Skip to content
Cybersecurity Threats Target University of York Community

Cybersecurity Threats Target University of York Community

First seen 19 Oct 2026, 23:50 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 01:52 UTC
  • •University of York faces multiple phishing threats targeting accounts.
  • •Fraudulent voicemail notifications and web push notifications are primary attack vectors.
  • •Students are warned against unsolicited academic support offers that request login credentials.

The University of York has reported multiple cybersecurity threats affecting staff and students, including phishing attacks via fraudulent voicemail notifications and web push notifications. Cybercriminals are sending calendar invitations with links to fake voicemail notifications, compromising user accounts when credentials are entered. Additionally, scams using web push notifications are tricking users into believing their devices are infected, redirecting them to malicious sites. Students have also received unsolicited messages promoting illegal academic support services that request university login details. The university has issued guidance to help users secure their accounts and urges immediate reporting of suspicious activities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
Cybersecurity threats reported
University of York warns staff and students about phishing campaigns targeting accounts through voicemail and web push notifications.
Thetab
2026-10-19
Guidance issued for account security
The university published guidance on its website to help staff and students secure their accounts against phishing attempts.
www.york.ac.uk

More articles in this cluster (2)

Following this threat?

Track University Of York in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What types of phishing attacks are occurring?
The attacks include fraudulent voicemail notifications and web push notifications that mislead users into entering their credentials.
How should I respond if I receive a suspicious email?
Report the suspicious email immediately to Cyber Security and do not click on any links or attachments.
What guidance has the university provided?
The university has published guidance on securing accounts and recognizing phishing attempts on its website.