Please see the attached Situational Report, 14 January 2024, for incident 24-006 Winter Weather – Statewide – Jan1518.

SITREP 730 PM – Winter Weather 24-006 14 Jan 2024 FINAL

This is a reminder from the National Weather Service of the four “P” of winter weather, but they can be used for any hazardous weather preparedness…

Please click the link to view the report:

;SITREP 11AM – Severe Weather 24-004 8 Jan 2024 FINAL (2)

LABEOC Members,

The weekly saltwater intrusion private sector meeting is canceled for October 18. Please join the call next Wednesday, October 25, 2023, for the latest update.

Please get in touch with us if you have any questions at info@labeoc.org.

Thank you,

LABEOC Team

Please click the link to view the full report.

SITREP Ida Fires (FM 5484) and Lions Camp Rd (FM 5485) – Vernon Parish – 29August2023 5pm – FINAL

Please click the link to see the report.

SITREP Tiger Island Fire – Beauregard Parish (FM5482) – 29August2023 5pm – FINAL

In response to the prolonged heat wave the state is experiencing and the reports of wildfires in the state, Governor Edwards has issued a declaration of emergency from August 11, 2023, to September 9, 2023.  The declaration is posted here for your reference.  The LABEOC will update this message as the situation develops.

As a reminder, here are some tips that we can follow to stay safe during this extended heatwave:

1. Limit Outdoor Activities: If possible, stay indoors during the hottest parts of the day, usually between 10 a.m. and 4 p.m. If you need to go outside, try to do so early in the morning or later in the evening when temperatures are cooler.
2. Wear Appropriate Clothing: Opt for lightweight, loose-fitting, and light-colored clothing to help your body breathe and reflect the sunlight.
3. Avoid Strenuous Activities (when possible): Postpone or limit strenuous activities, such as exercising or heavy lifting, during extreme heat.
4. Stay Hydrated: Drink plenty of water throughout the day, even if you don’t feel thirsty. Avoid alcohol and caffeinated beverages, as they can contribute to dehydration.
5. Eat Light Meals: Consume light, easily digestible meals that don’t require your body to generate excess heat during digestion.
6. Use Sunscreen: Apply sunscreen with a high SPF to protect your skin from harmful UV rays, even if you’re just going outside for a short time.
7. Know the Signs of Heat-Related Illnesses: Learn the symptoms of heat exhaustion and heatstroke. If you or someone else experiences symptoms such as heavy sweating, weakness, dizziness, nausea, confusion, or a high body temperature, seek medical attention immediately.
8. Stay Humble: Remember that extreme heat can be dangerous. Don’t underestimate its potential risks, and take necessary precautions to keep yourself and others safe.
9. Keep Pets Safe: Ensure your pets have access to shade, water, and a cool environment. Never leave them in a hot car.
10. Monitor Vulnerable Individuals: Keep an eye on infants, elderly individuals, and people with chronic health conditions, as they are more susceptible to heat-related illnesses.

Stay safe.

Deadline Set for Homeowners Recovering from the Hurricanes and Storms of 2021 to Complete the Restore Louisiana Homeowner Assistance Program Survey

This summer has been extraordinarily hot, and we can expect more of the same for the long Fourth of July Weekend.  Please continue to take proper precautions while commemorating our Independence Day.  The infographic below from the CDC provides a thought-provoking reality; we lose more people annually to heat-related deaths than to hurricanes, tornados, earthquakes, and floods.

Take the heat seriously.  Have fun, but please protect yourselves and your loved ones.

Here is the latest statewide graphic concerning the potential for severe weather on Friday, March 31st:

GOHSEP is monitoring a chlorine leak from the BioLab facility near Interstate 10 in Westlake (Calcasieu Parish). A shelter-in-place order was initiated for a one-mile radius from the incident site. Interstate 10 is closed in both directions near the area.

If you are traveling eastbound on I-10 west of the intersection with I-49 over the next few days, expect delays.  Secretary Wilson provided pictures of the reason.

The 2022 season is getting a head start, thanks to Agatha crossing over Mexico from the Pacific.  The National Hurricane Center’s current 5-day outlook is below. While it appears that Louisiana is not in the crosshairs right now, we must remain vigilant.

MALWARE | SOCIAL ENGINEERING | RANSOMWARE
Snake Keylogger Spreads Through Malicious PDFs-ThreatPost-05.23.2022
While most malicious e-mail campaigns use Word documents to hide and spread malware, a recently
discovered campaign uses a malicious PDF file and a 22-year-old Office bug to propagate the Snake
Keylogger malware, researchers have found. Attackers target victims with emails that include a PDF
document named “REMMITANCE INVOICE.pdf”—misspelling intended–as attachment. If someone
opens the file, Adobe Reader prompts the user to open a .docx file with a rather curious name, researchers
found. The code eventually decrypts a ciphertext that turns out to be more shellcode, which is then executed
after to lead to an executable called fresh.exe that loads the Snake Keylogger, researchers found.

Analyst Note:
Keylogging (keystroke logging) is the act of recording the keyboard interactions of users. Phishing emails,
trojans, bogus websites, and zero-day exploits are all used to introduce keylogging malware into systems.
Keylogger malware can be detected when systems slow down, processes fail, or strange activity occurs.
Administrators can protect systems by avoiding downloads from unknown files, change passwords, and
enable two-factor authentication when possible.

CYBER CRIME | CYBER DEFENSE | SECURITY BREACH
Malicious PyPI Package Opens Backdoors on Windows, Linux, and Macs -BleepingComputer-05.21.2022
A malicious Python package has been spotted in the PyPI registry performing supply chain attacks to drop
Cobalt Strike beacons and backdoors on Windows, Linux, and macOS systems. In a report by Ax Sharma,
also a reporter at Bleeping Computer, the researcher explains that the infection begins with the execution
of the ‘setup.py’ script found in the package. This script detects the host operating system and, depending
on whether it is Windows, Linux, or Darwin (macOS), fetches a compatible malicious payload that is executed on the system. Software developers should scrutinize package names and details and double-check
their selection of building blocks when something appears strange.

Analyst Note:
The Python programming language allows you to install packages that can be included in programs to
extend their functionality. The threat actor places malicious code inside a package that can execute with
admin privileges. The malicious code abuses the package manager (‘pip’) which launches the ‘setup.py’
file in Python modules. This allows the malware to perform code execution when the package is installed.
Administrators should analyze their setup files when using any form of programming language or operating
system. Analysis of suspicious functionality packages or setup files may indicate these files are
compromised. This observation technique can assist in keeping systems protected from setup or package
file malware.

CYBER POLICY| CYBER INFRASTRUCTURE | CYBER INITIATIVE
China-linked Twisted Panda Caught Spying on Russian Defense R&D-The Register– 05.20.2022
Chinese cyber spies targeted two Russian defense institutes and possibly another research facility in
Belarus, according to Check Point Research. The new campaign, dubbed Twisted Panda, is part of a larger,
state-sponsored espionage operation that has been ongoing for several months. According to the security
shop. The Spinner backdoor’s main purpose is to run additional payloads sent from a command-and-control
server, although the researchers say they didn’t intercept any of these other payloads. The FBI has warned,
the Chinese government isn’t above using cyberespionage and IP theft to accomplish these goals.

Analyst Note:
Generally, Twisted Panda (Chinese APT) utilized phishing emails with malicious links and attachments.
This APT, like most, will often monitor, intercept, and relay information and sensitive data. These tactics
or exploits common. APTs are constantly attempting to compromise organizations with high value information. In terms of global connectivity, all businesses have high value information, and their files should
be treated as such. Network teams should be cognizant of any suspicious activities they find withing their
networks. Teams should also treat company information as high value needing complete security.

There is a new threat for serious weather later in the week.  Below is the graphic from the NWS.

Please stay safe.

The LABEOC participated in the National Weather Service flood outlook briefing this week.  Below is the summary from the NWS…

“How FEMA Partners with the Private Sector”.

This will be a virtual event and will begin at 12:00 CST and continue till 4:30 CST.  We will host a number of panelists from our different program areas to discuss all of the opportunities there are to get more involved and partner with FEMA Region 6. We will also be hosting a panel by our esteemed colleagues from both the Texas Department of Emergency Management (TDEM) and the Louisiana Business Emergency Operations Center (LABEOC).

A detailed agenda for this meeting will be distributed within the next several weeks.

With hostilities commencing between Russia and the Ukraine, Cybersecurity & Infrastructure Security Agency (CISA) has increased the threat awareness level, activating the shields up program.  CISA recommends all organizations—regardless of size—adopt a heightened posture when it comes to cybersecurity and protecting their most critical assets.  The comprehensive list of measures is available at:  https://www.cisa.gov/shields-up

Some simple measures that everyone can enforce right now:

1. Don’t click on links that come from people you don’t know, better yet, if a company sends you something, don’t use the email link, access the website through the browser
2. It’s a pain, but activate two-factor authentication.  This is the BEST way to protect your business and personnel assets.
3. While you setting up MFA, change your passwords.  Never a bad idea.
4. Back-up your data.  This goes for key business data sources as well as personal resources.
5. If the computer is going to be unused for an extended period (like the Mardi Gras break), unplug the internet or turn off the WiFi.  Bad guys can’t get in if there is no opening.

If you or your business becomes a victim of a cyberattack, contact: http://la-safe.org  They will bring all the state and federal law enforcement assets to the response.