News

CVE-2026-111497 Brotli out-of-bounds write

This is a notice from the Information Security Office to alert you to a critical vulnerability that impacts the Brotli compression decoder, a library used by NodeJS and Python. Please share this alert internally with IT admins and service owners who run the affected products so they are aware and...

PHP Critical Remote Code Execution Vulnerabilities

ISO is aware of two critical remote code execution vulnerabilities affecting PHP. Please share this alert with IT administrators, web hosting teams, and service owners who manage systems running PHP so they can prepare to take action.

Important Notice: Temporary Website and Web Service Outage

We are temporarily taking several of our websites and online services offline to protect our systems from a serious security flaw in a widely used web technology called PHP.

Why is this happening?

Security experts recently discovered major security flaws in PHP, an underlying tool that powers many...

Problems with your ID - Phishing Email

We have received several reports of a fake email spoofed to look like it is coming from a campus department requesting your CalNet login to 'fix' problems with your campus ID.

Check out our 2026 Cybersecurity Handbook for Students

We've released the latest edition of Cybersecurity Handbook for Students, ( plain text version), offering undergraduates, graduate students, and international scholars a guide to navigating digital and physical safety on campus. The updated handbook delivers crucial strategies to defend against...