LFS Today May 3, 2021

Advisory: Apple Patches Critical macOS Vulnerability Exploited in the Wild – CVE-2021-30657

Read full details.

The UBC Cybersecurity has learned of an actively-exploited critical 0-Day vulnerability in macOS versions prior to macOS 11.3. The zero-day flaw (CVE-2021-30657) has been observed being used in the wild by a variant of the Shlayer adware dropper as early as January 9th, 2021.

To take advantage of this logic issue, an attacker must specially craft a macOS app with a script payload and missing ‘info.pfile’ file in the bundle.

If successfully exploited, a malicious application can be executed on a vulnerable system without being not checked by Gatekeeper, the macOS’s security feature that verifies downloaded applications before allowing them to run, and bypass File Quarantine and Application Notarization protections as well.

This vulnerability is rated as an overall CRITICAL risk. Apple has released patches to mitigate this vulnerability. Please patch within 72 hours of patches becoming available for deployment.

A script has been published to check for presence of malicious apps on the system (link in references). If the script detects possible presence of malicious apps on the system, please report findings to security@ubc.ca.

Fixed software version:

Apply the latest patches from Apple to mitigate this security risk.

References: macOS Big Sur 11.3 security update:
hxxps://support.apple.com/en-gb/HT212325

Apple Security Updates:
hxxps://support.apple.com/en-us/HT201222

Use the script (see references) to verify no malicious apps are present on the system. Report any positive hits to security@ubc.ca

Script to check for presence of malicious apps:
hxxps://objective-see.com/downloads/blog/blog_0x64/scan.py

Contact the Learning Centre if you have any questions or need support.

Building a More Inclusive UBC: Virtual Forum – May 7

On May 7, we invite you to join us for a virtual forum on UBC’s Inclusion Action Plan to hear about ways that UBC is activating inclusion across the university.

This virtual forum is open to students, faculty and staff. It is an opportunity to learn about UBC’s Inclusion Action Plan, hear leadership perspectives, priorities and efforts, and to participate in a live Q&A with our panelists.

About the event
Hosted by President Santa J. Ono and moderated by Dr. Handel Kashope Wright, participants will hear from the following UBC leaders:

• Andrew Szeri, Provost and Vice-President, Academic, UBC Vancouver
• Ananya Mukherjee Reed, Provost and Vice-President, Academic, UBC Okanagan
• Marcia Buchholz, Vice-President, Human Resources
• Ainsley Carry, Vice-President, Students
• Sara-Jane Finlay, Associate Vice-President, Equity & Inclusion

Date: Friday, May 7
Time: 1pm – 2:30pm
Location: Zoom
RSVP at https://ubc.zoom.us/webinar/register/WN_47npHDjjS9K_emt4EDk8Uw

About UBC’s Inclusion Action Plan

Building Inclusive UBC: An Inclusion Action Plan, presents an opportunity for UBC to continue developing its potential as a ground-breaking institution, creating global influence through its equitable, diverse, and inclusive campuses.

The emerging research is unequivocal: diversity enhances innovation, and inclusive spaces are required to ensure that diverse teams are able to collaborate effectively. As the world becomes more connected, and UBC focuses on contributing to global citizenship and finding solutions to complex issues, this plan supports our continuing progress.

The action plan is designed to advance five goal areas:

• Recruitment, retention and success
• Capacity building
• Systems change
• Learning, research, and engagement
• Accountability

To support the activation of inclusion, the following resources are available:

• Activate Inclusion: Equity Enhancement Fund
• UBC Anti-Racism Initiatives Fund
• Activating Inclusion Toolkit

To access the full plan and associated resources, visit https://equity.ubc.ca/iap.

UBC Botanical Garden: Join Us for Biodiversity Days

Virtual and family events to celebrate and learn more about biodiversity.

In honor of the UN International Day for Biological Diversity (May 22), this month we are hosting a series of virtual and family experiences to celebrate biodiversity and amplify its importance for current and future generations. Join us and learn more about how to protect our planet’s biodiversity and live in harmony with nature.

Learn more about the events and why they are important on our blog post about Biodiversity Days. 

Experience at UBC Botanical Garden 
Family Nature Walk at UBC Botanical Garden
May 22 and Sun. May 23, 2021 @ 10 am – 3 pm

Virtual Events
Plant Propagation for the People: A Workshop and Invitation to Participate
Saturday, May 15, 2021 @ 10:30 am – 12 pm
UBC Biodiversity and Nature-Based Solutions Showcase
Wednesday, May 19th, 2021 @ 11:30 am – 1:00  pm

Learn with Us
Vancouver Bird Celebration | May 8-16, 2021
BC Bioblitz in Schools: Monitoring Pollinators and their Plants | May-June 2021

UBC Emeritus College Newsletter now Available

The April issue of the UBC Emeritus College newsletter is available online with:

• Announcement of the Annual General Meeting on Wednesday, May 19 at 1:00 pm on Zoom.  Awards Ceremony for President’s Award for Distinguished Service by UBC Emeriti and the new UBC Emeritus College Award for Excellence in Innovative and Creative Endeavours.  Presentation with Q&A by Prof. Bruce Jakosky (U of Colorado)  Mars Exploration – 2021 and Beyond.
• A letter from outgoing Principal, Graeme Wynn
• Announcement of Emeritus College Subsidies for Scholarly Activities
• Johnson Inc. is once again offering scholarships to the children and grandchildren of members of the Emeritus College
• A Zoom talk on Medically Assisted Dying, by Dr. Derryck Smith on Thursday, May 13
• Call for participation in an Emeritus College forum on philanthropy and volunteerism
• Special Interest Groups: Film Group, Photo Group, Travel Group, and Poetic Odysseys next gathering features a book launch of Pandemic Poetry
• Call for interest in a new Special Interest Group – The Groves of Academe
• … and other interesting facts and news.

Just click on the link and enjoy the read!

Check our calendar for upcoming events or catch up with videos of events you might have missed.

CityAge’s Future of Food: Data to Drive Better Outcomes

Delivering a much more connected, transparent ecosystem will unleash billions of dollars in value and strengthen agriculture markets across the United States and Canada. It will also improve food traceability, streamline operations and provide consumers with better quality, fresher food.

Join us to learn how to be part of the leaders in the future of food building an integrated industry to benefit everyone involved. View speakers and the agenda.

Topics include:

• Space Data: How new tools, on land and in the sky, are providing real-time insights into risk assessment, what to grow, where to grow, and for how much.
• Farm and Food Input Management: How modern farms and agri-business can access real-time data to manage their inventories and increase efficiency, production and yields.
• Digitizing Farms: A look at what’s needed to accelerate the integration of technology and data use on farms across North America.
• Linking the data: Real insight comes from sharing and interoperability. How we can work together to remove barriers and improve data sharing regulations that benefit us all.

Date:  May 6, 2021
Time:  11:30-1:00 pm (ET)
To Register: Click here.