<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Good Morning!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Forwarding this message on behalf of Leslie Kainoa.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">Kevin Galusha, CISSP</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Cybersecurity Architect</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Clackamas County Technology Services</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">(503)723-4960</span><o:p></o:p></p>
<p class="MsoNormal"><u><span style="font-family:"Arial",sans-serif;color:#0563C1"><a href="mailto:KGalusha@clackamas.us"><span style="color:#0563C1">KGalusha@clackamas.us</span></a></span></u><o:p></o:p></p>
<p class="MsoNormal"><u><span style="font-family:"Arial",sans-serif;color:#0563C1"><a href="http://www.clackamas.us/"><span style="color:#0563C1">www.clackamas.us</span></a></span></u><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <span style="font-size:11.0pt"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Kainoa, Leslie <leslie.kainoa@cisa.dhs.gov>
<br>
<b>Sent:</b> Thursday, April 23, 2026 8:58 AM<br>
<b>To:</b> Galusha, Kevin <KGalusha@clackamas.us><br>
<b>Subject:</b> Fw: [TLP:AMBER+STRICT] SLTT SNAP SOC CALL on ED 25-03 - Today, Thursday April 23rd, 2026 at 3pm ET<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:double #F15D22 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<div>
<p class="MsoNormal" style="background:white"><b><span style="font-size:14.0pt;font-family:"Helvetica",sans-serif;color:black;background:white">Warning: External email. Be cautious opening attachments and links.<o:p></o:p></span></b></p>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<strong><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black;background:white">
<hr size="2" width="100%" align="center">
</span></strong></div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><o:p> </o:p></p>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">
<hr size="2" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal"><span style="color:black">Hi Kevin, can you please share with the Cyber Disruption Group? Thank you.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Respectfully,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Leslie <o:p></o:p></span></p>
</div>
<div id="ms-outlook-mobile-body-separator-line">
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div id="mail-editor-reference-message-container">
<div id="mail-editor-reference-message-container">
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="font-family:"Calibri",sans-serif">From:</span></b><span style="font-family:"Calibri",sans-serif"> <a href="mailto:cyberliaisonsltt@cisa.dhs.gov">cyberliaisonsltt@cisa.dhs.gov</a> <<a href="mailto:cyberliaisonsltt@cisa.dhs.gov">cyberliaisonsltt@cisa.dhs.gov</a>><br>
<b>Sent:</b> Thursday, April 23, 2026 8:46 AM<br>
<b>To:</b> CISA.IOD.REGION_All <<a href="mailto:cisa.iod.region_all@cisa.dhs.gov">cisa.iod.region_all@cisa.dhs.gov</a>><br>
<b>Subject:</b> [TLP:AMBER+STRICT] SLTT SNAP SOC CALL on ED 25-03 - Today, Thursday April 23rd, 2026 at 3pm ET</span>
<o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
</div>
<p style="margin:0in"> <o:p></o:p></p>
<p style="margin:0in">Good Afternoon SLTT partners,<o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="margin:0in">Today, CISA issued <span style="color:#0563C1"><a href="https://cisa.gov/news-events/directives/v1-ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices" target="_blank"><span style="color:#0563C1">V1 ED 25-03:<i> Identify and Mitigate Potential Compromise
of Cisco Devices</i></span></a></span><i> </i>in response to updated cyber threat intelligence indicating that Cisco Firepower and Secure Firewall products with Application Security Appliance (ASA) or Firepower Threat Defense (FTD) continue to present significant
risk to SLTT networks. The V1 update expands ED 25-03's recommendations to identify public-facing Cisco Firepower and Secure Firewall devices, collect forensic data, apply vendor-provided updates, and perform a hard reset of the devices. These recommendations
are in addition to the existing ED 25-03 recommendations.<o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="margin:0in">Additionally, CISA will host an Emergency Directive (ED) 25-03
<b>SNAP Call today, April 23,</b><b><span style="font-family:"Arial",sans-serif"> </span>2026,</b><b><span style="font-family:"Arial",sans-serif"> </span>at 3:00 PM ET</b>. Although EDs are directed towards federal agencies and not a requirement for the SLTT
community, we would like to share critical information with you. We look forward to discussing the ED in depth with your entity and ensure the guidance is clear and actionable.<span style="font-family:"Arial",sans-serif"> </span>Call<span style="font-family:"Arial",sans-serif"> </span>logistics<span style="font-family:"Arial",sans-serif"> </span>for
the SNAP Call are below.<o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="margin:0in"><span style="color:black">Please share this invite with your incident response teams, security operations center teams, infrastructure administrators, vulnerability management teams, and/or anyone else from your agency who should participate
in the snap version of the SLTT SOC Call.</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#333333"> </span><o:p></o:p></p>
<p style="margin:0in"><span style="color:black">The meeting invite is attached. To add this meeting to your calendar, click on the attached Outlook calendar invite and select “Copy to my Calendar” in the top toolbar under “Appointment Series.”</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:black"> </span><o:p></o:p></p>
<p style="margin:0in"><b><span style="color:black">*** NOTE: Third-party automated transcription, recording, and note-taking services on the call are prohibited. ***</span></b><o:p></o:p></p>
<p style="margin:0in"><b><span style="color:#242424"> </span></b><o:p></o:p></p>
<p style="margin:0in"><b><span style="color:#FFC000;background:black">[TLP: AMBER+STRICT]</span></b><o:p></o:p></p>
<p style="margin:0in"><span style="color:black"> </span><o:p></o:p></p>
<p style="margin:0in"><b><span style="color:black">Call Logistics:</span></b><span style="color:black"> </span><o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:15.0pt">
<span style="font-family:"Arial",sans-serif">●</span> Microsoft Teams Link (Audio and Visual):
<span style="color:#0563C1"><a href="https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZDZjYTQ1MWEtM2ExNi00NjI5LTg1ZjEtNTFmOTQxZmVkYzk4%40thread.v2/0?context=%7b%22Tid%22%3a%2269c613d2-b051-4234-8ed1-fd530b70d5d3%22%2c%22Oid%22%3a%2289609bc6-da0b-4d3a-b15d-d13c9acb68d6%22%7d" target="_blank"><b><span style="color:#0563C1">Join the meeting now</span></b></a></span> <o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:15.0pt">
<span style="font-family:"Arial",sans-serif">●</span> Use “Raise Hand” feature to ask a question<o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:15.0pt">
<span style="font-family:"Arial",sans-serif">●</span> <span style="color:black">
Dial-In Option (Audio Only): </span><o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:30.0pt">
<span style="font-family:"Arial",sans-serif">●</span> Number: 1 323-741-4166,,415495851# <o:p></o:p></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:30.0pt">
<span style="font-family:"Arial",sans-serif">●</span> ID: 415 495 851#<o:p></o:p></p>
<p style="margin:0in"> <o:p></o:p></p>
<p style="margin:0in"><b><span style="color:#242424">If you have any additional questions or concerns, please reach out to
</span></b><span style="color:#467886"><a href="mailto:CyberLiaisonSLTT@cisa.dhs.gov" target="_blank"><span style="color:#467886">CyberLiaisonSLTT@cisa.dhs.gov</span></a></span><span style="color:#242424">.</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424"> </span><o:p></o:p></p>
<p style="margin:0in"><i><span style="color:#242424">As a reminder, all organizations should report incidents and anomalous activity to CISA via secure message through the
</span></i><span style="color:#467886"><a href="https://us-cert.cisa.gov/forms/report" target="_blank"><i><span style="color:#467886">Incident Reporting System | CISA</span></i></a></span><i><span style="color:#242424">.
Questions and concerns may be directed to CISA Central at </span></i><span style="color:#467886"><a href="mailto:Central@cisa.dhs.gov" target="_blank"><i><span style="color:#467886">Central@cisa.dhs.gov</span></i></a></span><i><span style="color:#242424"> or
at 1-888-282-0870.</span></i><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424"> </span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424">Thank you,</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424"> </span><o:p></o:p></p>
<p style="margin:0in"><img border="0" width="69" height="69" style="width:.7187in;height:.7187in" id="Picture_x0020_1" src="cid:inline-s3-0-1776959160@inline" alt="Logo AI-generated content may be incorrect."><o:p></o:p></p>
<p style="margin:0in"><b><span style="color:#365F91">CyberLiaison SLTT</span></b><o:p></o:p></p>
<p style="margin:0in"><span style="color:black">Cybersecurity and Infrastructure Security Agency (CISA)</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:black">Cybersecurity Division | Joint Cyber Defense Collaboration (JCDC)</span><o:p></o:p></p>
<p style="margin:0in"><span style="color:black">SLTT Partnerships | </span><span style="color:#467886"><a href="mailto:CyberLiaisonSLTT@cisa.dhs.gov" target="_blank"><span style="color:#467886">CyberLiaisonSLTT@cisa.dhs.gov</span></a></span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424"> </span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#467886"><a href="https://www.cisa.gov/tlp" target="_blank"><span style="color:#467886">https://www.cisa.gov/tlp</span></a></span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424"> </span><o:p></o:p></p>
<p style="margin:0in"><span style="color:#242424">Recipients may share TLP:AMBER+STRICT information only with members of their own organization on a need-to-know basis to protect their organization and prevent further harm.</span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>