UCSF IT Technology

Cybercriminals have launched Okta-branded phishing attacks encouraging recipients to follow a link to resynchronize their Okta and Microsoft accounts.   Clicking on the link leads to a credential phishing kit that redirects the user to a lookalike Microsoft login page.

Google has released Chrome version 112.0.5615.121 to address an actively exploited zero-day vulnerability in Windows, macOS and Linux versions of the Google Chrome desktop browser. For a complete description of the vulnerabilities and affected systems go to Chrome Release Note.

Microsoft announced Windows 10 Home and Pro, Version 21H2 will reach end of service June 13, 2023. The software will no longer receive security updates after June 13, 2023For a complete description of the vulnerabilities and affected systems go to Windows 10 Home and Pro, Version 21H2.IT SecurityRead more about IT Security service offerings.

Cybercriminals have launched phishing attacks using apparently compromised SAP Concur and DocuSign accounts to distribute malicious emails.  The phishing lures use financial themes, such as an expense report on SAP Concur or a financial settlement document on DocuSign. The lures include malicious links.

Cybercriminals have launched phishing attacks using lures that impersonate Microsoft Teams meeting invites. The lures include a malicious link.  Clicking the malicious link leads to a credential phishing kit that redirects the user to a legitimate login page.

The US Federal Trade Commission has warned of AI-enhanced voice phishing (vishing) calls impersonating loved ones in distress. The calls use an AI system to create a believable clone of a loved one’s voice based off publicly accessible voice samples on platforms like YouTube, TikTok, or Instagram. The impersonated individual will claim to be in distress and ask for financial assistance, usually in the form of a wire transfer, cryptocurrency, or specific gift cards.