Prepare for severe spring weather with tips you can share

Prepare for severe spring weather with tips you can share

This article was originally posted by the FTC. See the original article here.

According to the National Weather Service, the peak severe weather season is during the spring months of March, April, and May. Already this season, we’ve seen heavy rains, flooding, and tornados in southern areas like Alabama, Arkansas, Georgia, Louisiana, Mississippi, Tennessee, and East Texas. And we know that scammers follow not just the headlines, but also the storm fronts.

Handling post-disaster scammers is never easy. And getting ready for the severe weather that’s sure to come can be a challenge. But both are even harder due to the COVID-19 pandemic. Visit the FTC’s site, Dealing with Weather Emergencies, to start planning your response. You’ll find ideas about how to:

Share these tips with friends, family, and community organizations by getting a free one-page customizable handout at Picking Up the Pieces after a Disaster. Add your local consumer protection and emergency service contacts and post copies for people to download.

If you or anyone you know needs to report a disaster-related scam, visit Reportfraud.ftc.gov.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

VMware Releases Security Update

This article is contributed. See the original author and article here.

VMware has released a security update to address a vulnerability in VMware Carbon Black Cloud Workload appliance. A remote attacker could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review VMware Security Advisory VMSA-2021-005 and apply the necessary updates.

FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities

This article is contributed. See the original author and article here.

The Federal Bureau of Investigation (FBI) and CISA have released a Joint Cybersecurity Advisory (CSA) to warn users and administrators of the likelihood that advanced persistent threat (APT) actors are actively exploiting known Fortinet FortiOS vulnerabilities CVE-2018-13379, CVE-2020-12812, and CVE-2019-5591. APT actors may use these vulnerabilities or other common exploitation techniques to gain initial access to multiple government, commercial, and technology services. Gaining initial access pre-positions the APT actors to conduct future attacks.

CISA encourages users and administrators to review Joint CSA AA21-092A: APT Actors Exploit Vulnerabilities to Gain Initial Access for Future Attacks and implement the recommended mitigations.

CISA Releases Supplemental Guidance on Emergency Directive for Microsoft Exchange Server Vulnerabilities

CISA Releases Supplemental Guidance on Emergency Directive for Microsoft Exchange Server Vulnerabilities

This article is contributed. See the original author and article here.

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

SSL

Secure .gov websites use HTTPS A lock (lock icon) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
CISA Releases Supplemental Guidance on Emergency Directive for Microsoft Exchange Server Vulnerabilities

CISA Releases Supplemental Direction on Emergency Directive for Microsoft Exchange Server Vulnerabilities

This article is contributed. See the original author and article here.

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

SSL

Secure .gov websites use HTTPS A lock (lock icon) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.