Update

Hacking of Jewish Organization's Websites on the Rise

According to a Jewish Week article, "In what authorities see as an increasing phenomenon, pro-Palestinian hackers disrupted three Jewish Web sites in three parts of the world last Sunday afternoon..."  Among the sites hacked were those belonging to a Jewish organization on Long Island, New York, a Jewish newspaper in London, England, and the third an Israeli web site.  The Jewish Week article further states, "Both appear to have been struck by the same hacker; the same page was posted on both.  The message, in English and Turkish, was in support of "Palestinian Mujahaeeds" (terrorists) and contained a Palestinian flag and anti-Semitic rantings."

These three incidents have come shortly after two other sites, belonging to Jewish institutions in Colorado, were also hacked and defaced with anti-Semitic writing and images.

In response to these incidents, the Secure Community Network assembled and circulated several best practices aimed at assisting organizations in raising the security of their websites as well as their internal systems.  These recommendations are:

·       Keep your firewall turned on, up to date, and configured to prevent intrusions. Ensure any unnecessary open ports are closed whenever possible. Open ports in your firewall may allow for unauthorized persons to access your computer and/or internal systems.

·       Install and/or Update your Antivirus Software

·       Install and/or Update your Antispyware Technology

·       Keep your Operating System up to date

·       Be careful what you download

·       It is a good practice to change your critical login information on a regular basis, (i.e. monthly) and use proper protocols when choosing passwords.

·       Where possible, any computer that is used for critical computing for your organization, such as banking, website administration, etc., or that contains sensitive personal information of any kind should not be used to browse the internet for any reason or used for email. This would significantly reduce the chances of being exposed to spyware or malware that could be installed on the computer and expose sensitive information such as logins and passwords.

·       Turn off your computer when not in use.

Table Top Exercises:   Testing Your Emergency Plans

Many agencies, institutions and organizations have invested heavily in security planning, all-hazards preparedness, and business continuity planning.  However, such plans are not complete until they are tested. Expert consensus indicates that the best way to prepare for the worst is by simulating and practicing what the plans call for - which is why the use of table top exercises is on the rise.  A table top exercise is a facilitated activity that places participants in a simulated situation requiring them to function in the capacity required for responding to a real-world event. Table top exercises are scenario-based simulations and provide a non-threatening way to work through and discuss all of the considerations of managing an incident. Tabletops raise the level of awareness as to the actual state of preparedness without the cost and disruption of a full scale live exercise while empowering all participants to become informed, active contributors to the safety, security, and resiliency of their organization.  To access more information on table top exercises, view the attached presentation or download the informational article. 

Community Emergency Response Team (CERT) Training

The Community Emergency Response Team (CERT) Program educates people about disaster preparedness for hazards that may impact their area and trains them in basic disaster response skills, such as fire safety, light search and rescue, team organization, and disaster medical operations. Using the training learned in the classroom and during exercises, CERT members can assist others in their neighborhood or workplace following an event when professional responders are not immediately available to help. To find out more about CERT training in your area, please go to the State Directory page of the CERT website.

For crisis or emergency situations please call your local law enforcement. To reach SCN after normal business hours or to report an incident please call: 1-877-265-3337.  Please direct all other inquiries via email to Scandesk@scnus.org or call 212-284-6940