Cybersecurity is everyone’s responsibility at U-M—faculty, staff, and students. For more than 15 years, ITS Information Assurance (IA) has invited UM-Ann Arbor students, including medical students, to take an online quiz to raise awareness about IT security issues and promote best practices during National Cybersecurity Awareness Month. Over the last few years, this cybersecurity challenge has expanded to… Read More »
If you purchased extended support for university machines running Windows 7 or Server 2008 in January 2020, be aware that the support is about to expire. You will need to update the machines to a supported version of Windows or Windows Server, purchase another year of extended support, decommission the machines, or isolate them on a protected network.
Privacy is important year round, but in January it comes into extra sharp focus as we celebrate Data Privacy Day on January 28. Mark your calendar now and plan to partake in a variety of U-M-wide events.
In October we reported that, along with other security tools like Virtru at U-M, CrowdStrike Falcon was being rolled out across the university on UM-owned machines. Falcon provides antivirus, anti-malware, and threat detection and mitigation capabilities, all of which offer stronger protection against ransomware and other malicious attacks than previous tools. Deployment update CrowdStrike Falcon has been deployed… Read More »
Internet of things (IoT) devices can be great gifts, but those smart home speakers, thermostats, and cool wearables like watches and fitness trackers come with some security and privacy risks. To protect yourself and your personal data, follow these tips: Privacy Mute your smart speaker when not using it. Disable features you don’t use. Choose privacy settings for… Read More »
Just five years ago, most websites relied on unencrypted HTTP, the aging and inherently insecure protocol that provides no protection to sites or visitors from threats that range from surveillance through phishing and identity theft. Today, the internet is a much more secure place, with over 80% of websites protected by HTTPS secure encryption. That dramatic transformation –… Read More »
Almost a month after Election Day, experts discussed the threats to election security and cybersecurity and its role within the University of Michigan community in the second installment of the Trotter Distinguished Leadership Series. Javed Ali, former senior director for counterterrorism at the National Security Council, discussed the connections between technology and election security. Ali said the shift towards paper… Read More »
The National Security Agency recently recognized a major breakthrough in the field of side-channel attacks as the winner of the 2020 Best Scientific Cybersecurity Paper competition. Daniel Genkin, assistant professor of electrical engineering and computer science, worked on the paper with collaborators from around the world. The winning paper, describing an exploit called Spectre, broke open a new… Read More »
As the holidays approach and the pandemic continues, you are highly likely to be doing more online shopping. Protect yourself from scams and data theft with these tips from ITS Information Assurance. Shop with trustworthy sites and sellers. Stick to businesses you know and trust, and compare descriptions and prices from multiple sellers to help spot scams. Be… Read More »
Support for Sophos Antivirus installed on U-M machines will end on December 31, 2020. Enhanced Endpoint Protection powered by CrowdStrike replaces Sophos. The Sophos product will continue to work, but will not be updated, and quickly will become deprecated. If you are responsible for managing university Macs, please ensure that you transition them to CrowdStrike Falcon for endpoint… Read More »
Working with researchers from the University of Texas at Austin, Xinyu Wang, assistant professor of electrical engineering and computer science, co-authored an award-winning paper that demonstrates how to automatically build sandboxing policies to keep a computer system safe. Sandboxing is a software management strategy that isolates applications from critical system resources and other programs. One common sandbox approach… Read More »
Here is an important password tip: Do not reuse your UMICH (Level-1) password. Try to set a unique password for each site and online service you use (or use a password manager), and never use your UMICH password for non-university accounts or services. Reusing passwords puts you at risk. There have been a number of data breaches outside… Read More »
As shown above, highlights of Cybersecurity month include: 9 virtual training sessions covering topics like privacy and data use, using Duo two-factor authentication, data classification, and more 4 virtual drop-in Q&A sessions with security analysts 1000+ people sent and received email with Virtru enhanced email security 22K+ MiWorkspace and MiServer managed systems have CrowdStrike Falcon installed for enhanced… Read More »
A new Duo option makes it easier to reactivate the Duo Mobile app when you get a new device. Prior to October 23, 2020, if you got a new smartphone or tablet and wanted to reactivate the Duo Mobile app on it, you needed to use an alternate method of Duo two-factor (such as a phone call) or… Read More »
Staff in the Shared Services Center (SSC) play an important role in properly handling sensitive institutional data, including data regulated by the Health Insurance Portability and Accountability Act (HIPAA). This past summer, the SSC decided it was time to update their HIPAA training, which they require annually of their staff. The SSC noticed that Information and Technology Services… Read More »
The Michigan Daily recently spoke to experts on campus — including Ravi Pendse, vice president for information technology and chief information officer, and Kyle Lindsey and Hanah Stiverson, two doctoral students who are working on a book with Professor Lisa Nakamura about Zoom-bombing — to compile a list of tips to ensure calls for classes or clubs remain… Read More »
Security at University of Michigan IT (SUMIT) 2020, ITS’s free annual event hosted during National Cybersecurity Awareness Month, goes online for SUMIT Reimagined. This series of informational events where members of the U‑M community can get help from IT experts on a variety of topics is entirely virtual this year. Check out a few of the events below and see… Read More »
Each October, ITS Information Assurance (IA) celebrates Cybersecurity Awareness Month by reminding members of the university community about their shared responsibility to protect themselves and the U and by sharing IT security and privacy tips.
U-M classes are overwhelming being taught remotely this semester. This means that some instructors may, for a variety of reasons, wish to record their classes. The Safe Computing website has guidelines for instructors who plan to record class activities. Recordings where students can be identified—from in-person sessions or remote instruction via Zoom, BlueJeans, or any other videoconferencing application—are:… Read More »
In the course “Cybersecurity for Future Leaders” (EECS 498 / PUBPOL 475), students will gain a better understanding of the science, technology, public policy, and national security considerations behind cybersecurity in order to protect the very tenets of democracy. Election security will be one of the course’s six focus areas this fall 2020. The course is taught from… Read More »