A growing fraud scheme reported across Canada is using stolen banking credentials and social engineering to trick victims into unknowingly approving tuition payments on behalf of strangers. According to CBC News, a Vancouver resident lost more than $37,000 after fraudsters impersonated her bank and convinced her to approve transactions that appeared legitimate. The funds were […]
What is Device Code Authentication? Despite conventional phishing techniques remaining effective, cyber criminals continue looking for new ways to compromise users' accounts. One lesser-understood method to do so is through device codes. Traditional authentication involves a username and a password; this can be extremely inconvenient or even impossible for devices lacking a keyboard or other […]
ClickFix attacks are a rapidly evolving threat that use fake CAPTCHA pages to trick people into running malicious commands (often PowerShell) on their own devices. In every ClickFix case, the attacker relies on one thing: your participation. Most traditional phishing attempts and malicious sites are filtered or blocked long before they reach you. That鈥檚 why […]
October is Cybersecurity Awareness Month! 馃帀 Throughout the month, the Information Security team will be sharing weekly cyber-focused themes, helpful resources, and interactive activities, all posted on our dedicated Cybersecurity Awareness Month page. Be sure to check in each week for new content to keep you informed, engaged, and up to date on 91亚色鈥檚 latest […]
Duo has also introduced a new Self-Service Device Management (SSDM) portal to allow users to access the device management interface directly. This will allow users to add/remove devices without the help of IT/Help Desk staff. To access Duo SSDM, please visit https://yorku.login.duosecurity.com/ and login with your Passport 91亚色 credentials. Once inside the portal, users will be able to add, […]
As part of planned updates to 91亚色鈥檚 Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]
As of August 2nd, UIT is making changes to the current 鈥淩eport Phishing鈥 button in Outlook. Users will see the existing button with the 鈥渇ish鈥 icon be replaced by a new version that is integrated with new Microsoft email protection technologies. The new button has a different icon but works similarly and provides more immediate […]