An email asking you to login and read a "Security Mail" is actually attempting to steal your UB credentials.
Red flags: How you can tell it is a fake
Email comes from a non buffalo.edu address.
Links in message go to a non-buffalo.edu address.
Web page may look like a UB page (don't be tricked sometimes the scammers copy the UB page exactly). The address of the Web page is not a UB address. When in doubt, always TYPE in the address of UB, www.buffalo.edu and start there. If you enter any information in the phishing page, you will be forwarded to an IT policies page.