[IS&T Security-FYI] Happy National Cyber Security Awareness Month!

[Jessica Murray]

October is National Cyber Security Awareness<https://staysafeonline.org/ncsam/> month and Information Systems and Technology (IS&T) has some resources available to raise security awareness in the MIT community.

Recently, we have seen several phishing attacks that use social engineering. You may have received the sextortion scam email that using alludes to old, compromised passwords, the quick ‘are you around?’ message spoofed from someone higher up in your reporting chain, or the parent looking for a tutor while traveling. Samples of these scam emails and how they work can be found in the Knowledge Base<http://kb.mit.edu/confluence/x/NhuACQ> [1]. Hint: The Dean does not want you to buy her iTunes gift cards!

During the month of October, IS&T will be posting a security-related blog post each week. This week’s post<https://ist.mit.edu/news/security-training> [2] is about the free Information Security Awareness training available through Atlas. There are two bundled courses that take about 30 minutes each, in addition to several stand-alone modules. The bundled courses are also being promoted as recommended courses in the Atlas Learning Center.

IS&T also has a few short videos on security topics: a promotional video about the security<https://youtu.be/al2wqfOI2uw> awareness courses<https://youtu.be/al2wqfOI2uw> [3] and videos on phishing<https://youtu.be/ZkVr0GLSjE0> [4], passwords<https://youtu.be/Sth3Jw-rw5Y> [5], and password managers<https://youtu.be/bcPCKUwPiFg> [6]. These videos are available on IS&T’s Security Awareness and Education page<https://ist.mit.edu/security-awareness-education> [7].

Don’t just delete it – report it! If you receive a scam or phishing email, please send it (with headers) to phishing at mit.edu<mailto:phishing at mit.edu>. There are actions the IS&T Information Security team can take to respond to phishing and protect the Institute. If you have an email that you’re not sure about and would like us to look at, please send it to security at mit.edu<mailto:security at mit.edu>.

Best,
Jessica

Jessica Murray
Information Security Officer
MIT



[1] http://kb.mit.edu/confluence/x/NhuACQ
[2] https://ist.mit.edu/news/security-training
[3] https://youtu.be/al2wqfOI2uw (security awareness training)
[4] https://youtu.be/ZkVr0GLSjE0 (phishing)
[5] https://youtu.be/Sth3Jw-rw5Y (passwords)
[6] https://youtu.be/bcPCKUwPiFg (password managers)
[7] https://ist.mit.edu/security-awareness-education


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/ist-security-fyi/attachments/20181004/584dc784/attachment.html