Dear colleagues, As cyber threats targeting higher education continue to increase, York University is taking steps to strengthen the security standards applied to all University-owned computers. Effective June 22, 2026, all University-owned computers must meet a defined Security Baseline that specifies the minimum set of protections to safeguard University systems, research, and data. This baseline […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-86950) affects Apple iOS, iPadOS, and macOS and may allow an attacker to execute arbitrary code by convincing a user to process a specially crafted file. Severity level: CVSS Score: 8.8/High Description: CVE-2026-86950 is an out-of-bounds write vulnerability in Apple's CoreGraphics framework. Processing a maliciously crafted […]
Service Advisory Please share the following with your teams. Service Maintenance: Unified Print Management w/ PaperCut Scheduled Maintenance Window: Start: Wednesday October 14, 2026 6:00 PM End: Wednesday October 14, 2026 11:00 PM Impact/Details: UIT teams will upgrade service to latest vendor release to improve service reliability. Print services in the Administrative offices, Faculty student labs and Libraries […]
Service Advisory Please share the following with your teams. Service Maintenance: Central LabStats Maintenance window: Start: Wednesday October 14, 2026 10:00 AM End: Wednesday October 14, 2026 11:59 AM Impact/Details: UIT teams will upgrade service to latest vendor release. Lab usage stats in the Faculty student labs will be paused. Real-time availability of lab computers […]
Information Security Advisory A recently disclosed set of vulnerabilities (CVE-2026-88771 and CVE-2026-88772) affects Citrix NetScaler ADC and Citrix NetScaler Gateway and may allow unauthenticated remote attackers to execute arbitrary code on vulnerable appliances. Severity level: CVSS Score: 9.5/Critical. Description: CVE-2026-88771 is an improper input validation vulnerability in Citrix NetScaler ADC and NetScaler Gateway. […]
Service Advisory Please share the following with your teams. Service Maintenance: Unified Apple Device Management w/ Jamf Maintenance window: Start: Thursday October 15, 2026 10:00 AM End: Thursday October 15, 2026 11:59 AM Impact/Details: UIT teams will transition single sign-on (SSO) for Jamf IT administrators from SAML-Based to OIDC-Based. Jamf IT administrators will be required […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-80521) affects the Linux kernel AF_UNIX socket subsystem and may allow an attacker to escape a container and obtain root privileges on the host system. Severity level: CVSS Score: 7.8/High Description: CVE-2026-80521 is a use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem caused by a […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-80521) affects the Linux kernel AF_UNIX socket subsystem and may allow an attacker to escape a container and obtain root privileges on the host system. Severity level: CVSS Score: 7.8/High Description: CVE-2026-80521 is a use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem caused by a […]
Service Advisory Please share the following with your teams. Scheduled Outage: YU Learn service (https://yulearn.yorku.ca) Scheduled Date/Time of Service Outage: Start: Wednesday, October 7, 2026 7:00 AM End: Wednesday, October 7, 2026 8:30 AM Details and Impact: UIT will be conducting system maintenance and back end updates. Users will not have access to YU […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-87902) affects WordPress Core and may allow an unauthenticated remote attacker to achieve remote code execution (RCE) on vulnerable WordPress sites when specific theme and server conditions are present. Severity level: CVSS Score: 9.2/Critical. Description: CVE-2026-87902 is a critical path traversal vulnerability in WordPress Core's get_page_template() […]
Service Advisory Please share the following with your teams. Service Maintenance: Central SCCM Maintenance window: Start Date/Time: Wednesday October 14, 2026 8:00 a.m. End Date/Time: Thursday October 15, 2026 5:00 p.m. Impact/Details: UIT teams will complete necessary server OS and database upgrades. Central SCCM will not be available to deploy Windows OS and application packages […]