Category Security Alert


LastPass Breach – Password change required

Many faculty, staff, and students utilize LastPass as a password management tool to store passwords in an encrypted environment.  On December 22, LastPass informed its customers of a potential cyber security incident that could compromise the passwords stored in their accounts. LastPass discovered that in November 2022, a copy of the customer password vaults had…


OIT to Implement Additional Email Security in January 2023

Beginning in January 2023, OIT will implement new email security features to help students, faculty and staff better recognize phishing emails. These new security measures utilize mailbox intelligence and recognize email user patterns. Outlook will provide safety tips for inbound mail that comes from new or unusual senders. Below is a screenshot example. The mailbox…


Simulated Phishing

This fall, OIT will begin sending simulated phishing emails to UA students, faculty and staff. The simulated phishing emails will imitate real phishing emails to better equip UA community members to recognize phishing attacks. Learn more on the OIT website.


July 18 Phishing Email

On Monday, July 18, many UA students, faculty and staff received a scam email. The subject of the message was “NOTICE BY ADMIN VERIFY YOUR OFFICE 365”. This is not a message from UA or Microsoft Office 365. If you received this message, please mark it as spam in Outlook. If you have any questions,…


July 16 Phishing Email

On Saturday, July 16, many UA students, faculty and staff received a scam email. The subject of the message was “MEMO FROM HR”. This is not a message from UA Human Resources or Microsoft Office 365. If you received this message, please mark it as spam in Outlook. If you have any questions, contact the…


OIT Security to Install Microsoft Defender

Starting in July, OIT will be transitioning campus machines from McAfee antivirus to Microsoft Defender. OIT will be performing this software update remotely. Faculty and staff may notice a logo change in the toolbar; however, no action is required of end users. If machines are off campus, they will receive the new software when they…


Alabama.Gov Phishing Scam

OIT Security has been made aware of a phishing attack targeting the Alabama.gov Procurement website. A phishing/scam site has been set up that appears to look like the Alabama.gov website. If users were to visit this website and click the “CLICK HERE TO BID” button, it prompts for email login information. This is phishing scam…


A new look is coming to Duo!

Last year, Duo rolled out updates to its mobile application. This year, Duo is introducing a new look to the Duo prompt that users see when accessing applications. Below are examples of the old and new Duo prompts. OIT will be applying the new prompt to various Duo-required applications throughout the spring semester. The largest…


Tech Services – Restricted Countries and Regions

This week, Duo and Zoom have published that they no longer, or will soon no longer, offer service in certain countries and regions to comply with U.S. regulations. Duo and Zoom are both restricting service from users whose IP addresses originate in a country or region subject to economic and trade sanctions enforced by the U.S.…


Update Apple OS

Apple has recently released updates to its various operating systems. These updates address multiple vulnerabilities, the most severe of which could lead to code execution that could resulting in installing malicious software or even viewing, changing or deleting data. OIT recommends all Apple users install updates as soon as possible. SYSTEMS AFFECTED: For Mac OS,…