A strong cold front will move into the state on Thursday, causing temperatures to drop into the 20s as early as that afternoon. Strong winds with gusts up to forty miles per hour will accompany the front, resulting in wind chills into the teens. Cold temperatures will last into the Christmas weekend. Potential impacts include freezing weather. In some areas, minor snow accumulations cannot be ruled out for Thursday afternoon and night.
It seems like every day we hear something in the news about cyber security, hacking, scams, or some other scary digital life term. What is a small to medium sized business owner to do? How do I protect what I have built or plan to build without spending lots of money hiring an IT professional or IT company to protect my assets?
I like to think of the ancient Chinese philosopher Lao Tzu’s quote, “The Journey of a thousand miles begins with the first step.” For your business’s cyber security, it begins with a simple first step. Change your system or computer’s default login and password. Two friends that work in the IT industry told me a company can reduce it’s chances of cyber-attack by more than 50% if they just changed their admin passwords on their systems. The majority of small to medium sized businesses default system administrator passwords has not been changed from:
LOGIN: admin
PASSWORD: password
or some variation of this combination. I know it’s hard to remember all of these logins. There’s the social media account password and the email system password, and string of other logins that a person has to remember. This simple step can start your journey.
Consider this analogy, you wouldn’t leave the key in the door to your business when you left at night would you? Would you leave the keys to your work truck/car in the ignition, unlocked overnight would you? So if you would take the simple steps to safeguard physical things your business uses every day, why not take the same steps to protect the digital aspects of your business?
So if you are ready to begin this journey here are some recommendations:
If you will take any of these steps, you have begun your journey to digitally safeguarding your business.
As we say goodbye to Fred, we turn our attention to Grace. Grace appears to be taking a southern track across the Gulf of Mexico, across the Yucatan pennisula, and finally making landfall in Mexico or the extreme southern part of Texas. Grace will make no impact on Louisiana, according to official NHC forecasts. Henri developed in the last 24 hours and will be touring the Island of Bermuda over the next 48 hours, no affects to Louisiana forecasted. There is a wave coming off the western coast of Africa, but there is no development forecasted over the next 48 hours. Stay safe and stay tuned.
FRED and GRACE part two…
Fred appears to have lost his way and his course is now sliding to the west. Fred’s visit to Caribbean island had a sever impact on his health, resulting in a more westerly circulation forming coming out of the Florida straight. Current National Hurricane Center forecasts have Fred strengthening back to tropical storm status and making landfall along the Alabama coast near Grand Bay. Louisiana now is in the cone of uncertainty as Fred will likely rain and tropical storm force winds to the extreme southeastern coast of Louisiana as early as Monday morning, with landfall sometime Monday evening or early Tuesday morning. Please monitor your local officials for guidance as Fred approaches the area.
Grace has now reached Tropical Storm status and is currently in the vicinity of the Leeward Islands. The current forecast track brings Grace in contact with Hispaniola by Monday morning. The mountainous terrain there should have a negative effect on further development through Tuesday. Grace’s forecast has her travel along the entire length of Cuban and entering the Gulf as a tropical storm by Thursday morning. If Grace remains on current tract, Louisiana is likely to be in the forecasted cone.
As always, whether we are talking about Fred, Grace or any future storm, please listen to your local emergency officials for guidance.
I thought it was Fred and Wilma not Fred and Grace, but the 2021 hurricane season brings us this unlikely couple.
Fred continues across the northern Caribbean. The interaction with mountainous regions of the Dominican Republic and Haiti have reduced Fred’s ability to strengthen. The current forecast take Fred through the Florida straight Saturday morning and making landfall as strong tropical storm or minimal hurricane. Effects to Louisiana remain minimal with the current forecast.
Potential Tropical storm 7, to be named Grace if she reaches that level remains far out in the Atlantic. Current forecasts show that “Grace” has a 60% chance of reaching Tropical Storm status in the next 5 days. Potential storm track at this point, appears similar to Fred’s track. Stay tuned to your local emergency management personnel for official guidance.
Official forecasts taken from the National Hurricane Center and are available at this link, NHC
Overnight, Tropical Storm Fred makes his debut. Fred currently has 40 mph winds and is traveling west northwest at 16 mph. His current path takes him north of the Caribbean islands and into the Florida straight by Saturday morning. If current forecasts remain accurate, then Fred will make landfall near Apalachicola Florida early in the morning of Monday August 16, 2021. The 0800 projected storm path is below. Please stay tuned to local emergency officials for any changes to the forecast.
Two disturbances in the Atlantic have potential for further development over the next 5-days. While there is no immediate threat to Louisiana, the potential is there in the next 7-10 days. Everyone should remain vigilant and listen to guidance provide by your local emergency officials.
from the FEMA newsroom here
We have all heard the term doxing before, but what does it really mean? Why is it important to me?
Doxing refers to the internet-based practice of gathering an individual’s personally identifiable information (PII)—or an organization’s sensitive information— from open source or compromised material and publishing it online for malicious purposes.
Although doxing can be carried out by anyone with the ability to query and combine publicly available information, it is often attributed to nefarious actors, hacktivists, and extremists. Doxers compile sensitive information from compromises of personal and professional accounts and a wide range of publicly available data sources to craft invasive profiles of targets, which are then published online with the intent to harm, harass, or intimidate victims (CISA, 2021).
Organizations may be targets of doxing due to their stance on a particular issue, involvement in a certain industry, related organization policies, or grievances. Doxing attacks targeting senior leaders of an organization, often serve as “reputation attacks” and could lead to activities seeking to embarrass, harass, or undermine confidence. Incidents of doxing that target individuals often serve to harass, intimidate, or inflict financial damages, and can potentially escalate to physical violence (CISA, 2021).
Most businesses compile databases that contain personal information, whether suppliers, customers, or employees. Almost everyone, individuals and businesses has a presence on social media. Any of these databases can be breached and personal information gathered for use in doxing.
As you can see doxing can be and is dangerous. How do you better protect yourself from doxing:
If you become a victim of doxing, take these steps
CISA. (2021, August). MITIGATING THE IMPACTS OF DOXING ON CRITICAL INFRASTRUCTURE. Retrieved from http://www.cisa.gov: https://www.cisa.gov/publication/mitigating-impacts-doxing-critical-infrastructure
The 2021 Atlantic hurricane season is well underway, and atmospheric and oceanic conditions remain conducive for an above-average hurricane season, according to the annual mid-season update issued by NOAA’s Climate Prediction Center, a division of the National Weather Service.
The latest outlook reflects that the number of expected named storms (winds of 39 mph or greater) is 15-21, including 7-10 hurricanes (winds of 74 mph or greater), of which 3-5 could become major hurricanes (Category 3, 4, or 5 with winds 111 mph or greater). This updated outlook includes the 5 named storms that have formed so far, with Hurricane Elsa becoming the earliest 5th named storm on record.
“After a record-setting start, the 2021 Atlantic hurricane season does not show any signs of relenting as it enters the peak months ahead,” said Rick Spinrad, Ph.D., NOAA administrator. “NOAA will continue to provide the science and services that are foundational to keeping communities prepared for any threatening storm.”
NOAA scientists predict that the likelihood of an above-normal 2021 Atlantic hurricane season is 65%. There is a 25% chance of a near-normal season and a 10% chance of a below-normal season.
“A mix of competing oceanic and atmospheric conditions generally favor above-average activity for the remainder of the Atlantic hurricane season, including the potential return of La Nina in the months ahead,” said Matthew Rosencrans, lead seasonal hurricane forecaster at NOAA’s Climate Prediction Center.
Atlantic sea surface temperatures are not expected to be as warm as they were during the record-breaking 2020 season; however, reduced vertical wind shear and an enhanced west Africa monsoon all contribute to the current conditions that can increase seasonal hurricane activity. These conditions are set against the backdrop of the ongoing warm phase of the Atlantic Multi-Decadal Oscillation, which has been favoring more active hurricane seasons since 1995.
“Now is the time for families and communities to ensure their preparations are in place,” said National Weather Service Director Louis W. Uccellini, Ph.D. “These storms can be devastating, so be prepared for all possible outcomes by staying tuned to the forecast and following safety information and possible evacuation notifications issued by emergency officials.”
NOAA’s update to the 2021 outlook covers the entire six-month hurricane season, which ends Nov. 30. Throughout the hurricane season, NOAA’s National Hurricane Center (NHC) provides the hurricane track and intensity forecasts that emergency managers and communities rely on across areas at risk during a landfalling storm. NHC is the source for all watches and warnings for tropical storms, hurricanes, and related storm surge. The seasonal outlook from NOAA is not a landfall forecast as landfalls are typically only predictable within about a week of a storm potentially reaching a coastline.
Learn more about NOAA’s comprehensive expertise across all aspects of hurricane science and forecasting with our Hurricane Resource Guide on NOAA.gov. Visit FEMA’s Ready.gov for the latest information about hurricane preparedness and evacuation safety.
Media Contact
Lauren Gaches, Lauren.Gaches@noaa.gov, 202-740-8314
Originally posted on www.noaa.gov
Louisiana is the “Sportsman Paradise”. Here we love to hunt and love to fish. Ask any Louisiana angler about it and they can talk for hours on baits, rods and reels, and the best spots (but not their best spot). But what do we know about phishing or spear phishing? And no this is not the “cajunized” spelling of one of our favorite pastimes, these are real threats to companies and individuals alike.
We have all experienced phishing is one form or another. The most detestable is the robo-calls the we have all received at one point or another. A mass automatic contact trying to get some unsuspecting individual to answer the phone and buy their bogus car warranty. The other more nefarious form is in the mass emails that go out every day, trying to get you to reset your Facebook or Instagram password. The links in these emails are 99.99% fraudulent. It is easy to tell with just a little bit of work, even for the unenlightened iPhone user. Click the “company” that sent that email, and it will turn blue (like a contact). Click it again and it will show you the email address that it came from. No it’s not the Nigerian Prince of the 1990s fame, but probably a distant relative. If you are unsure in this phishing attack, go to the app or the website the email is claiming to be from, and change your password there. There is never any harm in doing a password change, other than having to go through all of your devices, in fact it will probably do some good (like taking a multi-vitamin). Knowledge is power, don’t be a phish.
Spear phishing is similar to regular phishing, in that it is an unsolicited email, but this time it is not part of a mass email campaign, it is “targeted” to an individual. With all of the data breaches that have happened over the last 5 years, it would be naïve to think that you are not on some nefarious actor’s radar. This is especially true as people “move up” the corporate ladder. Once it becomes public knowledge (Twitter, Facebook, LinkedIn…) then they also move up on the radar of people that want gain access to them and the systems they use. Now I’m not advocating against making announcements I’ve done it myself), but what I am saying is that as your responsibility at work increases, so too does the awareness of spear phishing attacks.
In the vein of “Truth in lending”, I’m not an IT professional, nor have I received any IT certifications. These are just my uncommon sense recommendations to everyday computer users.
I have developed these rules after watching things happen in my own house, emails accounts get hacked, Instagram accounts stolen, etc. These rules won’t prevent you from being a phish, but if you know what bait they are phishing with, then you can avoid the possibility of being a phish.
ZCZC MIATWOAT ALL
TTAA00 KNHC DDHHMM
Tropical Weather Outlook
NWS National Hurricane Center Miami FL
800 PM EDT Sat Jul 24 2021
For the North Atlantic...Caribbean Sea and the Gulf of Mexico:
1. Earlier this afternoon and evening, an Air Force Reserve Hurricane
Hunter aircraft investigated the low pressure system off the east
coast of Florida and found a well-defined center of circulation
about 185 miles east of Cape Canaveral. However, the system still
lacks organized shower and thunderstorm activity near its center
and therefore has not met the criteria to be designated as a
tropical depression. Environmental conditions are expected to
remain marginally conducive for additional development, and a
tropical depression could still form overnight or on Sunday while
the low moves generally westward at 5 to 10 mph toward the east
coast of Florida. Interests in Florida should continue to monitor
the progress of this system. Another Hurricane Hunter aircraft is
scheduled to investigate the system Sunday morning, if necessary.
* Formation chance through 48 hours...medium...50 percent.
* Formation chance through 5 days...medium...50 percent.
CISA Encourages All Organizations to Take Steps to Protect their Networks
WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) issued Emergency Directive (ED) 21-04 today to mitigate a Microsoft Windows print spooler service vulnerability CVE-2021-34527 being actively exploited. Federal civilian agencies are required to immediately disable the print spooler service on Microsoft Active Directory Domain Controllers, apply the Microsoft July 2021 cumulative updates, and make additional configuration changes to all Microsoft Windows servers and workstations within one week.
Exploitation of the vulnerability allows an attacker to remotely execute code with system level privileges, enabling a threat actor to quickly compromise the entire identity infrastructure of a targeted organization.
The emergency directive is in response to validated active exploitations. CISA is concerned that exploitation of this vulnerability may lead to full system compromise of affected agency networks if left unmitigated.
“Since this exploitation was identified, CISA has been engaged with Microsoft and federal civilian agencies to assess potential risk to federal agencies and critical infrastructure,” said Eric Goldstein, Executive Assistant Director for Cybersecurity, CISA. “CISA’s mission is to protect the nation against cybersecurity threats, and this directive reflects our determination to require emergency action for exploitations that pose an unacceptable risk to the federal civilian enterprise. We will continue to actively monitor exploitation of this vulnerability and provide additional guidance, as appropriate.”
Although only directed to federal agencies, CISA encourages public and private sector organizations to review our directive and consider similar steps to mitigate this vulnerability and avoid being exploited by malicious cyber actors.
Release Date:
July 20, 2021
Transportation Security Administration issues second Security Directive
WASHINGTON – Today, in response to the ongoing cybersecurity threat to pipeline systems, DHS’s Transportation Security Administration (TSA) announced the issuance of a second Security Directive that requires owners and operators of TSA-designated critical pipelines that transport hazardous liquids and natural gas to implement a number of urgently needed protections against cyber intrusions.
“The lives and livelihoods of the American people depend on our collective ability to protect our Nation’s critical infrastructure from evolving threats,” said Secretary of Homeland Security Alejandro N. Mayorkas. “Through this Security Directive, DHS can better ensure the pipeline sector takes the steps necessary to safeguard their operations from rising cyber threats, and better protect our national and economic security. Public-private partnerships are critical to the security of every community across our country and DHS will continue working closely with our private sector partners to support their operations and increase their cybersecurity resilience.”
The Department’s Cybersecurity and Infrastructure Security Agency (CISA) advised TSA on cybersecurity threats to the pipeline industry, as well as technical countermeasures to prevent those threats, during the development of this second Security Directive. This Security Directive requires owners and operators of TSA-designated critical pipelines to implement specific mitigation measures to protect against ransomware attacks and other known threats to information technology and operational technology systems, develop and implement a cybersecurity contingency and recovery plan, and conduct a cybersecurity architecture design review.
This is the second Security Directive that TSA has issued to the pipeline sector this year, building upon an initial Security Directive that TSA issued in May 2021 following the ransomware attack on a major petroleum pipeline. The May 2021 Security Directive requires critical pipeline owners and operators to (1) report confirmed and potential cybersecurity incidents to CISA; (2) designate a Cybersecurity Coordinator to be available 24 hours a day, seven days a week; (3) review current practices; and, (4) identify any gaps and related remediation measures to address cyber-related risks and report the results to TSA and CISA within 30 days.
Since 2001, TSA has worked closely with pipeline owners and operators, as well as its partners across the federal government, to enhance the physical security preparedness of U.S. hazardous liquid and natural gas pipeline systems. TSA works closely with CISA, the nation’s lead agency for protecting critical infrastructure against cybersecurity threats, to execute this mission.
No matter what the hurricane season outlook predicts, it’s important to remember that it only takes one storm to devastate a community. Now is the time to prepare your home and your family. Remember, hurricanes are not just a coastal problem, so it’s important to know the risks where you live: rain, wind and flooding could happen far from the coast.
“FEMA’s mission to help people before, during and after disasters has never been more critical, given our shared experience during this pandemic,” said FEMA Administrator Deanne Criswell. “Even if you’re experiencing disaster fatigue due to your experience with the COVID-19 pandemic, we all must use the lessons learned from it to prepare for potential disasters on the horizon.”
Although FEMA has had a very busy year supporting President Biden’s COVID-19 vaccination mission and other disasters, the agency is ready to handle future disasters.
“More than 20,000 FEMA employees across the nation stand ready to support our state, local, tribal and territorial partners in hurricane prone areas to provide any help they may need to protect lives and property,” said Administrator Criswell. “The best way to help your community recover from a disaster is by taking steps now to prepare yourself and your family BEFORE a disaster strikes. Visit Ready.gov to start your planning today.”
Consider these actions to start your preparedness today:
This week, Administrator Criswell spent time with officials in both Puerto Rico and the U.S. Virgin Islands to discuss recovery projects and preparedness efforts for the Caribbean Area Office ahead of hurricane season.
While in Puerto Rico, she toured FEMA’s Caribbean warehouse and distribution center in Caguas, visited the Susana Centeno Community Health Center in Vieques and met with Gov. Pedro Pierluisi, Resident Commissioner Jenniffer González Colón and Speaker of the House Rafael “Tatito” Hernández. While in the U.S. Virgin Islands, she met with Gov. Albert Bryan Jr. and Congresswoman Stacey Plaskett and toured the Juan F. Luiz Hospital on St. Croix.
If you have any questions, please contact FEMA Office of External Affairs:
