<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.cs2654ae3a, li.cs2654ae3a, div.cs2654ae3a
{mso-style-name:cs2654ae3a;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.csc8f6d761
{mso-style-name:csc8f6d761;
font-family:"Calibri",sans-serif;
color:black;
font-weight:normal;
font-style:normal;}
span.cscca9035d1
{mso-style-name:cscca9035d1;
font-family:"Calibri",sans-serif;
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:underline;}
span.cs7088c2d41
{mso-style-name:cs7088c2d41;
font-family:"Calibri",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:underline;}
span.cs23fb06641
{mso-style-name:cs23fb06641;
font-family:"Times New Roman",serif;
color:black;
font-weight:normal;
font-style:normal;}
span.csb31e3c811
{mso-style-name:csb31e3c811;
font-family:"Times New Roman",serif;
color:#1F497D;
font-weight:normal;
font-style:normal;}
span.cs1befe4a51
{mso-style-name:cs1befe4a51;
font-family:"Times New Roman",serif;
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:underline;}
span.cse8ac24f01
{mso-style-name:cse8ac24f01;
font-family:"Arial",sans-serif;
color:black;
font-weight:normal;
font-style:normal;}
span.cse1a752c61
{mso-style-name:cse1a752c61;
font-family:"Arial",sans-serif;
color:black;
font-weight:normal;
font-style:normal;}
span.csa87e42b51
{mso-style-name:csa87e42b51;
font-family:"Arial",sans-serif;
color:black;
font-weight:normal;
font-style:italic;}
span.csee5761781
{mso-style-name:csee5761781;
font-family:"Calibri",sans-serif;
color:black;
font-weight:normal;
font-style:normal;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle30
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Good morning!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Sharing the below security advisory from CISA regarding network connected UPS units.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Thor Sage<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Executive Director<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Miami Valley Educational Computer Association<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">937-767-1468 x3101<o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://www.mveca.org/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="174" height="64" style="width:1.8125in;height:.6666in" id="Picture_x0020_1" src="cid:image004.jpg@01D8441E.08573430" alt="http://www.mveca.org/images/logo.gif"></span></a><span style="color:#1F497D">
</span><a href="https://www.linkedin.com/company/mveca/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1029" src="cid:image005.jpg@01D8441E.08573430" alt="i"></span></a><a href="https://twitter.com/mvecarcog"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="Picture_x0020_2" src="cid:image006.jpg@01D8441E.08573430" alt="t"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="color:#1F497D">Not-for-profit Technology Services for Education and Local Governments<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Ohio-K12 DoNotReply <<a href="mailto:donotreply@ohio-k12.help">donotreply@ohio-k12.help</a>><br>
<b>Date: </b>Wednesday, March 30, 2022 at 8:39 AM<br>
<b>To: </b>Scott Gaughan <<a href="mailto:scott.gaughan@managementcouncil.org">scott.gaughan@managementcouncil.org</a>>, Melissa Balbaugh <<a href="mailto:melissa.balbaugh@managementcouncil.org">melissa.balbaugh@managementcouncil.org</a>>, Christine Daugherty
<<a href="mailto:christine.daugherty@managementcouncil.org">christine.daugherty@managementcouncil.org</a>><br>
<b>Subject: </b>Shields Up Update: UPS devices<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="cs2654ae3a"><span class="csc8f6d761">Ohio Cybersecurity Partners, </span>
<o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761"> </span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761">The Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DOE) are aware of threat actors gaining access to a variety of internet-connected uninterruptible power supply (UPS) devices,
often through unchanged default usernames and passwords. In a CISA and DOE Insights
</span><span class="cscca9035d1"><a href="https://go.usa.gov/xzHeY" target="_blank">https://go.usa.gov/xzHeY</a></span><span class="csc8f6d761"> , organizations are provided with recommended actions to mitigate attacks against UPS devices.
</span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761"> </span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761">Organizations should immediately enumerate all UPSs and similar systems and ensure they are not accessible from the internet. In the rare situation where a UPS or similar system’s management interface must be accessible
from the internet, these devices should have compensating controls, such as ensuring the device or system is behind virtual private network, enforcing multifactor authentication, and applying strong, long passwords.
</span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761"> </span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761">CISA and DOE recommend all organizations—regardless of size—review this joint Insights, apply recommended actions, and overall adopt a heightened posture when it comes to cybersecurity and protecting their most
critical assets.</span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761"> </span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761">In addition to reviewing this joint Insights, CISA encourages critical infrastructure executives and senior leaders to review our "Shields Up" webpage at cisa.gov/shields-up
</span><span class="cscca9035d1"><a href="http://www.cisa.gov/shields-up" target="_blank">http://www.cisa.gov/shields-up</a></span><span class="csc8f6d761"> . Also, organizations should report incidents and unusual activity to CISA 24/7 Operations Center at
</span><span class="cscca9035d1"><a href="mailto:report@cisa.gov" target="_blank">report@cisa.gov</a></span><span class="csc8f6d761">
</span><span class="cscca9035d1"><a href="mailto:report@cisa.gov" target="_blank">mailto:report@cisa.gov</a></span><span class="csc8f6d761"> or (888) 282-0870.
</span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csc8f6d761"> </span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cs7088c2d41">________________________________________</span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cs23fb06641"><span style="font-size:12.0pt">Very respectfully,</span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csb31e3c811"><span style="font-size:12.0pt">Terin D. Williams</span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cs23fb06641"><span style="font-size:12.0pt">Cybersecurity Advisor, Region 5 (OH)</span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cs23fb06641"><span style="font-size:12.0pt">Cybersecurity and Infrastructure Security Agency </span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cs23fb06641"><span style="font-size:12.0pt">614.314.7793 | </span></span><span class="cs1befe4a51"><span style="font-size:12.0pt"><a href="mailto:terin.williams@cisa.dhs.gov" target="_blank">terin.williams@cisa.dhs.gov</a></span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cse8ac24f01"><span style="font-size:12.0pt"> </span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cse8ac24f01"><span style="font-size:12.0pt"><a href="https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisa.gov%2F&data=04%7C01%7Ced.weisenbach%40education.ohio.gov%7C4af489bb9342434d069508d8eee54c33%7C50f8fcc494d84f0784eb36ed57c7c8a2%7C0%7C0%7C637522015919357696%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=lHyq1sZtgaST%2F6D6eTGtcofV6GA9pxLbASQzD1kNyVg%3D&reserved=0"><span style="color:black;text-decoration:none"><img border="0" width="98" height="98" style="width:1.0208in;height:1.0208in" id="_x0000_i1026" src="cid:image002.png@01D8441D.13F2CFD0"></span></a></span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"><img border="0" width="505" height="66" style="width:5.2604in;height:.6875in" id="_x0000_i1027" src="cid:image003.png@01D8441D.13F2CFD0"></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cse1a752c61"><span style="font-size:9.0pt">Learn more about #EachChildOurFuture, Ohio’s plan to ensure each child is
</span></span><span class="csa87e42b51"><span style="font-size:9.0pt">challenged, prepared
</span></span><span class="cse1a752c61"><span style="font-size:9.0pt">and</span></span><span class="csa87e42b51"><span style="font-size:9.0pt"> empowered.</span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cse8ac24f01"><span style="font-size:12.0pt"> </span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="csee5761781"><span style="font-size:8.0pt">This message is intended for Academy of Educational Excellence (013195)</span></span><o:p></o:p></p>
<p class="cs2654ae3a"><span class="cse8ac24f01"><span style="font-size:12.0pt"> </span></span><o:p></o:p></p>
</div>
</div>
</body>
</html>