Recently, several major cybersecurity incidents have been reported both domestically and internationally, including critical security vulnerabilities in PHP-based web systems and ransomware attacks targeting NAS (Network Attached Storage) devices. Attackers may exploit unpatched systems or improper security configurations to gain unauthorized access, potentially resulting in website service disruptions, data breaches, or file encryption, thereby affecting daily operations.

To reduce the risk of cybersecurity incidents, all faculty and staff are reminded to remain vigilant and follow the security recommendations outlined below.

1. Pay Attention to Website System Vulnerabilities

Recently, two critical remote code execution (RCE) vulnerabilities have been identified in the PHP core: CVE-2026-109618 and CVE-2026-109619. Attackers may exploit these vulnerabilities to execute malicious code remotely, potentially compromising websites or servers.

Website and system administrators in each unit are urged to promptly check their PHP versions, determine whether their systems are affected, and apply the official security updates. Units using outdated or unsupported versions should plan and carry out upgrades as soon as possible.

2. Strengthen NAS Security and Protect Important Data

Recent cybersecurity reports indicate that some NAS devices have been targeted by ransomware attacks. Attackers exploit unpatched security vulnerabilities to gain access to these devices, encrypting stored files and preventing users from accessing their data.

All units are requested to inspect their NAS devices and follow the security recommendations below:

1. Regularly check device firmware and system versions, and update them to the latest security releases provided by the manufacturer.
2. Avoid exposing NAS management interfaces directly to the Internet. Disable unnecessary external connections and remote management services.
3. Back up important data regularly and maintain offline or off-site backups to prevent backup data from being compromised along with the original files in the event of an attack.

3. Follow Daily Information Security Best Practices

1. Regularly update computer operating systems, applications, and antivirus software. Avoid using unsupported software or versions with known security vulnerabilities.
2. Do not click suspicious links or open attachments from unknown or untrusted sources. Be cautious of suspicious messages requesting account credentials, file downloads, or identity verification.
3. Protect your personal accounts and passwords. Avoid using weak or reused passwords, and enable multi-factor authentication (MFA) whenever available.
4. Regularly back up important work-related data and verify that backups can be successfully restored.

4. Reporting Security Incidents

If you notice unusual login activity, files being modified or encrypted in large quantities, ransom messages appearing on your devices, or suspicious phishing emails, do not click any suspicious links or delete relevant records. Please notify the Information Technology Office as soon as possible for assistance.

If a device is suspected of being infected with ransomware, disconnect it from the network immediately to prevent the threat from spreading further.

Information security is a shared responsibility. All faculty and staff are urged to remain vigilant and follow these security practices to help protect the University's information systems and important data.