More Security Highlights

Spear phishing attacks at the University
Spear phishing attacks can take many different forms, but the one thing they have in common is that they ask for sensitive information such as passwords, birth dates, social security numbers, etc. The most important thing to know is that you should never share personal information over e-mail.  Read more.

Phishing Scams- How to spot and avoid them
Phishing attacks are on the rise. Identity thieves and other criminals often use phishing scams to steal personal information from a vast number of people.  Read more for more information on how to spot and avoid them.

Private Data Standard Released
The approved standard is entitled Securing Private Data and is posted at: http://www.umn.edu/oit/security/privatedata.html

QuickStart Security Wizards for Microsoft Windows 2000/XP/Vista
QuickStart Security Wizards will install security settings that will help protect your workstation from password cracking and other security weaknesses. Similar settings should also be implemented for servers. Read more.

Automating Windows Updates
OIT offers a free, automated Software Update Service that will help keep Microsoft Windows 2000 and XP users with a UM IP address up to date. Read more.

Anti-Virus Protection
Protect your computer by installing anti-virus software and keeping it up-to-date. Anti-Virus protection is required on desktop and e-mail servers connected to the University network. A copy of Symantec/Norton AntiVirus is available at no charge to current U of M students, faculty and staff.

OUCH!  Did you know...
Read more about identity theft and the latest attacks on computer users and tips on what to do.  A monthly update is provided by SANS.

Marketscore Security Risk
A number of Microsoft Windows computers have had all their web browsing, including encrypted passwords and other secure transactions, redirected through Marketscore.com.  Read more for more information on tools to help detect and removal steps.

Self-Test Tool for Passwords stored in vulnerable Microsoft LanMan Hash
QuickStart Show Level-2 Settings Tool  is available to determine if your computer is storing passwords in the LanMan hash format.  Read more.

Microsoft File Sharing Security Issues
File sharing enables you to share files with others on your network and the Internet. Many people are not aware that these shared files can be viewed and modified by anyone if sharing is not set up securely. Disable or password protect shared files. Read more.

Letters/e-mails...

• To Deans, Directors, and Dept. Heads:
  → New Minnesota State Law
  → Securing Private/Non-public Data
• To Dialup Modem Users:
  → Importance of installing critical security patches, especially on Windows computers.
  → Policy requirement to install anti-virus protection and keep it current. See students/staff/faculty letter or alumni letter.
• To Residence Hall Students:
  → U of M Filesharing Alert
• To Supervisors:
  → Downloading and/or sharing of copyrighted materials
  → Downloading and/or sharing of copyrighted materials by University employees- Aug. 2003.
• To University Community:
  → Managing Legally Protected Electronic Private Information
  → Spear phishing attacks at the University-Warning-- February 2008
  → Internet Password Expiration Notices- Not a Phishing Scam
  → Phishing Scams-Warning--November 2006
  → 'Your UMN Internet ID'- Not a Phishing Scam
  → Phishing Scam-Warning-- December 2004
• 
  

  Digests/Trade Journals/Newsletters

•  

  • @Risk: The Consensus Security Alert
  • AntiOnline
  • SANS News Bites (semi-weekly)
  • USENIX
  • Security Focus Newsletter
  • Network Computing