Home

Fake Google and Cloudflare verification pages are tricking visitors into pasting malicious commands into their own computers — and the campaign has already hijacked 700+ education and tech websites.

A new malware campaign called ChocoPoC hides inside the Python package dependencies of fake GitHub proof-of-concept exploits, targeting the very researchers who test vulnerabilities. Texas IT security teams that clone PoC code should take note.

UT-RSOC Welcomes New Partners

A newly disclosed macOS flaw, CVE-2026-39118, let standard non-admin users silently disable CrowdStrike and Kandji endpoint protection. Here's what Texas institutions running Mac fleets need to know.

The "Cordyceps" vulnerability let anyone with a free GitHub account hijack CI/CD pipelines at Microsoft, Google and Apache. Texas campuses running their own GitHub Actions workflows should check for the same misconfiguration.

Google and Mandiant disclosed that a China-aligned group known as UNC6508 spent over a year undetected inside a U.S. medical research university's network, stealing REDCap credentials and quietly forwarding sensitive emails through a manipulated compliance rule.

A massive credential-harvesting campaign against Fortinet FortiGate VPN devices has exposed working logins for roughly 74,000 firewalls worldwide, and CISA says education is among the top-hit sectors. Here's what Texas IT teams need to do now.

A researcher published a working exploit for a critical Windows Defender privilege-escalation flaw hours after June's Patch Tuesday, and fully updated Windows 10 and 11 systems remain vulnerable with no patch yet available.

A zero-day flaw in Oracle PeopleSoft let the ShinyHunters extortion group breach more than 100 organizations before a patch existed, with universities bearing the brunt. Texas institutions running PeopleSoft should check exposure now.

The ShinyHunters extortion gang has compromised Oracle PeopleSoft servers at more than 100 organizations, with the education sector identified as the primary target. An emergency patch for a critical 9.8 CVSS vulnerability is now available and should be applied immediately.