Category Archives: Safe Computing

Visit the SafeComputing site for more information. Report a security incident. Subscribe to the Safe Computing RSS feed.

Duo for U-M VPN now available

You can now use Duo two-factor protection with the U-M Virtual Private Network (VPN). With faculty, staff, and students already benefiting from Duo two-factor authentication at Weblogin, ITS is working to further extend this protection to other university services. Try it now on your personal computer Visit ITS: Getting Started With VPN and choose your operating system to… Read More »

Check systems for signs of compromise

Has a system you are responsible for been compromised? How would you know? What should you do? Almost all IT professionals at some time in their career have faced these questions. Information Assurance (IA) offers guidance for checking your systems for signs of compromise, or simply suspicious activity.  Start by checking system and software logs for the following… Read More »

That text message might be a scam

You know to be wary of phishing emails and phone scams, but did you know that crooks also send text messages to steal your identity and money? These scams, called “smishing”—the word comes from SMS + phishing—appear to be increasing during the COVID-19 pandemic.  Warning signs Consider any unexpected text message from an unknown number suspect. Smishes may… Read More »

Increase in emails impersonating U-M deans and other employees

ITS Information Assurance is seeing an increase in fraudulent emails that appear to come from U-M deans, employees and offices. These fraudulent emails use a practice known as “spoofing.” Different versions of these emails ask the recipient to: Quickly arrange for gift cards to cover a university expense Reply if you are available Make an immediate wire transfer… Read More »

Good group owners make great MCommunity groups

Are you creating new MCommunity groups to help you collaborate and stay in touch with people while working or learning remotely? Group owners are responsible for ensuring that members of their group have a good experience. The MCommunity Directory includes options to help you do that. If you own a group, your responsibilities include: Having a clear purpose… Read More »

Write emails that don’t look phishy

Given the current infodemic related to the COVID-19 pandemic, it is harder than ever to get your important university information through to the people who need it. People are rightfully suspicious of unsolicited email, but that can sometimes cause them to ignore or delete your important, legitimate communications. Focus on helping recipients verify the legitimacy of your U-M… Read More »

Vulnerability scans now monthly, adding internal scans

To better help you secure your unit networks, ITS Information Assurance (IA) is increasing the frequency of its universitywide scans and adding internal network scanning. As of May, universitywide vulnerability scans are now performed monthly instead of quarterly. The monthly scans will be similar to previous quarterly scans. The software begins by performing a TCP and UDP probe… Read More »

Why we adopt then abandon online safety practices

By | April 28, 2020

To find out why people adopt and then sometimes abandon online safety measures, researchers from the School of Information surveyed more than 900 people about their use of 30 commonly recommended practices to guard against security, privacy, and identity theft risks. The team found that security practices like avoiding clicking on unknown links or emails were much more… Read More »

Probing tech’s soft underbelly

By | April 27, 2020

On any given day in Kevin Fu’s laboratory at the College of Engineering research investigators might use an antenna to fool the lab’s sensor into giving a false temperature readings or a laser light beam to inject false voice commands in a voice-controlled assistant from a distance of 300 feet. Unlike many cybersecurity troubleshooters, Fu is not looking… Read More »

New Safe Computing resources promote remote IT security

ITS Information Assurance has rapidly developed a number of new Safe Computing resources to help you practice and promote good IT security and privacy practices in this new normal: New on Safe Computing and in IT Security at U-M. New resources covering videoconferencing security and privacy, coronavirus scams, how to prevent Zoombombing, new videos, new entries in the… Read More »

New video: Working securely from home

Check out this new IT Security Tips for When You Work from Home video from ITS Information Assurance. It covers securing your devices and connections, protecting your privacy, and watching out for phishing, scams, and fraud. Please share it with others who may find it helpful. For more details and links to resources for working securely from home,… Read More »

Fraud alert: Tax season extension, coronavirus stimulus payments

Watch for tax fraud during extended tax season With tax filing deadlines extended from April 15 to July 15, the risk of tax fraud is extended as well. Be alert for fraudulent phone calls and emails from scammers pretending to represent the IRS. See Safe Computing: Beware of Tax Fraud for examples and more information. Watch for scams… Read More »

Reminder: Best practices for sharing safely in U-M Box and Google

When you share files or folders from Google Drive or Box, you can control the level of permissions granted to others. The U-M Collaboration Services team recommends using caution when you choose permissions for your files and folders to ensure the privacy and security of university data. This is especially true when collaborating with people outside of U-M.… Read More »

New video: Tips for safe videoconferencing

You have probably had a crash course on the basics of videoconferencing over the past few weeks. Follow the IT security and privacy best practices in this new Tips for Safe Videoconferencing video from ITS Information Assurance to make security and privacy part of your videoconferencing routine. And please share it with others who might find it helpful.… Read More »

Beware of COVID-19 coronavirus scams

Scammers are taking advantage of the fear and uncertainty surrounding the COVID-19 coronavirus. Some of the most common scams include: Fraudulent cure and treatment offers Fake charities Misinformation from scammers posing as experts Phishing Tracking maps that trick you into downloading malware See Coronavirus Scams on Safe Computing for more details. ITS Information Assurance is keeping the page… Read More »

New video: How to report IT security incidents

It is vital that you report actual or suspected IT security incidents as soon as possible so that work can begin to investigate and resolve them. This applies even when you are working from home. A new ITS Information Assurance (IA) video tells you where to report them (security@umich.edu), and describes how IA responds. For more detail about… Read More »