Information Security Advisory A recently disclosed vulnerability in Zoom Workplace for Windows ( CVE‑2026‑30903) allows unauthenticated remote attackers to escalate privileges by exploiting improper control of file names or paths. Severity level: CVSS Score: 9.6/Critical Description: Zoom Workplace for Windows includes a Mail feature that processes user-supplied file references. In vulnerable versions, this […]
Service Advisory Please share the following with your teams. Service Outage: MyApps service hosts the classic SIS applications and allows designated staff community to launch them remotely. We had an unexpected service outage this morning, during which the classic SIS applications will not launch via the Launch Remote option. Outage Window: Start: Thursday March […]
Service Advisory Please share the following with your teams. Service Outage: MyApps service hosts the classic SIS applications and allows designated staff community to launch them remotely. We had an unexpected service outage this morning, during which the classic SIS applications will not launch via the Launch Remote option. Outage Window: Start: Thursday March […]
York University has positioned itself at the forefront of AI adoption in Canadian higher education, thanks in no small part to the launch of YU AURA. While YU AURA can be used by anyone at York, one of its standout features is its ability to empower research. Faculty can use the AURA bot to act as their very […]
Service Advisory Please share the following with your teams. Service Maintenance: Please be advised that we will be deploying TRT project on Saturday February 28, 2026, and there will be a downtime on HR Production systems. Outage window: Start: Saturday February 28, 2026 8:00 a.m. End: Saturday February 28, 2026 6:00 p.m. Impact/Details: […]
Information Security Advisory A newly disclosed Apple zero‑day vulnerability (CVE‑2026‑20700) allows attackers with memory‑write capabilities to execute arbitrary code on affected devices. Severity level:- CVSS Score: 7.8/high Description:- CVE‑2026‑20700 is a memory corruption vulnerability affecting Apple’s dyld (Dynamic Link Editor) component. Dyld is responsible for loading dynamic libraries and linking application code within […]
Information Security Advisory A recently disclosed Windows Shell vulnerability (CVE‑2026‑21510) allows bypass critical security features by exploiting improper validation in Windows Shell components. Severity level CVSS Score: 8.8/high Description: CVE‑2026‑21510 is a protection mechanism failure in Microsoft Windows Shell that enables an unauthorized attacker to bypass built‑in security features over a network. The […]
Information Security Advisory A recently discovered vulnerability in the Kubernetes ingress-nginx controller (CVE‑2026‑24512) allows attackers to execute arbitrary code by exploiting improper sanitization of user‑supplied ingress path data. Severity level CVSS Score: 8.8/high Description: Ingress‑NGINX is a widely used open‑source Kubernetes ingress controller responsible for managing inbound traffic to cluster services. A vulnerability […]
Service Advisory Please share the following with your teams. Service Maintenance: MyApps Scheduled Maintenance Window: Start: Thursday February 19, 2026 6:00 a.m. End: Thursday February 19, 2026 8:00 a.m. Impact/Details: UIT teams will upgrade to latest vendor release to improve service reliability. Service will continue to be online, however in degraded mode during the maintenance window. […]
Service Advisory Please share the following with your teams. Service Maintenance: Unified Print Management Scheduled Maintenance Window: Start: Thursday February 19, 2026 6:00 p.m. End: Thursday February 19, 2026 11:00 p.m Impact/Details: Print services in the Administrative offices, Faculty student labs and Libraries will not be available. UIT teams will upgrade service to latest vendor release […]