Emergency Management Briefing: Federal Remediation Deadlines Approaching

March 19
2 mins

Episode Description

The salient point of this morning's briefing revolves around the critical updates related to cybersecurity vulnerabilities that necessitate immediate attention from emergency managers. Specifically, the recently released CISA's Kev Catalog highlights two newly listed exploited vulnerabilities: Microsoft SharePoint CVE 2263, with a remediation deadline of March 20, and Zimbra Collaboration Suite CVE 22566376, due by April 1. It is imperative that organizations actively monitor these additions, prioritize patch mitigation for Internet-facing collaboration platforms, and validate compensating controls in situations where patching may be delayed. Additionally, we address the security alert issued by the US embassy for Iran, urging organizations with personnel in the region to ensure their communication plans are up-to-date. Lastly, updates from various states include ongoing wildfire responses in Nebraska and a public health advisory regarding a measles outbreak in Nevada, emphasizing the necessity for vaccination and infection control measures.

Takeaways:
  1. On March 18, 2026, CISA released updates regarding newly identified vulnerabilities requiring immediate remediation.
  2. Emergency managers must prioritize patching of collaboration platforms to enhance cybersecurity measures effectively.
  3. Organizations with personnel in Iran should maintain updated communication plans and ensure travel safety measures are in place.
  4. The Nebraska Governor's Office is actively addressing the impacts of wildfires through community engagement and assessments.
  5. A public health advisory in Nevada emphasizes the importance of vigilance regarding measles outbreaks and vaccination efforts.
  6. All other states reported no significant updates, indicating a period of relative stability in emergency management activities.

Sources

CISA / KEV

CISA KEV data (released 2026-03-18) — SharePoint CVE-2026-20963 & Zimbra CVE-2025-66376 added; due dates listed

Travel / Security

U.S. Embassy Iran — Security Alert: Iran (March 18, 2026 update)

Nebraska

Nebraska Governor — March 18 update: Tour Cottonwood Fire & visit Brady community (acreage/containment noted)

AP — Nebraska wildfire fight continues; scale/containment context

Nevada

Southern Nevada Health District — Public Health Advisory 03/18/2026: Measles outbreaks update (vigilance & vaccination)

See all episodes