Security News Archives

WEB APPLICATION SECURITY ESSENTIALS
On June 2 - 3, 2009, the ISO will be hosting a two day course entitled "Web Application Security Essentials". The course, which is offered by SANS (SysAdmin, Audit, Network, Security) Institute, will be held in Baker Hall A51 (Giant Eagle Auditorium). 
 Details...

RESULTS OF IDENTITY THEFT STUDY
Carnegie Mellon community members are invited to join the Information Security Office (ISO) and the CyLab Usable Privacy and Security Laboratory, for a presentation and discussion of the Identity Theft study results, on April 10, 1:00 - 2:00 pm.
 Details...

SECURITY ALERT: VIRUS EMAILS - YOU'VE RECEIVED A HALLMARK E-CARD AND YOU HAVE GOT A NEW E-CARD FROM YOUR FRIEND!
Virus emails from "e-cards@hallmark.com or e-cards@americangreetings.com" asking you to open a postcard.zip or similar attachment. PLEASE DO NOT OPEN THE ATTACHMENT!
 Details...

SECURITY ALERT: ADOBE READER & ACROBAT UNPATCHED VULNERABILITY – ATTACKS UNDERWAY
Windows, Mac, and Linux users running Adobe Reader or Acrobat are vulnerable to exploits.  An unauthorized attacker may take complete control of an affected system by convincing the user to open a maliciously crafted Portable Document Format (PDF) file.  Patches are not available yet and the vulnerability is being actively attacked through e-mail, instant messaging (IM), and malicious or compromised web sites. Details...

WELCOME BACK STUDENTS
Welcome back everyone and Happy New Year!  In order to begin the 2009 spring semester with minimal disruption to your network connectivity while keeping your assets and data protected Carnegie Mellon University and the Information Security Office would like to remind you of the few safety tips. Details...

WELCOME BACK FACULTY AND STAFF
Welcome back everyone and Happy New Year!  In order to begin the 2009 spring semester with minimal disruption to your network connectivity while keeping your assets and data protected Carnegie Mellon University and the Information Security Office would like to remind you of the few safety tips. Details...

NEW INFORMATION SECURITY POLICY APPROVED
In December, the President's Council approved a new University-wide Information Security Policy.  This new policy lays a foundation for protecting all institutional data. Details...

SECURITY ALERT: CRITICAL MICROSOFT SECURITY UPDATE MS08-078 FOR INTERNET EXPLORER (WINDOWS)
An attacker may be able to take complete control of your computer when you visit a maliciously crafted web page with Internet Explorer on Windows.  Install and run Microsoft Update to safely continue using Internet Explorer. Details...