Recent Phishing Attacks at the University

June 04, 2008

University of Minnesota e-mail account holders have been targeted with waves of fraudulent e-mails. These messages are not from the University of Minnesota. We will NEVER ask you to provide personal information such as passwords over e-mail. If you receive an unsolicited e-mail or you are unsure of the sender, do not reply, do not click any links contained within it, and do not open any attached files. Read more

Possible E-mail Fraud/Phishing Alert for University E-mail Accounts

February 12, 2008

Fraudulent University of Minnesota look-alike e-mails asking for personal and confidential information recently have been sent to some University e-mail account holders. These e-mails are not from the University of Minnesota. The University will never ask you to provide your password or other personal information by e-mail. You should delete the messages. Do not respond to these e-mails or click on any links or attachments contained within them.

Clarification on Skype Use

September 04, 2007

Ann Hill Duin sent an e-mail that clarified how Skype, a commercial Voice over IP software product, can be used on the University network. By following a few Safe Computing steps, Skype can be configured to minimize its impact on the University network. Read more.

QuickTime Vulnerability

April 24, 2007

There is a Critical vulnerability in QuickTime that can compromise your machine even if you think you are visiting legitimate web sites that have unknowingly been compromised. See http://www.us-cert.gov/cas/techalerts/TA07-065A.html

Update to QuickTime version 7.1.6. Updates can be downloaded at: http://www.apple.com/quicktime/download/

To check for QuickTime updates on Windows: open QuickTime Player, go to its Help menu, and choose "Update Existing Software". On Mac OS X you will find this option under the QuickTime Player menu, or you may update QuickTime via Software Update.

Internet Explorer and Firefox Javascript Vulnerability

February 28, 2007

There is a vulnerability in Firefox and Internet Explorer that can allow an attacker to run programs on your machine, if you inadvertently visit one of their websites.

Mozilla has release Firefox 1.5.0.10 and 2.0.0.2, which patches this issue. It can be downloaded at http://www.mozilla.com.

Microsoft will hopefully release a patch in one of its future monthly rounds of patches.

Microsoft Patch Tueday

February 13, 2007

Microsoft has released its February round of software patches. This includes patches for Windows, Office, and Internet Explorer. Everyone should apply these patches as soon as possible by either visiting http://update.microsoft.com or by installing via Automatic Updates.

Symantec AntiVirus Virus Outbreak

November 28, 2006

There is a virus that is spreading via Symantec AntiVirus for Windows. If you are currently running a version prior to 10.1.4.4000, check http://www.symantec.com/avcenter/security/Content
/2006.05.25.html to see if your copy is susceptible to this virus. If so, visit http://www.umn.edu/adcs/software for the newest copy of Symantec AntiVirus ASAP.

Microsoft Monthly Patches Released

October 11, 2006

Microsoft has released its monthly round of security patches. There are multiple critical updates relating to both Windows and Office. Users should update either via automatic updates or by visiting update.microsoft.com.

Thunderbird Update

September 18, 2006

Mozilla has released an update to its Thunderbird email client. This update includes multiple security fixes. Users are urged to update either via http://www.mozilla.com or to select Check for Updates from the Help menu within Thunderbird version 1.5 or greater.

Windows Security Updates Released

August 11, 2006

Microsoft has released its monthly round of security patches. Some of these vulnerabilities will allow unlimited access to the computer without any action on the part of the user.

Visit http://update.microsoft.com to check for any updates that are not already on your machine.

Cisco VPN Client Update

August 11, 2006

Due to security vulnerabilites, Cisco has released an update to the VPN client that is used by the University. Users are urged to visit http://vpn.umn.edu to obtain a copy of the update.

More info: http://www.cisco.com/en/US/products/products_security
_advisory09186a008069a323.shtml.