Security Alert: Don't Bypass Security Warnings - Update Your Browser and Operating System

We are sharing an urgent security alert regarding compromised digital certificates that may affect your browsing experience and system security. This affects the “chain of trust” that browsers use to verify website identities, creating potential vulnerabilities that could allow malicious actors to impersonate legitimate services.

The Information Security Office is working with university service providers to identify and promptly replace any affected certificates. They are actively monitoring the situation and will take further action as necessary.

Because certificate replacements take time to deploy, campus community members may encounter security warnings while accessing web services. These warnings should not be bypassed, as they may indicate either a system awaiting an updated certificate or an active security threat.

What You Need to Do

We encourage you to take the following precautions:

• Apply Browser and Operating System Updates Immediately:  Keep web browsers and your operating system up to date with the latest versions and restart applications promptly when prompted to install security patches.
• Heed Security Warnings: Never ignore or bypass browser certificate error screens. If a warning appears, halt access and contact the service owner or IT support.
• Watch for Related Scams: Be vigilant against phishing attempts or unsolicited offers claiming to "repair" certificate issues. Treat any unexpected requests to download software, install certificates, reveal passwords, share multi-factor authentication (MFA) codes, or grant remote access as fraudulent.
• Report Suspicious Activity: Anyone who suspects compromise—especially those who previously bypassed a warning, entered CMU credentials, or installed an unverified tool—should contact the Information Security Office.