<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Franklin Gothic Book";
panose-1:2 11 5 3 2 1 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.xxxxmsonormal, li.xxxxmsonormal, div.xxxxmsonormal
{mso-style-name:x_x_x_x_msonormal;
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.xxcontentpasted1
{mso-style-name:x_x_contentpasted1;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">FYSA<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span class="xxcontentpasted1"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">The Cybersecurity and Infrastructure Security Agency (CISA) announces today our latest effort to stop ransomware:
<a href="https://www.cisa.gov/news-events/news/getting-ahead-ransomware-epidemic-cisas-pre-ransomware-notifications-help-organizations-stop-attacks">
Pre-Ransomware Notification Initiative</a>. This initiative is already showing impact in actually reducing the harm from ransomware intrusions.</span></span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">We know that ransomware actors often take some time after gaining initial access to a target before encrypting or stealing information,
a window of time that often lasts between hours and days. This window gives CISA time to warn organizations that ransomware actors have gained initial access to their networks. These early warnings can enable victims to safely evict the ransomware actors from
their networks before they have a chance to encrypt and hold critical data and systems at ransom. </span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">Since the start of 2023, CISA has notified more than 60 entities across the energy, healthcare, water/wastewater, education, and other
sectors about potential pre-ransomware intrusions, and has confirmed that many of them identified and remediated the intrusion before encryption or exfiltration occurred.</span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">Read our
</span><span style="font-size:12.0pt;color:black"><a href="https://www.cisa.gov/news-events/news/getting-ahead-ransomware-epidemic-cisas-pre-ransomware-notifications-help-organizations-stop-attacks"><span style="font-size:11.0pt;font-family:"Franklin Gothic Book",sans-serif">blog</span></a></span><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">
written by Clayton Romans, Associate Director for Joint Cyber Defense Collaborative, for more details on how this initiative works.</span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><span class="xxcontentpasted1"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">To enable the broader cyber community to benefit from valuable threat intelligence, CISA urges organizations
to report observed activity, including ransomware indicators of compromise (IOCs) and tactics, techniques and procedures (TTPs) to CISA or our federal law enforcement partners, including the U.S. Federal Bureau of Investigation (FBI) and the U.S. Secret Service.
You can find information on reporting at </span></span><span style="font-size:12.0pt;color:black"><a href="https://www.cisa.gov/stopransomware/report-ransomware"><span style="font-size:11.0pt;font-family:"Franklin Gothic Book",sans-serif">stopransomware.gov.</span></a></span><span style="font-family:"Franklin Gothic Book",sans-serif;color:black"> <o:p></o:p></span></p>
<p class="xxxxmsonormal" style="background:white"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Theresa A. Masse<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cybersecurity State Coordinator/Advisor, Region 10 (Oregon)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cybersecurity and Infrastructure Security Agency<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Department of Homeland Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Phone: (503) 930-5671
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Email:</span><span style="font-size:10.0pt;color:#777777">
</span><a href="mailto:theresa.masse@cisa.dhs.gov"><span style="font-size:10.0pt;color:#0563C1">theresa.masse@cisa.dhs.gov</span></a><u><span style="font-size:10.0pt;color:#0760C1"><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><img border="0" width="97" height="97" style="width:1.0138in;height:1.0138in" id="Picture_x0020_1" src="cid:image001.png@01D95D5F.D2A8BB90"><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="xxxxmsonormal" style="background:white"><o:p> </o:p></p>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
</body>
</html>