:</b> Michael Aliperti <Michael.Aliperti@cisecurity.org>; Ben Spear <Ben.Spear@cisecurity.org><br>
<b>Subject:</b> Message from the MS/EI-ISAC: CISA Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities - TLP:WHITE<br>
<b>Importance:</b> High<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial",sans-serif">TLP: WHITE</span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">TO: All MS-ISAC and EI-ISAC Members</span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">DATE: March 8, 2021</span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">SUBJECT: </span>
</b><span style="font-family:"Times New Roman",serif">: <b>(TLP:WHITE) Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities</b></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">The Cybersecurity and Infrastructure Security Agency (CISA) urges all organizations to immediately address recent critical vulnerabilities in Microsoft Exchange. The message below has been provided
by CISA to be shared with all SLTT and Election Infrastructure members.</span><o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="xxxxxxxxmsonormal"><b><span style="font-family:"Times New Roman",serif">(TLP:WHITE)</span></b><o:p></o:p></p>
<p class="xxxmsoplaintext"><span style="font-family:"Times New Roman",serif;color:windowtext"> </span><o:p></o:p></p>
<p class="xxxmsoplaintext"><span style="font-family:"Times New Roman",serif;color:windowtext">Greetings state, local, tribal, and territorial partners,</span><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif;color:black;background:white">CISA has released (TLP:WHITE)
<b><a href="https://us-cert.cisa.gov/ncas/current-activity/2021/03/08/cisa-strongly-urges-all-organizations-immediately-address">CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities</a>.
</b>The Current Activity details that CISA has published a </span><b><u><span style="font-family:"Times New Roman",serif"><a href="https://www.us-cert.cisa.gov/remediating-microsoft-exchange-vulnerabilities"><span style="color:#2B72AF;background:white">Remediating
Microsoft Exchange Vulnerabilities</span></a></span></u></b><span style="font-family:"Times New Roman",serif;color:#333333;background:white"> </span><span style="font-family:"Times New Roman",serif;color:black;background:white">web page that strongly urges
all organizations to immediately address the recent Microsoft Exchange Server product vulnerabilities. </span><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif;color:#333333;background:white"> </span><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><b><span style="font-family:"Times New Roman",serif;color:black;background:white">Exploitation of these vulnerabilities is widespread and indiscriminate.</span></b><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif;color:black;background:white"> </span><o:p></o:p></p>
<p class="xxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif;color:black;background:white">CISA Recommendations:</span><o:p></o:p></p>
<p class="xxxxxxxmsonormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;text-autospace:none">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-family:"Times New Roman",serif;color:black;background:white">follow the guidance laid out in the web page. The guidance provides specific steps for both leaders and IT security staff and is applicable for all
sizes of organizations across all sectors</span><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxxxmsonormal" style="margin-left:.5in;text-autospace:none"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxxxmsonormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif">We kindly request any questions, feedback, or incidents related to these products be reported to CISA at
<a href="mailto:Central@cisa.dhs.gov">Central@cisa.dhs.gov</a> or 888-282-0870.</span><o:p></o:p></p>
<p class="xxxmsonormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxmsonormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxxxxmsonormal"><span style="font-family:"Times New Roman",serif">V/R,</span><o:p></o:p></p>
<p class="xxxxxxmsonormal"> <o:p></o:p></p>
<p class="xxxxxxmsonormal" style="page-break-after:avoid"><b><span style="color:#365F91">CyberLiaison</span></b><o:p></o:p></p>
<p class="xxxxxxmsonormal">Cybersecurity Division<o:p></o:p></p>
<p class="xxxxxxmsonormal">Cybersecurity and Infrastructure Security Agency<o:p></o:p></p>
<p class="xxxxxxmsonormal" style="text-autospace:none"><a href="mailto:CyberLiaison_SLTT@cisa.dhs.gov">CyberLiaison_SLTT@cisa.dhs.gov</a>
<o:p></o:p></p>
<p class="xxxxxxxxmsonormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxxxxmsonormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="xxxxxxxxmsonormal"><b><span style="font-family:"Times New Roman",serif">(TLP:WHITE)</span></b><o:p></o:p></p>
<p class="xxxxxxmsonormal"> <o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Please note that this message is marked TLP:WHITE. We encourage you to share it within your organization and with your partners</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:black">24×7 Security Operations Center</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:black">Multi-State Information Sharing and Analysis Center (MS-ISAC)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:black">Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:black">31 Tech Valley Drive</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:black">East Greenbush, NY 12061</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><a href="mailto:SOC@cisecurity.org"><span style="color:#954F72">SOC@cisecurity.org</span></a><span style="color:black"> - 1-866-787-4722</span></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><img border="0" width="278" height="46" style="width:2.8958in;height:.4791in" id="Picture_x0020_1" src="cid:image001.jpg@01D71467.D1268AB0" alt="cid:image001.jpg@01D40C67.01A3BDE0"></span><o:p></o:p></p>
<p class="MsoNormal"><a href="https://www.facebook.com/CenterforIntSec/"><span style="font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="23" height="24" style="width:.2395in;height:.25in" id="Picture_x0020_2" src="cid:image002.png@01D71467.D1268AB0" alt="cid:image002.png@01D291DE.F838E090"></span></a><a href="https://twitter.com/CISecurity/"><span style="font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="23" height="24" style="width:.2395in;height:.25in" id="Picture_x0020_3" src="cid:image003.png@01D71467.D1268AB0" alt="cid:image003.png@01D291DE.F838E090"></span></a><span style="font-family:"Arial",sans-serif"> </span><a href="https://www.youtube.com/user/TheCISecurity/"><span style="font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="23" height="24" style="width:.2395in;height:.25in" id="Picture_x0020_4" src="cid:image004.png@01D71467.D1268AB0" alt="cid:image004.png@01D291DE.F838E090"></span></a><span style="font-family:"Arial",sans-serif"> </span><a href="https://www.linkedin.com/company/the-center-for-internet-security/"><span style="font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="23" height="24" style="width:.2395in;height:.25in" id="Picture_x0020_5" src="cid:image005.png@01D71467.D1268AB0" alt="cid:image005.png@01D291DE.F838E090"></span></a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial",sans-serif;color:black">TLP: WHITE</span></b><o:p></o:p></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial",sans-serif;color:black">Disclosure is not limited. Subject to standard copyright rules, TLP: WHITE information may be distributed without restriction.</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution
or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
<br>
<br>
. . . . .<o:p></o:p></span></p>
</div>
</body>
</html>