Tag: SecureIT

Cyber attacks on computer systems and networks to obtain personal information and other confidential data take place on a daily basis.

To maintain the integrity and security of our institution’s data, Michigan State University is taking steps to increase the level of protection in systems amassing sensitive and personal information by implementing two-factor authentication in spring 2015. Read Full Article →

This year’s theme is Our Shared Responsibility. MSU Information Technology (IT) Security encourages the community to get involved and do their part to make our Internet, MSUnet, safer and more secure for everyone.

• Read information posted on MSU’s technology security site at tech.msu.edu/secureIT/
• Check the STOP-THINK-CONNECT Web site for additional information at staysafeonline.org/

MSU Information Security is warning computer users about a damaging new form of malware called CryptoWall, which has hit MSU’s campus.

Infections can take place in a variety of ways, but the two most common are malicious links and email attachments.

When infected with CryptoWall, all useful files are irrevocably encrypted unless the victim decides to pay a ransom to receive their files back. Read Full Article →

A major security vulnerability called the Heartbleed Bug was disclosed Monday night with serious implications for the entire web.

A security defect was found in a component that is the foundation of security for a large percentage of Internet websites.

The security defect, in a component called OpenSSL, allows attackers to acquire random data from “secure” web servers without logging in. Read Full Article →

IT Services is warning computer users about a particularly vicious kind of malware, called CryptoLocker.

CryptoLocker encrypts or freezes large parts of a Windows PC’s hard drive, then asks the user to pay to regain access.

Once CryptoLocker installs itself, it contacts a remotely operated server run by criminals, called a command-and-control server. Read Full Article →

The Michigan State University Police Department is investigating an attempted theft of employee direct-deposit payroll earnings.

On Friday, October 18, two employees reported receiving email confirmation of a change in their direct-deposit designation.

Police say that valid credentials (MSU NetID and password) were used by a perpetrator to modify the employees’ banking information on the EBS HR/Payroll (SAP) system. Read Full Article →

October is National Cyber Security Awareness Month.

Michigan State University has an ongoing safe computing campaign called SecureIT to help educate the MSU community on safe computing practices.

Learn more about how to configure Windows and MacOS X firewalls. Read Full Article →

Last week a serious Java-based vulnerability was identified by security experts. The vulnerability allows criminals to exploit the opportunity to silently install malware when a hacked site is visited while using the insecure browser plugin.

Users are advised to upgrade to the latest version of Java (currently, it is Version 7 Update 11) immediately, and to only allow Java code to run from known safe sources and that is properly digitally signed. Read Full Article →