(MJ)

The following journals are included in the license:

• JAMA Cardiology
• JAMA Dermatology
• JAMA Internal Medicine
• JAMA Neurology
• JAMA Oncology
• JAMA Ophthalmology
• JAMA Otolaryngology - Head & Neck Surgery
• JAMA Pediatrics
• JAMA Psychiatry
• JAMA Surgery

Hn

READING ACCESS

• Reading access to over 2,200 Elsevier journals (from 1995)
• Reading access to The Lancet
• Reading access for Cell Press

The journals can be searched via the EZB and the library catalogue. The contents are offered on the ScienceDirect platform. Make sure that you are accessing from the campus network before you start your search.

PUBLISHING

• Corresponding authors with affiliation to Ulm University or University Medical Center Ulm publish under a CC-BY license in the publisher's subscription journals at no additional cost. A list of titles is available online.
• Discounted publishing in the publisher's fully gold open access journals:
  • 20% discount in Elsevier's fully gold open access journals
  • 15% discount in Cell Press and The Lancet fully gold open access journals

For which articles does the DEAL agreement apply?

• Articles in subscription journals: Articles accepted for publication from 22.11.2023 will be published under the DEAL conditions and will receive a CC-BY license at no additional cost (date accepted).
• Articles in Fully Gold Open Access journals:
  • The date of submission (date submitted) applies here. All articles submitted from 22.11.2023 in this journal category will receive a discount.
  • The articles will be invoiced to the university quarterly by collective invoice.
  • The central funding conditions for Open Access funding continue to apply.
  • The authors' share of the APC will be passed on to the authors.

Further information

In accordance with the Open-Access-Resolution of Ulm University, authors are encouraged to use the CC-BY license in order to retain the exclusive rights of use to their own content. CC-BY is already specified as the standard for license selection. Please note that the exclusive rights of use to your own content are already transferred to the publisher with the CC-BY-NC license selection.

Authors at the University Medical Center Ulm: Authors of the Medical Faculty of Ulm University often publish under an affiliation to the University Medical Center Ulm. As an affiliated institution, the University Medical Center Ulm is co-administered by the university in order to ensure the smoothest possible publication process for medical articles.

Information page Open Access Funding

Queries by e-mail or by telephone +49 (0) 731 50 - 154 76

Hn

The emails are currently being sent via Moodle with the subject "Seminar veg. physiology discussion of the discussion questions". The content of the e-mail asks the recipient to open an external link. The link takes the recipient to a fake homepage and captures the access data entered. These can then be used for further attacks, for example.

How can you recognize these fake e-mails?

• Currently, the following subject line is being used, among others "Seminar veg. physiology discussion of the discussion questions"
• Check not only the sender's name, but also the email address for authenticity: max.mustermann@uni-ulm.de (move the mouse pointer slowly over the email address)
• Check all links that you receive by e-mail (move the mouse pointer slowly over the e-mail address)
• The content of the emails attempts to put pressure on the recipient to take action (in this case, to disclose access data)

What should you do if you receive such an e-mail?

• Do not open any unknown external links or file attachments.
• Do not enter any login data (user name and password).
• If you have already entered login data or opened an unknown attachment (e.g. in .html format), you must immediately change the corresponding password(s) and arrange for a virus scanner scan. Please pay attention to any conspicuous behavior of your account/workstation computer. If you notice any suspicious behavior, please report it immediately to helpdesk(at)uni-ulm.de or cert(at)uni-ulm.de

Please note the general information on the secure handling of e-mails on the kiz information security portal.

Hn

Which versions are affected:

• Apache ActiveMQ 5.18.0 vor 5.18.3
• Apache ActiveMQ 5.17.0 vor 5.17.6
• Apache ActiveMQ 5.16.0 vor 5.16.7
• Apache ActiveMQ vor 5.15.16
• Apache ActiveMQ Legacy OpenWire Module 5.18.0 vor 5.18.3
• Apache ActiveMQ Legacy OpenWire Module 5.17.0 vor 5.17.6
• Apache ActiveMQ Legacy OpenWire Module 5.16.0 vor 5.16.7
• Apache ActiveMQ Legacy OpenWire Module 5.8.0 vor 5.15.16

What needs to be done:

Patches are already available to fix these vulnerabilities. A detailed overview of IOCs (Indicators of Compromise) and further information can be found in the attached BSI document.

The developer "Mattermost Inc." released updates on Oct 2nd & 3rd that fix several security-critical vulnerabilities in the products mobile & desktop app for "Mattermost".

Assessment:

The combination of closed vulnerabilities was given a CVSS-Basse score of 8.8 by the vendor.

Recommended Action:

    Perform the latest update
    Regularly check for available updates (possibly activate the automatic update)
    Subscribing to the security newsletter of the manufacturer

Links:
https://mattermost.com/security-updates/

At the end of the year, we will decide which Thieme e-books the kiz will offer in 2024 on the basis of usage statistics, user reactions, but also in accordance with our financial possibilities. Feedback and requests can be sent to our helpdesk.

(Hn)

This message concerns you if you use the Zoom Service of the University of Ulm and your computer is NOT administered by the kiz. If you are using version 5.15.6 or newer (or no desktop client at all), or a machine administered by the kiz (e.g. in the ZUV area), you can ignore the rest of this message.

Virtually all older Zoom desktop clients have several serious security problems. We will therefore administratively disable the use of older versions on

Monday, 14.08.2023.

If you are still using a version older than 5.15.6 at that time, you will not be able to run any more Zoom meetings with your desktop client until you update. We recommend updating to the latest version (currently this is 5.15.6).

    How do I determine the version number of my Zoom Desktop Client?
    - Start your Zoom Desktop Client.
    - Click on your profile picture in the top right corner, then <help> / <About Zoom>.
    (if you don't have a profile picture, you'll probably see your initials there).

    How do I perform the update?
    - Launch your Zoom desktop client.
    - Click on your profile picture in the top right corner, then <check for updates>.
    (if you don't have a profile picture, then you'll probably see your initials there).

If the menu item <check for updates> does not show up for you, then you have a really! old version and please download the latest version of the "Zoom Client for Meetings" from uni-ulm.zoom.us/download.

If you manage your computer yourself, you can configure your Zoom Client for automatic updates: blog.zoom.us/get-automatic-updates-in-the-zoom-client/

kiz, Zoom-Admin of the University of Ulm

• Philosophical Transactions of the Royal Society series A
• Philosophical Transactions of the Royal Society series B
• Proceedings of the Royal Society series A
• Proceedings of the Royal Society series B
• Biology Letters
• Journal of the Royal Society Interface
• Interface Focus
• Notes & Records

Hn

The e-mails are currently being sent, for example, by "Uni-ulm WEB-INFO". The content of the email informs the recipient that their email password is supposedly expiring and needs to be renewed. A link leads the recipient to a fake homepage and fishes off entered access data. These can then be used for further attacks, for example.

How can you recognize these fake emails?

• Check not only the sender's name, but also the e-mail address for authenticity: max.mustermann@uni-ulm.de.
• The contents of the e-mails try to put pressure on the recipients in order to trigger an action (in this case, the disclosure of access data)

What should you do if you receive such an e-mail?

• Do not open any unknown external links or file attachments.
• Do not enter any login data (username and password).
• If you have already entered login data or opened an unknown attachment (e.g. in .html format), you must immediately change the corresponding password(s) and arrange for a virus scanner check. Please pay attention to any suspicious behavior of your account/workstation. If you notice any suspicious behavior, please report it immediately to helpdesk(at)uni-ulm.de or cert(at)uni-ulm.de.

Please refer to the general information on secure e-mail handling on the kiz information security portal.

(FB)

If you are running such a system, please read the attached document carefully and apply the patch immediately if necessary.

Update:
As an immediate measure, port 427 (SLP) on the external firewall has been closed. Please direct questions about this topic to: cert(at)uni-ulm.de

FB

Those who wish to apply for OA funding will have the option of applying for funding via our web form. The same funding regulations apply as before; the funding conditions and information on the reimbursement procedure can be found on our open access funding website.

Hn

Hn

https://eref.thieme.de/lehrbuecher

At the end of the year, we will decide which Thieme e-books the kiz will offer in 2023 on the basis of usage statistics, user reactions, and in coordination with our financial possibilities.
Feedback and requests can be sent to our helpdesk.

(Hn)

Ms

Ms

1. You cannot find your organisational unit in Grouper? Since creating a new organisational unit in Grouper is a manual process, it is possible that your organisational unit has not yet been created. Please contact the Helpdesk.
2. You want to delegate the right to manage groups? If you are logged into Grouper as the owner of an organisational unit and are in the folder of your organisational unit, you can use "Add members" to add any persons to the ...Admins group in the etc subfolder.
3. Where can I find the groups in the cloudstore? When you share a file in the cloudstore, you can also select your own group instead of a single person. For an institute, these always start with "org.inst".

• The library catalog::local contains the Library's holdings including licensed electronic resources.
• The library catalog::global enables you to simultaneously search local holdings and scores of article databases from international information providers.

Try out our new global catalog which allows a more extensive literature search.

Service-Point East (Shop)

The Helpdesk will also operate on reduced contact hours in August
Monday to Friday 8 a.m. - 5 p.m.