ITS has blocked malicious links in spam messages that users at Weill Cornell may have received in their inboxes. Some users have received the following messages:

Spam Message #1:

From: Weill Cornell Medical College (This sender may vary.)
Date: May 28, 2014 at 4:04:55 AM EDT
To: Undisclosed recipients:;
Subject: Re

your account has been disabled due to possible login errors detected on your account from an unrecognised
Device in South Africa, Johannesburg (IP=41.150.142.100)

Earlier this month, we informed you about Microsoft's decision to cease all support for their Windows XP operating system. As a result, ITS is helping users still on XP upgrade to Windows 7. One of the main reasons for this is to ensure all of the computers connected to our network are up-to-date with security protocols that ITS has established to prevent malicious attacks.

Here is some information you need to know about Windows 7 and your online security at Weill Cornell.

What are the risks of using Windows XP?

If you travel frequently to different campuses for business or research, you'll soon be able to access wireless Internet with ease.

This summer, ITS will be launching eduroam, a wireless access service used by thousands of educational institutions in the United States and worldwide. When you visit a participating institution, you'll be able to obtain wireless access by using your own WCMC credentials. No complicated setups. No need to memorize different user names and passwords.

eduroam Benefits

A spam message has recently appeared in some users' WCMC email accounts attempting to gather information on passwords. The message reads as follows:

From: WCMC Alert (This address may vary.)
Date: May 9, 2014 at 8:23:06 AM EDT
To: Recipients
Subject: Email Update.

Dear User,
Please validate your account. To perform this action CLICK HERE

Thank you.
©2014 Weill Cornell Medical College.

ITS is aware of issues affecting our Electronic Routing Form (ERF) system used by our Weill Cornell Research community. Issues with our ERF server have created downtime periods when users are unable to access the site.

We apologize for the disruptions you may have experienced as a result. ITS is currently analyzing the situation and determining the best course of action to decrease performance issues in ERF. Unfortunately, there is no set timeframe on when we expect a resolution, but we will continue to update the research community on our progress.

Update: WTMS has been retired and replaced with LMS.

Microsoft released Security Advisory 2963983 regarding an issue that affects Microsoft Internet Explorer versions 6 through 11.

As a follow-up to this week's announcement about the Heartbleed Bug, ITS has been researching and gathering information around the bug's impact on the security of WCMC staff and information systems.

How will this affect you?
We are continuing the monitor the situation, but at this time, it appears that the impact on WCMC systems has been small. Therefore, we are not requiring that WCMC users change their main password (the password used with your CWID for most systems). However, it is considered a best practice to change passwords

ITS is aware of a security issue known as the "Heartbleed Bug." Heartbleed is a flaw in OpenSSL, which is used to encrypt data on a majority of websites, including WCMC sites. This vulnerability allows hackers to obtain the secret keys used to encrypt web traffic and can expose usernames, passwords and other sensitive data.

How will this affect you?

ITS is excited to announce the upcoming release of the Weill Training Management System, a new addition to the Weill Business Gateway to manage and deliver training and development.The system will officially launch as a pilot on April 28, 2014 for Weill Cornell employees.

Why Weill Training Management System?
The Weill Training Management System will offer a convenient way for you to register for and take training. You can easily self-register for and reschedule instructor-led training, as well as take self-paced courses online.