From: Frank Schoenfeld
Sent: Thu Apr 02 12:00:39 2020
To: Dan Huff; Chaunee Seifried; Gerald Fisher; Alice Cannon; Darlene Bishop
Subject: FW: ZOOM Web Conferencing Tool
Importance: Normal
Attachments: image001.jpg; FYI on Zoom From: Julie Anderson <janderson@molallapolice.com> Sent: Thursday, April 2, 2020 11:32 AM To: Chris Long <clong@molallapolice.com>; Frank Schoenfeld <fschoenfeld@molallapolice.com> Cc: Ronda Lee <rlee@molallapolice.com> Subject: FW: ZOOM Web Conferencing Tool See below from CJIS re Zoom Julie B. Anderson Molalla Police Department Records 117 N Molalla Ave / PO Box 248 Molalla OR 97038 Direct: 503-759-0229 Records:503-829-8817 FAX: 503-829-3461 **This e-mail may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this e-mail in error, please advise me immediately by reply e-mail, keep the contents confidential, and immediately delete the message and any attachments from your system. ** From: CJISSecurityPolicy <cjissecuritypolicy-bounces@listsmart.osl.state.or.us> On Behalf Of Harris, Nicholas C Sent: Thursday, April 2, 2020 11:30 AM To: CJISSecurityPolicy@listsmart.osl.state.or.us Subject: [CJISSecurityPolicyForum] ZOOM Web Conferencing Tool CJIS LASO’s – I have been receiving several questions pertaining to the use of ZOOM. I want everyone to be aware that there have been several articles about the security vulnerabilities of the free version. If you choose to use ZOOM make sure that your employees are using the Government version. I would also like the following best practices to be utilized if you are using these web conferencing applications. If you are discussing sensitive information that may include Criminal Justice Information (CJI) –
The security vulnerability that was discovered is the use of the chat function of the Windows 10 client. It shared network logon credentials. I have attached the link to the story –
https://www.zdnet.com/article/windows-10-alert-zoom-client-can-leak-your-network-login-credentials/
|
Nicholas C. Harris CJIS Information Security Officer Oregon State Police 3565 Trelstad Ave SE Salem, OR 97317 Phone: (503)934-2335 | Mobile: (503)302-7269 https://www.oregon.gov/osp/programs/cjis/Pages/CJIS-Security.aspx
To Provide Premier Public Safety Service
|
*****CONFIDENTIALITY NOTICE***** This e-mail may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this e-mail in error, please advise me immediately by reply e-mail, keep the contents confidential, and immediately delete the message and any attachments from your system.
|