Security Alerts
New Wireless Across Campus
Creighton has rolled out a new wireless network connection called CUWireless across campus. This connection is encrypted over the airwaves and requires Blue authentication to connect to it. We have implemented this to improve security across campus and make the network safer for everyone. Details about how to connect and what systems are compatible can be found at the DoIT Wireless page.
If you have any questions, please contact the service desk at 280-1111 or by email at servicedesk@creighton.edu
Vulnerability for Internet Explorer 6 & 7 (12-17-08)
A vulnerability for Internet Explorer has been discovered that allows an attacker to remotely execute programs on user's computers when they visit a website with malicious code on it. This affects both Windows XP and Vista, using either IE 6 or 7. It does NOT affect firefox, safari, or chrome.
Microsoft has today released a patch to fix the vulnerability. You can download the fix by going to the microsoft update site: update.microsoft.com/microsoftupdate/
Phishing Scams
Creighton University faculty, staff, and students have been the targets of several recent phishing scams. These scams usually involve a forged or faked email requesting personal information such as name, address, social security number, credit card number, or username and password.
Recent scams that have affected Creighton have claimed to be from DoIT and asked for a username and password. REMEMBER -- DoIT will NEVER ask for your password at any time. We don't need it for any of the services we provide.
-- DoIT Security Office
Recent Alert From US-CERT
The United States Computer Emergency Readiness Team (US-CERT) has become aware of an increase in public reports of phishing scams related to recent bank acquisitions. Due to an increase in this activity, US-CERT would like to remind users to remain cautious when receiving unsolicited email that could be a potential phishing scam.
Phishing scams may appear as requests for users to verify personal and bank account information, enroll in additional bank services, or activate new security features. The email messages may contain a link that, when clicked, will take the user to a fraudulent web site that appears to be a legitimate bank web site. The users may be asked to provide personal information or that can further expose them to future compromises. Additionally, these fraudulent web sites may contain malicious code.
Users are encouraged to take the following measures to protect themselves from phishing scams:
* Do not follow unsolicited web links received in email messages..
* Install anti-virus software, and keep its virus signature files up-to-date.
* Review the Recognizing and Avoiding Email Scams (pdf) document.
* Review the Avoiding Social Engineering and Phishing Attacks document.
--From US-CERT
Example Phishing Email
This is an example of a recent phishing email received at Creighton. It has been marked with indicators that the email is a fraud.