From: Frank Schoenfeld

Sent: Thu Apr 02 12:00:39 2020

To: Dan Huff; Chaunee Seifried; Gerald Fisher; Alice Cannon; Darlene Bishop

Subject: FW: ZOOM Web Conferencing Tool

Importance: Normal

Attachments: image001.jpg;

 

FYI on Zoom

From: Julie Anderson <janderson@molallapolice.com>

Sent: Thursday, April 2, 2020 11:32 AM

To: Chris Long <clong@molallapolice.com>; Frank Schoenfeld <fschoenfeld@molallapolice.com>

Cc: Ronda Lee <rlee@molallapolice.com>

Subject: FW: ZOOM Web Conferencing Tool

See below from CJIS re Zoom

Julie B. Anderson

Molalla Police Department Records

117 N Molalla Ave / PO Box 248

Molalla OR 97038

Direct: 503-759-0229

Records:503-829-8817

FAX: 503-829-3461

**This e-mail may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this e-mail in error, please advise me immediately by reply e-mail, keep the contents confidential, and immediately delete the message and any attachments from your system. **

 

 

From: CJISSecurityPolicy <cjissecuritypolicy-bounces@listsmart.osl.state.or.us> On Behalf Of Harris, Nicholas C

Sent: Thursday, April 2, 2020 11:30 AM

To: CJISSecurityPolicy@listsmart.osl.state.or.us

Subject: [CJISSecurityPolicyForum] ZOOM Web Conferencing Tool

CJIS LASO’s –

I have been receiving several questions pertaining to the use of ZOOM. I want everyone to be aware that there have been several articles about the security vulnerabilities of the free version. If you choose to use ZOOM make sure that your employees are using the Government version. I would also like the following best practices to be utilized if you are using these web conferencing applications.

If you are discussing sensitive information that may include Criminal Justice Information (CJI) –

 

The security vulnerability that was discovered is the use of the chat function of the Windows 10 client. It shared network logon credentials. I have attached the link to the story –

https://www.zdnet.com/article/windows-10-alert-zoom-client-can-leak-your-network-login-credentials/

image

 

Nicholas C. Harris

CJIS Information Security Officer

Oregon State Police

3565 Trelstad Ave SE

Salem, OR 97317

NHarris@osp.oregon.gov

Phone: (503)934-2335 | Mobile: (503)302-7269

https://www.oregon.gov/osp/programs/cjis/Pages/CJIS-Security.aspx

To Provide Premier Public Safety Service

 

*****CONFIDENTIALITY NOTICE*****

This e-mail may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this e-mail in error, please advise me immediately by reply e-mail, keep the contents confidential, and immediately delete the message and any attachments from your system.