Be Cyber Smart With Cybersecurity Tips & Reminders

Welcome to week #1 of CSAM, Cybersecurity Awareness Month, with a focus on Be Cyber Smart, which is a reminder to implement cybersecurity best practices to keep your information safe. We encourage you to keep the following tips & reminders top of mind:    Phishing continues to be a serious threat Everyone gets phished. It’s […]

Welcome to Cybersecurity Awareness Month (CSAM)!

Welcome to Cybersecurity Awareness Month (CSAM 2021)! CSAM, sponsored by National Cybersecurity Alliance. CSAM is now a global event, held in recognition of the importance of cybersecurity in our digitally interconnected and technology intensive lives. The goal is to ensure that everyone has access to the resources they need to stay safe online.  Please be […]

How to Recognize & Avoid DocUSign Phishing

DocUSign is a service which provides users with the ability to sign documents electronically in the Cloud. NYU DocUSign can be used both internally and externally, and is particularly useful when people are working remotely. For more information on DocUSign at NYU, click here.  In addition to the commonly known signs of phishing such as […]

How to Secure Your Online Life (Interactive Webinar)

The National Cybersecurity Alliance (“NCSA”), in partnership with Verity Trusted IT Solutions is offering a webinar on “How to Secure Your Online Life” on September 29th at 2pm (EST). This interactive panelist presentation will include cybersecurity experts who share key and actionable tips including:  Best practices for password and account management How to combating phishing […]

Apple Emergency Updates Address a Spyware Vulnerability

Users of Apple devices are advised to immediately update their devices:  iPhone, iPad & iPod Touch iOS update to 14.8 Here are the instructions on how to update any of the above listed devices    MacOS Big Sur 11.6 & Mac OS Catalina has an update available as well Here are the instructions for MacOS updates, […]

Critical Confluence Update

Please be advised that US Cybercom has issued a notification warning of mass and escalating exploitation of a Confluence OGNL Server Webwork injection vulnerability that would allow for the injection of arbitrary code on a Confluence Server or Data Center instance. This vulnerability is tracked as CVE-2021-26084. It’s recommended that IT teams update immediately to […]

T-Mobile Breach

T-Mobile is investigating a data breach that they estimate impacts 7.8 million postpaid customers, 850,000 prepaid customers and “just over” 40 million past or prospective customers. Hackers claim that the number of impacted individuals is 100 million. T-Mobile has stated that they are confident that the attack entry point has been closed and they will […]

Beware of Fake Copyright Violation Notifications

As you may know, when notified of an alleged copyright infringement, your response is required. In cases where no response is forthcoming and the violation is alleged to have taken place on social media, the content at issue may be removed or you may get locked out of your account. To avoid falling victim to […]

Critical Microsoft Updates

CISA (Cybersecurity & Infrastructure Security Agency) has issued an advisory encouraging users and administrators to apply available Microsoft updates that address critical vulnerabilities in Microsoft software, some of which can be exploited to take control of an affected system. For more information, see Microsoft’s August 2021 Security Update summary.

Critical Apple Zero-Day Patch; Update Now

Apple has patched a zero-day vulnerability, which is being tracked as CVE-2021-30807.  What Apple Reports: “An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.”  According to Sophos: “When Apple notes that “an application may be able to execute […]