Spartans,

October is Cybersecurity Awareness Month, so this month we will be sharing IT tips intended to boost cybersecurity awareness. We’ll kick off with some ways to help secure your mobile devices.

We have all become reliant upon our mobile devices for much of our online activity. This makes our mobile devices vulnerable. The good news is that there are simple things you can do to boost the security of your mobile devices and protect yourself from digital threats. Here are a few:

• Use Strong Passwords and Biometrics—Make sure all your device passwords are strong and adhere to industry best practices for length and complexity. Additionally, if your device supports biometrics such as fingerprint authentication or Face ID, make use of these options.
• Avoid Free Public WiFi—Most free public WiFi is unsecured, making it easy for cybercriminals to access your passwords, usernames, and other sensitive information. SJSU offers campus-wide secure WiFi for students, faculty, and staff.
• Install Software Updates—Most updates to your mobile device’s operating system include security patches to fix vulnerabilities. You should always install system updates as soon as they become available.
• Enable Device Location—Consider enabling Find My (iPhone / Apple) or Find My Device (Android). This way, if you lose your device, you have a better chance of recovering it.
• Backup Your Data—If your device is lost, stolen, damaged, or compromised, you could potentially lose your valuable data. For this reason, it is prudent to back up your device to another source, such as Google Drive, iCloud, or OneDrive. You should be able to configure automatic backup so you will not have to worry about remembering.

For additional steps that you can take to secure your mobile device, check out the Mobile Device Security page on the SJSU IT site.

Thank you to our Information Security Team for providing this tip and helping protect our university. As always, the SJSU IT Service Desk is here to help by phone at (408) 924-1530 or online.

Thanks,

Bob Lim
Vice President for Information Technology
and CIO at San José State University

Campus Community,

Some members of our campus were recently targeted by a sophisticated email attack. This email claimed to come from an SJSU employee, asking the recipient to open certain attachments and refund purchases.

This type of attack, called “spear phishing,” was an attempt by criminals to gain access to SJSU accounts. Phishing attacks have always been and continue to remain especially prevalent in higher education because of our inherent transparency. Spear phishing attacks take this tactic one step further, targeting specific individuals using specific scenarios that look and feel much more plausible. For example, attackers may claim to be the CEO or other executives attempting to trick Finance employees into sending money, even attaching fake invoices with seemingly-official logos and letterhead. Sometimes these spear phishing attempts happen via text, such as the infamous Gift Card Scam.

Here’s a tip to level up your account security: use Google’s applications, such as Gmail and Chrome, when accessing your @sjsu.edu account on mobile. It’s the best way to get the most out of Google’s security features associated with your SJSU account. 

As a rule, SJSU IT will never ask you for your login information via email.  SJSU IT will also never ask for you to “pivot” from email to SMS (text).  If an email or text message contains content you find questionable or references information you are unaware of, it’s a good idea to contact the sender yourself and verify the situation. Take a moment to call them on the phone.

Visit our website for more information on How to Spot a Phishing Attempt or to sign up for our ongoing phishing education program. You can also visit Google’s site to see how reporting phishing emails in Gmail helps prevent future attempts. If you believe your account may have been compromised, please email security@sjsu.edu immediately. 

Thank you to our Information Security Team for providing this tip and always working to keep our university protected. As always, the SJSU IT Service Desk is here to help by phone at (408) 924-1530 or online.

Thanks,
Bob Lim
Vice President for Information Technology
and CIO at San José State University