Campus Alerts

The Contacts and Directories features in Cornell Qualtrics have changed unexpectedly. Cornell has been using what the vendor calls XM Directory Lite, which largely operates like the previous Qualtrics Contacts or Panels. The functionality instead currently resembles what Qualtrics calls XM Directory, which looks and operates differently.

The vendor has been contacted and is looking into the cause of the change and possible remediation options. If you are conducting research and the Directory feature change is interfering with your work, please put in a support request using the Cornell Qualtrics general support form. 

Microsoft’s May 2024 updates, released on May 14, fix three zero-day vulnerabilities in Microsoft Windows desktop and server operating systems. One zero-day vulnerability in the Desktop Window Manager component of Microsoft may allow privilege escalation with low effort and is confirmed by multiple sources as being exploited in known ransomware attacks by multiple threat actors. Patch now.
 
Certified Desktop customers:
Updates will be made available today with an installation deadline of 4:00 pm on Wednesday, May 22.

Users who do not have a managed computer should apply Windows updates as soon as possible. See “Microsoft – Update Windows” in the references below.

References:
Dark Reading: https://www.darkreading.com/vulnerabilities-threats/microsoft-windows-dwm-zero-day-mass-exploit  

Microsoft – MSRC – CVE-2024-30051: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051  

Microsoft – Update Windows: https://support.microsoft.com/en-us/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a