To: All Users

Recently, it is found that the number of phishing attempts targeting the University is increasing. In order to strengthen email security and raise users’ awareness on phishing email, starting from 8 January 2025, a warning tag will be displayed in every incoming email from outsiders.

External email warning tag helps to alert users from clicking malicious links in phishing emails sent by external senders. 

Sample of the warning tag: 

Stay vigilant! When it comes to financial transactions or personal information, please verify the identity of the sender.

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Microsoft have recently released its December security update notice, there is 72 vulnerability updates this time.

The updates this time mainly cover the following components: Microsoft Defender for Endpoint, Windows Hyper-V、 Windows Cloud Files Mini Filter Driver、 Windows Remote Desktop、Windows Message Queuing、Windows Mobile Broadband、Windows KernelMode Drivers products vulnerabilities.

Details of the vulnerabilities: 

• Windows Common Log File System Driver Elevation of Privilege Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49088
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49138
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49090 

• Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49122
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49118

• Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49124

• Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49127

• Windows Remote Desktop Services Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49123
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49105
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49116
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49132
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49120 

For more details about Microsoft December Updates, please refer to: https://msrc.microsoft.com/update-guide/releaseNote/2024-Dec

If the relevant affected products are used, please install the security updates released by Microsoft as soon as possible. 

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Recently, there are reports that several members of the Hong Kong Legislative Council have been defrauded and blackmailed by AI-generated explicit photos. Scammers use AI technology to generate fake images and blackmail them via email. To ensure everyone’s safety, please be aware of the following:

• Beware of Suspicious Emails: If you receive emails from someone claiming to be a private investigator or from other suspicious sources, please do not reply, click or forward any links to others.
• Report to the Police: If you have suffered financial loss or feel seriously threatened, please report to the Police immediately.

We have detected that similar scam emails have been received within the University. Please remain highly vigilant and protect both personal and University information.

If you have any questions or need assistance, please contact the ICTO Help Desk (Phone: 88228600, E-mail: icto.helpdesk@um.edu.mo) 

Related Links:

Beware of “AI face-changing” extortion emails and illegal use of personal information (Chinese Version Only)

https://www.gov.mo/zh-hant/news/1109512/

Hong Kong Lawmakers Blackmailed with AI-Generated Explicit Photos (Chinese Version Only)

https://www.modaily.cn/amucsite/web/index.html#/detail/9923919

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Apple Inc. has released two security vulnerabilities updates notice for macOS, iOS, iPadOS and vision OS .  

• Please update to iOS 18.1.1, iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1 or later version

For more details, please refer to: 
https://support.apple.com/en-us/121752

If the above products are used, users are suggested to:

• Install security updates released by Apple Inc. as soon as possible.
• Backup and test before updating.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

In today’s digital era, protecting your online privacy is more important than ever. Whether you are a student or staff, understanding potential privacy risks and taking proactive steps can help to protect your personal information. Here are some practical tips:

1. Limit Information Sharing: 
   • Only provide necessary information online or on social media. Avoid sharing sensitive information like ID number or phone number.
     
2. Be Cautious while using Public Wi-Fi: 
   • Avoid using public Wi-Fi to process personal or sensitive data. If necessary, use a Virtual Private Network (VPN) to encrypt the Internet connection.
3. Review Privacy Settings: 
   • Regularly check and update the privacy settings of your social media accounts and other online services to control who can access your information.
4. Use a Secondary Email Address for Sign-Ups: 
   • Use a secondary email address for any online services, subscriptions, and newsletters, in order to avoid spam or promotional emails cluttering the primary mailbox.
5. Beware of Phishing Scams: 
   • Verify sender’s email address and avoid clicking on suspicious links or downloading attachments from unknown sources.

By following the above tips, you can significantly enhance your online privacy and protect your personal information from potential threats.

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Microsoft have recently released its October security update notice, there is 117 vulnerability updates this time.

The updates this time mainly cover the following components: Windows and Windows Components, Microsoft Office and Office Components, Microsoft Management Console, Hyper-V, Azure, Visual Studio and Power BI products vulnerabilities.

Details of the vulnerabilities: 

• Microsoft Management Console Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43572

• Windows MSHTML Platform Spoofing Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43573

• Winlogon Elevation of Privilege Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43583

• Microsoft Windows Update Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20659

• Microsoft Configuration Manager Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468

For more details about Microsoft October Updates, please refer to: https://msrc.microsoft.com/update-guide/releaseNote/2024-Oct

If the relevant affected products are used, please install the security updates released by Microsoft as soon as possible. 

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office