Doublecheck your data: is it safely stored?



As HITS prepares for a CoreImage system update, we remind users to save all data to the cloud or other secure storage.

Clinical, Education, Research, Security, Services & Support

Trouble in two-factor paradise: Hackers double down on Duo scams


Duo, U-M’s two-factor authentication service, has become the latest technology targeted by hackers. Earlier this month, leaders in Michigan Medicine’s Information Assurance (MM:IA) team rang the alarm bell.

Daylight Saving Time Begins - Effect on MiChart: Sunday, March 12, 2 a.m.


Sunday, March 12 marks the beginning of Eastern Daylight-Saving Time (DST) which will result in skipping the hour from 2 a.m. to 3 a.m. Once the time change occurs, this means the MiChart downtime for the upgrade will begin at 3 a.m. 


For details on the impacts to MiChart, review the Spring 2023 - Daylight Saving Time (DST) document.

Clinical, Education, Research, Security, Services & Support

New monthly Cornerstone Learning report will enable Michigan Medicine leaders to track their teams' training completions


Starting March 1, a new Cornerstone Learning report (“Manager Digest”) will be emailed to all Michigan Medicine leaders automatically each month – whenever any of their direct reports has assigned training modules that are overdue.


MiChart System Upgrade Downtime - March 12


Sunday, March 12, 3 - 5 a.m., the Spring MiChart upgrade will occur. March 12 also marks the beginning of Eastern Daylight-Saving Time (DST) which will result in skipping the hour from 2 a.m. to 3 a.m. Once the time change occurs, this means the MiChart downtime will begin at 3 a.m.

Clinical, Education, Research, Security, Services & Support

HITS to upgrade/replace telephone equipment in multiple locations


Between now and fall 2023, Health Information Technology & Services (HITS) will replace approximately 8,750 telephones across 50 different Michigan Medicine locations.

Invoke Microsoft Security Advisory for LDAP Channel Binding and Signing


LDAP channel binding and LDAP signing provide ways to increase the security for communications between LDAP clients and Active Directory domain controllers.

ITS Information Assurance Advisory: Update to version 2.17.0 Apache Log4j


A zero-day exploit that was originally communicated through an IA Alert on December 10, 2021 is affecting the Apache Log4j utility that could result in remote code execution. This remains an active threat. 


ALERT: Patching Microsoft systems for 3 zero-day exploits


Three zero-day vulnerabilities in Windows systems could allow attackers to achieve remote code execution or SYSTEM privileges on targeted systems. Windows systems should be patched as soon as possible after needed testing.

ITS IA Notice: OpenSSL


This message is intended for U-M IT staff who are responsible for updating university systems. OpenSSL discovered eight security flaws, seven of which are memory-related. A timing bug and seven memory vulnerabilities were discovered.

Action required before January 25: Applications using Michigan Medicine SSO (SAML) Identity Provider Service


The Production IdP Signing certificate for the Michigan Medicine Web SSO (SAML) / Access Manager / Web login authentication service will be replaced on January 25 between 5:00 p.m. to 5:30 p.m. and the SAML metadata will be refreshed with the new signing cert info.

ITS IA Advisory: Upgrade Git to version 2.39.1


Vulnerabilities were discovered in Git version 2.39 and older that could allow attackers to execute remote code. Users should upgrade to Git version 2.39.1 immediately. 


New year, new M365 features!


Health Information Technology & Services (HITS) is pleased to announce new features and capabilities within Michigan Medicine’s Microsoft 365 (M365) environment designed to make your work experience even better and more productive!

Clinical, Education, Research, Services & Support

Update: Fax Server/AccuRoute Issues


Thank you to everyone for their patience and understanding over the last five weeks. The Document Management Services Team also want you to know that they hear you loud and clear and are doing absolutely everything they can to help resolve the issues the organization is experiencing with the fax server/AccuRoute WebApps.


Paging website upgrade


As of December 7, the internal paging website was upgraded to offer improved access and usability.


For complete information, see the Paging Website upgrade article (Requires login to view content

Clinical, Education, Research, Security, Services & Support

Academic Engagement holding in-person office hours December 6,7, & 8


Back by popular demand! The HITS Academic Engagement team is holding in-person/hybrid office hours next week to talk through your IT needs. Join us on the medical campus December 6 & 8 and at NCRC December 7. 

Education, Research

Action required for Identity Access Management Oracle database (IDTP) migration from Gold to Platinum Infrastructure by December 10


This message is intended for HITS staff whose applications/processes that use Identity Management Oracle database (IDTP). 

Nursing training curriculum mistakenly sent to ALL Michigan Medicine users


Early on November 19, 2022, a Cornerstone Learning assignment for the NURSING - Moderate Sedation and EtCO2 Monitoring - Biennial Recurrence (NURS-C70011) curriculum was accidentally sent to ALL Michigan Medicine users. 

Important security advisory–Unexpected confirmation emails


SUMMARY: U-M community members have reported receiving unexpected confirmation emails from email newsletters and listservs for which they did not subscribe.

Cornerstone Learning – A few reminders to help you be more successful


Since MLearning was replaced by Cornerstone Learning on Nov. 7, the new system has welcomed more than 7,000 unique visitors, and users have already successfully completed more than 13,000 online courses.

Services & Support

Cornerstone Learning is now live!


MLearning has been permanently retired to make way for Cornerstone Learning – a more modern, cloud-based platform designed with the needs of Michigan Medicine users in mind.

Reminder: MLearning is now retired! Cornerstone Learning goes live on Monday, November 7


MLearning has been retired. Its replacement – Cornerstone Learning – is scheduled to go live at approximately 7 a.m. on Monday, November 7.

Daylight Saving Time Ends – Effect on MiChart: Sunday, November 6 at 2 a.m.


This Sunday, November 6, marks the end of Daylight-Saving Time (DST) which will result in the hour between 1 a.m. and 2 a.m. occurring twice. In our time zone, Eastern Daylight-Saving Time (EDT) is ending, and we are returning to Eastern Standard Time (EST).


For details on the impacts to MiChart, review the Fall 2022 Daylight-Saving Time (DST) document.



ALERT: Patch OpenSSL versions 3.0 or later for critical vulnerability starting Nov. 1


This message is intended for U-M IT staff who are responsible for university systems running OpenSSL 3.0 or later.

So long, MLearning. Hello, Cornerstone Learning! Plan now for blackout period (Nov. 3-7), learn where to find resources + support


MLearning will retire for good on Thursday, November 3. Cornerstone learning will go live on Monday, November 7.

Clinical, Education, Research, Services & Support