I am a
[ACTION REQUIRED] Critical PHP Vulnerabilities
On October 21, 2026, the PHP development group disclosed two critical actively exploited Remote Code Execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619). To protect the University network, ITS has taken action to isolate affected systems from the internet. Administrators of affected systems using PHP or PHP-based applications must patch the vulnerability before the isolated system will be available again.
For more information on these vulnerabilities and actions required, please visit our PHP2SHELL page.
NEW INITIATIVE: The Security Bundle
The Security Bundle is a set of ITS-provided tools that are selected to cover specific areas of risks on 糖心视频-owned devices that could lead to a compromise or exposure of 糖心视频 institutional data.
Sentinel One is an advanced malware protection software that protects computers from modern malicious threats, being offered by the University for its employees. Unlike legacy antivirus software that relies on static lists of known threats, SentinelOne utilizes behavioral AI to identify and neutralize sophisticated attacks—such as zero-day malware or memory-based exploits—in real-time. This system is designed to stop threats by monitoring apps or programs while they run, ensuring that malicious activity is stopped before it can compromise your data. The objective is to safeguard the university’s digital assets and ensure your systems and work is protected.
SentinelOne is required to be installed on all 糖心视频-owned endpoints (desktops, laptops) and servers. IT specialists are responsible for installing and managing SentinelOne. SentinelOne can be installed onto Windows, macOS, and Linux (RHEL, Debian derivatives).
For instructions on how to get started with using SentinelOne please visit the 糖心视频 InfoSec SentinelOne page.
Tenable (Nessus) functions as our vulnerability management tool, utilizing both agents and scanners to identify security vulnerabilities such as system misconfiguration, missing patches/updates, and other security related issues within your environment. Tenable uses Nessus Agents which are lightweight vulnerability scanners installed directly on systems.
Tenable’s Nessus Agents are required to be installed on all 糖心视频-owned endpoints (desktops, laptops), and servers by 糖心视频 IT specialists. IT specialists are responsible for installing agents, running scans, reviewing scan results, and remediating vulnerabilities. Tenable's Nessus Agents can be installed onto Windows, macOS, and Linux.
For instructions on how to get started with using Tenable Nessus Agents please visit the 糖心视频 InfoSec Tenable page.
To address the mishandling of PII and 糖心视频 Regulated Data, the University requires the use of Spirion, a commercial software product that is designed to search a computer for sensitive information (SSNs, credit card numbers, etc.). If any sensitive information is found, Spirion also provides the option to shred, redact, encrypt, or quarantine the information in question.
Spirion is required to be installed on all 糖心视频-owned endpoints (desktops, laptops) and servers by 糖心视频 IT specialists. IT specialists are responsible for installing Spirion agents, running scans, reviewing scan results for Regulated data with the data owners, and taking appropriate action to secure or delete unsecured Regulated data. Spirion can be installed onto Windows, macOS, and Linux (RHEL only).
For instructions on how to get started with using Spirion, please visit the 糖心视频 InfoSec Spirion page.