Connect - Technology Services Edition April 2021

TECHNOLOGY SERVICES EDITION Digital Magazine | April 2021

C NNECT Connecting you with Technology

TECHNOLOGY SERVICES EDITION

1

Preventing Security Breaches

By Gary White, Director, Managed Services

Several major events have happened since our last newsletter was sent out. Not only did we have a large breach with SolarWinds, but we have also experienced a massive vulnerability in all versions of Microsoft Exchange from 2013-2019. The Microsoft 365 service was not impacted. While most of these attacks have been attributed to foreign nations, there are still many things that can be done to help protect yourself.

CISA has several resources available to help you detect and respond to the HAFNIUM attack on Exchange servers. You can read more at their site. https://www. cisecurity.org/ms-exchange-zero-day/ The latest threats over the past couple of weeks are coming from malware named Mamba. This malware is targeting local governments, public transportation, legal services, technology services, industrial, commercial, manufacturing, and construction sectors.

Connect has sent out to its members the FBI Flash notice as it is that important you know how this malware works.

This malware uses an open source encryption tool called DiskCryptor. This tool is a not something bad but the actors utilizing it are turning it into a weapon to encrypt your systems against you.

There are some things you can do in order to help prevent attacks like these from happening: 1. Be sure your systems are patched and up to date.

2. Be sure your antivirus products are up to date and full scans are scheduled at least weekly. If you have not thought about using an endpoint detection and response product (EDR), then please reach out to Connect so we can help you evaluate your current solution. EDR solutions greatly increase your chances of catching zero-day attacks.

3. Ensure your backups are working AND you have an off-site backup. With malware like these, a simple on-site backup may not be sufficient. Many times, malware will search out network shares and try to encrypt those files too. Most backups today are stored on-site on network shares. An off-site backup is imperative to have in order to fully recover during a devastating infection. Please contact Connect if you need help in evaluating your backup solution.

2

INFORM

4. Use multi-factor authentication(MFA) when possible.

These are some basic suggestions that go a long way in helping to prevent or recover quickly from a malware infection. We are here to help. Please engage us if you would like to evaluate your current strategies or if you find yourself a victim of such attacks.

The article from the FBI Flash notice can be found HERE. The FBI is interested if anyone does happen to encounter this malware. Please let Connect and the FBI know if you experience this attack.

We Need Your Help!

If you find any of these indicators on your networks, or have related information, please contact FBI CYWATCH immediately.

Email: cywatch@fbi.gov Phone: 1-855-292-3937

TECHNOLOGY SERVICES

CALENDAR OF

EVENTS

Technology Directors’ Meeting May 14, 2021 2 p.m.

CLICK HERE to register.

TECHNOLOGY SERVICES

General Updates

By Jon Axe, Lead Network Analyst

Providing Internet Service in Underserved Communities This year, Connect staff have been working on a project to help deliver affordable internet service to the residents of East Cleveland. In partnership with the Ohio Governor’s office, PCs For People, and OARnet, East Cleveland residents now have the opportunity to sign up for residential Internet service delivered by local LTE towers. This community has lacked affordable Internet service and it is our goal to be part of projects like this in other communities where affordable Internet service isn’t an option.

CLICK HERE for more information.

Photo from Governor of Ohio’s official website

“East Cleveland, like many other urban and rural communities, has lacked both the infrastructure and access to low-cost broadband for many residents. This new project plans to provide both the infrastructure and access for up to 2,000 families,” said Governor DeWine. “All of the partners in the public-private partnership have come together to bring access to high-speed internet for families throughout East Cleveland.”

ASK CONNECT

Technology Services Questions & Answers

QUESTION:

My PC blue screens every time I try to print. This just happened to me. What should I do?

ANSWER:

On March 9, 2021, Microsoft released updates to Windows 10. These updates caused printing to certain printers to generate a BSOD (blue screen of death) with an error that said “APC_INDEX_MISMATCH”.

Microsoft then released several patches to attempt to resolve this. The final OOB (out of band) patch needs to be manually imported into WSUS or must be applied manually to each machine. You can find the update for Windows 10, 20H2, 64 bit systems from here: https://www.catalog.update.microsoft.com/Search. aspx?q=KB5001567.

If you need previous Windows versions, you can search for these KB updates in the Update Catalog: • Windows 10 version 20H2/2004 – KB5001567 • Windows 10 version 1909/1903 – KB5001566 • Windows 10 version 1809 – KB5001568 (Enterprise & Education editions) • Windows 10 version 1803 – KB5001565 (Enterprise & Education editions)

TECHNOLOGY SERVICES EDITION

3

FOLLOW US ON SOCIAL MEDIA! @ConnectOH

@Connect_OH

4

INFORM

A Strong Alliance to Serve our Members ESC of Northeast Ohio Providing support and leadership that enables local schools, ESC of Lorain County agencies, governments, and communities to achieve their ESC of Medina County objectives through innovative and cost-effective Ohio Schools Council shared technology solutions.

Connect There is no wrong door Increased strength • Unwavering service to enter when you need Reduced costs • Effective & Efficient Information service!

Technology • Greatest educational experience possible for your students

TECHNOLOGY SERVICES EDITION

5

A Strong Alliance to Serve our Members ESC of Northeast Ohio ESC of Lorain County ESC of Medina County Ohio Schools Council

There is no wrong door to enter when you need service!

5700 West Canal Road Valley View, OH 44125 216.520.6900 1885 Lake Avenue Elyria, OH 44035 440.324.3185 www.ohconnect.org

6

INFORM

C NNECT Connecting you with Technology