IT Professionals: The University Information Security Office would like to bring attention to a security concern associated with iOS (and to a very narrow extent, macOS): iOS devices with manually configured wireless network settings may be revealing the passphrase(s) of account(s) used to sign into those wireless networks to anyone able to use the devices…. Read more »
Mailings
Copies of mailings sent to the IT Pro community email lists.
Notice of Critical Vulnerability in Apache Struts
IT Professionals: The University Information Security Office would like to bring to your attention the critical vulnerability CVE-2023-50164 within Apache Struts, an open-source Model-View-Controller (MVC) framework. Attackers who successfully exploit this vulnerability can manipulate file upload parameters to potentially upload a malicious file that allows them to run remote code execution. Affected versions are Apache… Read more »
Respondus LockDown Browser (managed) minimum version
IT Professionals, Starting January 1, 2024, at 12:00am ET, all versions of Respondus LockDown Browser for Windows and macOS that are older than 2.1.1.00 (released on June 2, 2023) will cease to function. Affected IT Pros can download the latest version from IUware (link restricted to IT Pros who use this software). This update only… Read more »
UISO guidance on disabling S/MIME
IT Professionals, Historically, digital certificates were used at IU to secure email communications, but with newly enabled security features in Microsoft Exchange, they are no longer necessary; see Knowledge Base article About Microsoft 365 security. Digital certificates interfere with and bypass IU’s built-in Office Message Encryption service: About Office Message Encryption (OME). Following a recent… Read more »
List of archived Microsoft Teams
IT Professionals, Following the November 15 deadline to register Teams in Secure Storage, we now have a list of the Teams that have been archived. If you need to restore an archived Team, see Delete or archive a team in Microsoft Teams at IU. The day after you restore a Team, you can register it… Read more »
EdCert spring 2024 schedule plus a new course
IT Professionals, We are pleased to announce that registration is open for the EdCert spring 2024 semester. Aimed at raising the technical skill set of the IU community, the EdCert offers IT courses to IU employees at fixed pricing substantially below costs to the public. The EdCert’s Spring semester includes courses from fundamental to intermediate… Read more »
Respondus LockDown Browser (managed) minimum version
IT Professionals, Around Dec 31, 2023 (an exact date has not been provided), all versions of LockDown Browser for Windows and macOS that are older than 2.1.1.00 (released on June 2, 2023) will cease to function. Affected IT Pros can download the latest version from IUware (link restricted to IT Pros who use this software)…. Read more »
Apple Office Hours – November 15 & 16
IT Professionals: Apple invites you to Office Hours on Wednesday, November 15, at 2pm ET or Thursday, November 16, at 10am ET. The sessions will cover the same material. This month Apple has invited Jamf to discuss some of the features and products that can help IT in our changing security landscape: How securing Apple… Read more »
Infoshare Invite – IT Leadership Community Overview – November 16
IT Professionals: Please join us Thursday, November 16, at 2:30PM ET for an infoshare presented by Kris Nicola and David Goldberg of the IT Leadership Community. They will provide an overview of the opportunities offered by ITLC that include leadership training (both formal and informal) for individuals that have an interest in continuing the growth… Read more »
LiveWhale: API V2 responses
IT Professionals, On Wednesday, November 15, LiveWhale will stop returning API V1 responses and will instead return API V2 responses to all API requests. Customers still using API V1 will need to start using API V2. This follows an October 11 change in which LiveWhale started limiting API V1 responses to 5 events each due… Read more »