To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued security vulnerability about Chrome browser.  This vulnerability is widely exploited.

• Please update to Google Chrome version 128.0.6613.84 (Windows/ Linux) or later, 128.0.6613.85 (Mac) or later

For more details, please refer to: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

No matter where we are, cybersecurity is an important issue that cannot be ignored.

Here are some cybersecurity tips:

1. Update the software on your mobile devices, including antivirus software, as these updates often contain security fixes.
2. Use strong passwords and avoid using passwords that are easy to guess.
3. Enable multi-factor authentication services to protect your accounts.
4. Backup your data completely before travel.
5. Enable anti-theft and remote data destruction features on your mobile devices.
6. Disable automatic Wi-Fi and Bluetooth connections on your mobile devices.
7. Be cautious when using public Wi-Fi or public computer, avoid entering passwords or confidential information on these systems.
8. If you need to access UM internal information through public Wi-Fi, please use a VPN.
9. Be aware of your surroundings and pay attention to where and how you use your devices.
10. Protect your mobile devices, never leave them in public places, and enable encryption features, including USB or external storage devices.

Please be reminded that online safety is just as important as physical safety when you are out. Let’s make cybersecurity a habit in your daily lives, stay safe, protect yourself and have a joyful trip!

Reference

• How to choose a strong password?
• Protect Your Digital Assets: A Guide for Data Backup
• Two-Factor Authentication (2FA)
• SSL VPN

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), OpenSSH have recently issued remote code execution vulnerability about its products.  A remote attacker can exploit this vulnerability to trigger remote execute arbitrary code and bypass security restrictions. Furthermore, this vulnerability is widely exploited.

Affected products are: OpenSSH < 4.4p1 and 8.5p1 <= OpenSSH < 9.8p1

If the relevant affected products are used, users must install security updates that is officially released by OpenSSH as soon as possible.

For more details, please refer to: 
https://www.openssh.com/releasenotes.html
https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Beware of the email invitation sent by organizations such as Medical Research Archives or European Society of Medicine, etc. Although their invitation is seemingly cordial, attention should be paid to its predatory business practices involving significant publication fees (https://esmed.org/author-center), and submitting research papers to them or speaking at their annual meetings may result in loss of money or time.

As reported by Flaky Academic Conferences website (https://flakyc.blogspot.com/2020/11/european-society-of-medicine-esmed.html). The website notes that it is not entirely clear what the European Society of Medicine is. It may be a product of the alleged predatory publisher Knowledge Enterprises, Inc. (KEI).

Below is further information and related discussion for your reference:

• More in-depth discussion in the ResearchGate related discussion forum (https://www.researchgate.net/post/European_Society_of_Medicine)
• Beall’s List of potentially predatory open access publishers (https://beallslist.net)
• ThinkCheckSubmit website also provides additional advice on choosing a trustworthy publishing platform (https://thinkchecksubmit.org)

Sample of the emails:

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

The Cybersecurity Incident Alert and Response Centre (CARIC) was informed that hackers have been sending phishing emails to various operators with the subject “Infringing Copyright or Violating Legal Regulations” to deceive users to download and open crypto ransomware virus.

The mentioned email accuses the website content of recipient’s organization, involving copyright infringement or violation of laws and regulations, and requires the recipient to click on the link provided as below in the email:

to download a compressed file with the “.rar” to understand the specific situation and remove the infringing content, otherwise legal action will be taken against the recipient, and the decompression password is provided in the email. After the analysis by CARIC, the compressed file contains an executable program that may download and install crypto ransomware once executed. Once infected, the computer of the victims may be subjected to ransomware encryption, remote control, information leakage and other hazards.

Suggestions:

• If you receive similar email, do not download or open any files, and immediately notify ICTO Helpdesk for follow up;
• Ensure the antivirus software is installed and virus definition files are regularly updated;
• Do not open suspicious email attachments or links, and do not enter important information such as account passwords on suspicious websites.

Sample of the malicious email:

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued security vulnerability about Chrome browser.  This vulnerability is widely exploited.

• Please update to Google Chrome version 125.0.6422.112/.113 (Windows/ Mac) or later, 125.0.6422.112 (Linux) or later

For more details, please refer to:  https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Artificial intelligence (AI) platforms provide users with a variety of powerful tools and services that can help them to accomplish a variety of tasks, from data analysis to machine learning. However, there are some security risks to be aware of when using public AI platforms.

Below are some security tips to protect your data and privacy:

1. Choose a reputable platform: Choose a platform with good reputation and research its security and compliance record.
2. Understand the platform’s privacy policy: Read the platform’s privacy policy before using it. Understand how the platform collects, uses and shares your data.
3. Be careful of what you share: Only share the data you need to complete your tasks. Avoid sharing any sensitive, confidential data, unpublished work information or research results.
4. Use strong passwords and enable two-factor authentication: Create strong passwords for your accounts and enable two-factor authentication.
5. Beware of phishing and scams: Do not click on suspicious links or enter your account information on unverified websites.
6. Keep your software up to date: Keep your operating system and AI platform software up to date.
7. Report suspicious activity: If you notice any suspicious activity, report it to the AI platform’s support team immediately.

By following these security tips, you can help protect your data and privacy while using public AI platforms. If you need further information on “AI privacy” and “Data Anonymization Processing”,  you can refer to the relevant information published by the Personal Data Protection Bureau (PDPB): https://www.dspdp.gov.mo/en/references_detail/article/kzw3p0kz.html

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued security vulnerability about Chrome browser.  This vulnerability is widely exploited.

• Please update to Google Chrome version 124.0.6367.201/.202 (Windows/ Mac) or later, 124.0.6367.201 (Linux) or later

For more details, please refer to: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), PuTTy recently issued security vulnerability about ECDSA private key. Attackers can exploit this vulnerability to restore the private key from signed messages and public key. When they have the private key, they can forge the signature and log in to any servers using that private key.

• Please update to PuTTy  0.80 later, FileZilla 3.66.5 later, WinSCP 6.3.2 later, TortoiseGit 2.15.0 later and TortoiseSVN 1.14.6 later.

For more details, please refer to:
https://bugzilla.redhat.com/show_bug.cgi?id=2275183
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office