Get Smart! Mitigating Risks in Connected Devices

original post by Kim Milford, EDUCAUSE   Smart/IoT devices may be the panacea for consumer convenience. Do you want to know and change the temperature of your house or even your fridge remotely? There’s an app for that. Such devices also raise extreme privacy concerns about the data collected about you. Devices can track or […]

How Can Higher Ed Better Prepare Cybersecurity Students for a Hot Job Market?

original post by Tom Humbarger, EDUCAUSE   Behind every new report of a data breach, data leak, or computer hack is a company scrambling to put out the fire, which is great news for job seekers or soon-to-graduate students with cybersecurity skills. Unfortunately, this is bad news for most companies because there is currently an […]

The IT Team Can’t Do It Alone—Cybersecurity Is Everyone’s Responsibility

original post by Chad Tracy, EDUCAUSE   Did you know? In 2017 the education industry (which includes K–12 and higher education institutions) had 7,837,781 records breached in 35 events. To put that into perspective, the healthcare industry had 6,058,989 records breached in 428 events, and the retail industry had 123,652,526 records beached across 33 events. (See Privacy […]

Information Security To Go!

original post by Ben Woelk and Joanna Grama, EDUCAUSE   Many people love the adventure that traveling provides: meeting new people, seeing new places, and having new experiences are part of the allure. Technology makes it easier than ever to satisfy our wanderlust. We can use our connected devices to discover the exotic locales we […]

Understanding the Basics of Online Safety and Security

original post by Christina Bonds, EDUCAUSE   Shopping, surfing, banking, gaming, and connecting Internet of Things devices such as toasters and refrigerators are some of the many actions performed each minute in cyberspace. These common everyday activities carry the cyber threats of social engineering to gain unauthorized access to data, identity theft, bullying, location tracking, […]

Keeping Tabs on Mobile Devices

original post by Linda Ludwig, EDUCAUSE   With an increasing amount of sensitive data being stored on personal devices, the value and mobility of smartphones, tablets, and laptops make them appealing and easy targets. These simple tips will help you be prepared in case your mobile device is stolen or misplaced. Encrypt sensitive information. Add a […]

Cryptocurrencies—Look Before You Leap!

original post by Eric Weakland, EDUCAUSE   Cryptocurrency comes under many names. You have probably read about some of the most popular types of cryptocurrencies such as Bitcoin, Litecoin, and Ethereum. Cryptocurrencies are increasingly popular alternatives for online payments. Before converting real dollars, euros, pounds, or other traditional currencies into ₿ (the symbol for Bitcoin, […]

2FA—Control in the Palm of Your Hand

original post by Sandy Silk, EDUCAUSE   Wouldn’t it be nice if your accounts could let you know when someone new is trying to get into them? Even better, wouldn’t it be terrific to make a stolen password useless to others? Were you tricked into revealing your password through a phishing scam? Rest easy, your […]

Whaling, SMiShing, and Vishing…Oh My!

original post by Eric Weakland, EDUCAUSE Cybercriminals use types of social engineering—manipulating people into doing what they want—as the most common way to steal information and money. Social engineering is at the heart of all types of phishing attacks—those conducted via email, SMS, and phone calls. Technology makes these sorts of attacks easy and very […]

Take Control of Your Personal Info to Help Prevent Identity Theft

original post by Mark Napier, EDUCAUSE   The first full week of March is National Consumer Protection Week. The week is designed to help people make good financial decisions and understand their rights as consumers. Understanding your rights as a consumer can help you recover from identity theft. Identity theft has become a fact of life […]

2019 Tax Season Safety Tips

Tax season is a cybercriminal’s favorite time of the year. With a 60 percent increase in phishing email schemes targeting tax refunds in 2018, now is the time to be vigilant in protecting yourself from identity theft. The National Cyber Security Alliance (NCSA) has provided some ‘Take Action Tips’ for tax season. When in doubt, […]

A New Look for the Information Security Website

As we celebrate the new year and try to stick to those New Year’s resolutions, The Information Security Office (ISO) is excited to announce the launch of its new website! The new informationsecurity.wustl.edu is designed in a user-friendly format so you can learn about cyber security topics and quickly find information you need. Take some time this […]

Shop Safe – CyberSec Tips for Safe Online Shopping

The weather, the crowds, and the deals are just a few things that can make online holiday shopping irresistible. Not only can shopping be completed in a few simple clicks, but you can complete your entire shopping list from the comfort of your sofa. Still, each year cyber criminals find new ways to scam the growing number […]

Email Safety Training Aims to Heighten Cyber Threat Awareness

In November, the WashU Information Security Office (ISO) issued a mandatory email safety training in an effort to improve the university’s cyber defenses against phishing, a common cyber attack. The training focuses on identifying types of phishing schemes, recognizing the warning signs of scams and knowing who to contact if things seem phishy. Phishing is […]

Spring 2018: WashU 2FA Expands to Most WUSTL Key Integrated Systems

Beginning spring of 2018,  WashU 2FA two-step authentication provided by Duo, will expand to other WashU integrated systems that can be accessed on or off campus. This service is expanding in the effort to reduce the impacts of phishing campaigns. According to Dan Zweifel, director of Shared Infrastructure and WashU 2FA service owner, “Growing phishing email threats are leading the university to […]

Security Alert: Phone Call Phishing – April 9, 2018

ALERT: Phishing phone calls DETAILS: It has been reported that people claiming to be with the WashU IT Help Desk are calling in an attempt to extract personal and/or password information. ACTION: Do not provide anyone your password. Please keep your passwords private to protect yourself and the security of our network. If you have […]

October is National Cyber Security Awareness Month

October is National Cyber Security Awareness Month and the WashU Information Security Office (ISO) wants to take this opportunity to remind students, faculty and staff to be vigilant in protecting your personal information as well as university information. As the lines between our work and daily lives become increasingly blurred, developing habits and behaviors that […]

Security Alert: Office 365 Email Phishing on Campus – October 3, 2018

Risk: High Details: The Information Security Office has received reports of phishing emails purporting to be from BJC personnel, however, the email addresses are being spoofed and used against Wash U. The phishing samples have had infected DOC files attached referring to Outstanding Invoice or Balance Discrepancies. Action: Do not try to open any suspicious files you were […]