Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 10 Next »

 Blog Archive

Blog Posts

Welcome to Cybersecurity Awareness Month!

Since 2004, the President of the United States and Congress have declared October to be Cybersecurity Awareness Month, time dedicated for the public and private sectors to work together to raise awareness about the importance of cybersecurity.

Over the years it has grown into a collaborative effort between government and industry to enhance cybersecurity awareness, encourage actions by the public to reduce online risk, and generate discussion on cyber threats on a national and global scale. October 2024 marks the 21st Cybersecurity Awareness Month.

SOW HERO v8.png

Starting in 2023 with the launch of the Cybersecurity & Infrastructure Security Agency (CISA’s) cybersecurity awareness program, Secure Our World is the enduring Cybersecurity Awareness Month theme. This theme recognizes the importance of taking daily action to reduce risks when online and using connected to devices.

As this month continues, CIS will send a weekly email with information and tips on how you can protect yourself, and your family and friends while using digital technologies.

Keeping your Accounts Secure - October 7, 2024

In today’s installment, we want to focus on securing your accounts. This includes keeping not only important accounts like Bank Account information secure, but also your SPU Account and any tools you use in your professional, academic, and personal life.

Password Management

  • You can strengthen your passwords by remembering these three tips. Long, Random and Unique.

    • At least 16 characters long

    • Random string of characters or create a memorable passphrase

    • Make them unique - use a different password for every account

If it’s too hard to remember all your passwords, don’t write them down. Instead, consider using a well-known and reputable password manager. That way you only have to remember one strong password.

If you haven’t changed your password in a long time, now is a great time to update your password. Follow the steps on Change Your Password.

When we choose strong passwords at SPU, we make it much harder for someone to steal not only your personal information, but our community’s information too.

image-20241007-220148.png

Avoid Phishing Scams

Phishing scams are online messages designed to look like they’re from a trusted source. We may open what we thought was a safe email, attachment or image only to find ourselves exposed to malware or a scammer looking for our personal data. The good news is we can take precautions to protect our important data. Learn to recognize the signs and report phishing to protect devices and data.

Recognize common signs of Phishing

If an email contains any of the following, it’s likely phishing: Urgent or emotionally appealing language, requests to send personal or financial information, unexpected attachments, untrusted shortened URLs, email addresses that do not match the supposed sender, and poor writing/misspellings

Resist and Report

Report suspicious messages by using the “Report Spam” feature in your mailbox. There are even phishing messages that look like SPU. By reporting these messages, you help our mail filter detect and remove these emails before they can arrive in anyone’s email inbox.

Delete

Just delete the message. Don’t reply or click any attachment or link (this includes unsubscribe links). That unsubscribe link could also carry a link used for phishing or download malicious software. It’s best to just delete it.

Remember, if a message looks suspicious, it’s probably phishing!

image-20241007-221615.png

Setup and Multi-Factor Authentication

image-20241007-222618.png

Here at SPU, MFA is a requirement for your account. This is because, while it’s not a “silver bullet,” it still provides additional security and verification, such as a code sent via text message or email, or biometrics like a fingerprint or facial recognition; it helps confirm our identities when logging in.

Just because you receive a prompt or notification for approval, doesn’t mean it’s always you who is logging in. It’s still important that when you receive notifications that you check and make sure you know why you’re getting a prompt and if it’s something you expect to have happen.

Setting up MFA a.k.a. Two-Factor Authentication is a step in the right direction towards protecting yourself and those around you.

Consider turning MFA on for all email accounts, banking, social media, online shopping, and any other location where information about your identity might be stored.

We hope these tips we shared with you today help you stay safter online. Stay tuned throughout October for more ways you can stay safe in our digital world.

As a reminder, CIS will never request your password or other protected information via email.

Keeping your Computer Secure - October 14, 2024

Today we’re going to cover tips on how to keep your personal computer update to date, which is also a way to keep your data safe & secure.

Regularly Install Operating System Updates

Ensuring your device has the latest Operating System (OS) updates is important. If you’re like us, you also have a personal computer and that means you’re the person in charge of determining when and how often you update your computer. By setting your updates to install automatically, you can ensure you have the latest security patches.

Updates not only keep your device working well, but they help close security loopholes and keep you save. Click the links below to learn how to check for updates yourself and ensure you have automatic updates set up.

https://support.apple.com/guide/mac-help/keep-your-mac-up-to-date-mchlpx1065/mac

https://support.microsoft.com/en-us/windows/keep-your-pc-up-to-date-de79813c-7919-5fed-080f-0871c7bd9bde

https://support.google.com/chromebook/answer/177889?hl=en&ref_topic=3418794&sjid=65002690799912792-NC

Encrypt your Computer’s Hard Drive

Encryption is one way to ensure your data is secure and that someone can’t get to your data even if they extract the hard drive from the computer. This is the case for both Windows and Mac users, but if you want to keep your personal data secure, enabling hard drive encryption is one way you can protect yourself from unauthorized access.

Watch this video about BitLocker (Microsoft’s Encryption tool) to learn more about how it works: https://youtu.be/iX8QC2pRuYM?si=5qtlfugkpzByApRu

It’s important to ensure if you turn encryption on, that you read through all the documentation and have your encryption key backed up in a secure location. Without this key, your data may be lost.

https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf

https://support.apple.com/guide/mac-help/protect-data-on-your-mac-with-filevault-mh11785/mac

Keep your Software Up to Date

In addition to keeping your operating system up to date, it’s also important to ensure the software you install on your computer is also kept up to date. Often, you can do this by choosing automatic updates in the application’s menu interface, but if automatic updates aren’t available, add a quarterly reminder to your calendar or task list to check for updates.

https://support.microsoft.com/en-us/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5

https://support.microsoft.com/en-us/office/update-office-for-mac-automatically-bfd1e497-c24d-4754-92ab-910a4074d7c1

https://support.microsoft.com/en-us/office/update-microsoft-teams-535a8e4b-45f0-4f6c-8b3d-91bca7a51db1

https://www.google.com/chrome/update/

Other ways to Keep your Computer Secure

Operating systems have a variety of features that can help you keep your data safe & secure. These might be tools like Microsoft Defender, great for scanning your system for malicious software, firewall settings to prevent unwanted internet traffic and connections to your computer

Stay Protected with Windows Security

https://www.apple.com/macos/security/

https://support.apple.com/guide/security/welcome/web

Install Software from Known Vendors

It’s important to know what you’re installing on your computer and where it comes from. By default, both Mac and PC devices require installation packages to be “digitally signed” by the vendor. You can override these settings and install applications from other places, but it’s still important to properly vet your software choices, paying attention to not only if the company is reputable, but also their Terms of Use & Privacy statements.

https://support.apple.com/guide/mac-help/open-a-mac-app-from-an-unknown-developer-mh40616/mac

If you bought a Windows 11 PC in “S” Mode - which only allows apps from the Microsoft Store, you’ll need to switch out of “S” mode. Please note this is a One-way change. You can learn more at https://support.microsoft.com/en-us/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85

Retire Old Software & Systems

We all want to save money and often we think of computers in similar terms to the way we think about cars; use it and get as much life out of it as possible before selling it. Unfortunately, this mindset can lead to insecure systems because as the device ages, it will get to a point where the company no longer supports it or creates security patches for it. All software has a life cycle and it’s important to be aware of these, so you can know when to prepare to change software versions or upgrade to a new device with the latest operating system.

One major change that we know about, is Windows 10 coming to the end of its life cycle. As noted by Microsoft on their site: https://learn.microsoft.com/en-us/lifecycle/products/windows-10-home-and-pro on October 14, 2025, there will be no further major releases or monthly patching. If you haven’t thought about upgrading your personal PC yet, now is a good time to start planning that process.

https://learn.microsoft.com/en-us/lifecycle/

https://support.apple.com/en-us/100100

Welcome to new students and welcome back to returning students! We are so excited to have you at SPU. The team in CIS has updated over forty classrooms, upgraded systems and enhanced security over the summer in preparation for your return. Know that the CIS HelpDesk is here to support you with your technology as enter this new academic year. Please click on the links below for details and to see campus technology updates we want to share with you.

The CIS HelpDesk


Need help with Banner or logging in to Canvas? Computer running slowly or might have a virus? We're here to help!

CIS Helpdesk Contact 

Submit a CIS Helpdesk Ticket
Email the CIS Helpdesk
Call the CIS Helpdesk: 206-281-2982

Office Hours

Lower Marston Hall

Summer Hours (through Sept. 27th)
Monday - Friday 8:00 AM to 5:00 PM 

Academic Hours (beginning Sept. 30)
Monday-Friday: 8:00 AM to 5:00 PM

Walk-in hours
Monday - Friday: 10:00 AM to 4:00 PM

Campus WiFi


WiFi is available all across campus for students and their guests. For detailed instructions see Network and Internet.

Guest WiFi

Guest WiFi is available for parents, friends, and campus guests. Connect to the network ID called  SPU-Guests , then launch a web browser and follow the guest registration instructions. Guests must provide a valid, non-SPU email address or a text-messaging cell phone number for registration. Guest WiFi is bandwidth limited. SPU students should use the network named  SPU-Wireless  for high speed internet access.  Learn more here.

Outdoor Wifi Locations

Outdoor WiFi locations are available in Tiffany Loop, Martin Square, and in front of the C-Store.

SPU Online Services 


All of your online services can be found by clicking on the image-20240918-182155.png icon in the top right corner of any SPU webpage and navigating to the Students tab.

Microsoft Office 365 for Education


There are many Microsoft Office products available to you as an SPU student, including:

Your SPU Email

Check your SPU email frequently for important campus-wide communications and information from your professors about your classes.  See here for help with configuring your SPU email across all your devices (computers, tablets, phones, etc).

Microsoft Teams

Microsoft Teams is a great collaboration tool that all SPU students have access to. Instant message your classmates, host a study group online, share files, and more. See here for more information:  Study Groups In-Person and Online.

OneDrive for Business

As an SPU student you receive 1 TB (terabyte) of cloud storage space in OneDrive for Business. Your documents can be stored securely here and your account is accessible from any of your devices, on or off-campus. Documents can also be shared with others for group collaboration.  Learn more here.

Microsoft Office Suite

Current students may obtain the latest version of Microsoft Office for Windows or Mac through the Microsoft Student Advantage Program. There is no cost to install the software on up to 5 personal devices, including your computer (PC or Mac), tablet (iPad or Android), or mobile phone (iPhone or Android). The Office Suite provides powerful productivity tools including: Word, Excel, PowerPoint, OneDrive, and Outlook. Learn more here.

More Office Apps

In addition to the Microsoft Office Suite (Word, Excel, PowerPoint, OneDrive, and Outlook) there are numerous apps that are available for you to use, such as Lists, Project, Visio, Planner and more.  Log into your account to see what's available today.

Minecraft for Education

You have access to Minecraft at no additional cost through your SPU account. See here for more information.

Printing and Copying


SPU provides a campus-wide printing/copying program for students. There are Multi-Function Printers (MFPs) located across campus for your use. You can submit print jobs via the web from on or off campus and print them from any MFP once arriving on campus.   You can also print directly from your computer or a USB flash-drive, copy, and scan to email.  Document scanning on the MFPs is free and does not require print credit.  Detailed instructions are posted at each MFP and on the CIS website: MFP Student Printing.

Print Credits

You receive print credits at the beginning of each quarter that accumulates through the academic school year as part of your Technology Fee.

  • Students enrolled in 12 or more credits get $5.00 per quarter

  • Students enrolled in 11 credits or less get $2.50 per quarter.

  • When print credit has been used up, you can use Falcon Funds on your SPU ID Card for additional printing.

Watch Out for Scams!


While many illegitimate messages are filtered out of your inbox some may still get through. SPU will NEVER ask you to send or verify your login credentials or other personal/confidential information via email. Your account credentials should not be shared with anyone!

Job Scams

You've probably already received several emails scam offering an employment opportunity from someone who appears to be associated with SPU. Please delete these messages and do not respond. All legitimate jobs at the university are posted on SPU's Handshake platform. Employers on Handshake are vetted to guarantee their trustworthiness.  Here is a blog post with more information to help you identify and avoid employment scammers. If you have any questions about the legitimacy of an email message, please forward it to help@spu.edu. 

Phishing

Phishing scams often come in the form of email messages attempting to steal your username and password. PLEASE DO NOT reply to these messages or follow web links where you must confirm or enter your username and password.   If you have questions about the legitimacy of a message, please forward it to help@spu.edu and we can assist. See this Cybersecurity Awareness Month blog post about phishing for additional information.

Password

To ensure your passwords are as secure as possible, make them at least 16 characters long, use a random combination of mixed-case letters, numbers, and symbols—or create a memorable passphrase consisting of 4 to 7 unrelated words with or without spaces—and make sure to use a unique password for each of your accounts, such as k8dfh8c@Pfv0gB2 for your bank, legal tiny facility freehand probable enamel for your email account, and e246gs%mFs#3tv6 for your social media, thereby significantly enhancing your overall online security.

Peer-to-Peer File Sharing and Copyright Compliance


File sharing software that copies and distributes songs, movies, videos, games, and software applications without the permission of the owner is a Copyright Law violation that can subject you to criminal and civil liability. Content owners use technological means to track the file sharing of their intellectual property on the Internet. SPU is required by law to inform you if we are aware, you have violated copyright law and must provide your information to copyright owners for legal action if you do not cease illegal activity.  You are responsible for the activities of your computer when connected to the campus network. See Copyright Basics and DMCA Copyright Compliance / Peer-to-Peer File Sharing for more information about copyright compliance.

Update Your Emergency Contacts and SPU Alert Info


It is important to be made aware of campus emergencies in real-time, as information is available.

  • SPU-Alert is the emergency alert system used to notify you of campus emergencies via text, email, and voice calls. We need your current contact information so that we can send you alerts during a campus emergency.

  • Emergency Contact Information includes the contact details SPU should use in the event that an emergency situation happens to you.

The beginning of the school year is a great time to review and update your information. Log into the Banner Information System, go to the Personal Menu, update your information on the Emergency Alert System and Emergency Contact Information pages.

SPU will NEVER  ask you to send your login credentials or other personal/confidential information via email.  Your account credentials should never be shared with anyone.

Welcome to campus housing at Seattle Pacific University! We hope you take advantage of the many technology services that are available to you as a campus resident. Find information on these services below and contact the CIS HelpDesk if you run into a problem or have any questions.

Are You New to SPU?


We're excited to have you here! In preparation for your arrival to campus, check out our technology reference page here: New Students. For instructions specifically about getting your email set up and configured on all of your devices (computers, smartphones, tablets), see here: Email Client Configuration.

Learn About WiFi and Internet Access


There is robust wireless internet throughout every residential building, and in many outdoor spaces. Many students bring multiple devices to campus that will connect to the campus wireless network. Once connected and registered, devices can seamlessly roam throughout campus on the WiFi. Here is a quick guide to network connectivity in the residence halls and campus apartments:

Personal wireless access points, WiFi range extenders, and network/wireless routers negatively impact the campus network and are NOT ALLOWED.

Guest WiFi

Guest WiFi is available for parents, friends, and campus guests. Connect to the network ID called  SPU-Guests, then launch a web browser and follow the guest registration instructions. Guests must provide a valid, non-SPU email address or a text-messaging cell phone number for registration. Guest WiFi is bandwidth-limited. SPU students should use the network named  SPU-Wireless  for high speed internet access.  Learn  more here.

Campus Printing and Personal Printers


There are Multi-Function Printers (MFPs) available to you in many locations on campus. Each quarter you will receive credits to use towards printing and copying. We encourage all students to use these MFPs rather than bring a personal printer on campus. If you do need a personal printer on campus, please know that your wireless printers will not work on the campus wireless network.  Disable the wireless networking on your printer and use a USB cable (available at the SPU Bookstore or other stores) to connect to your computer.

For Information about on-campus printing and copying see:  Student Printing

SPU will NEVER ask you to send your login credentials or other personal/confidential information via email. Your account credentials should not be shared with anyone.

Remote Labs Shift

Students:

SPU Students have remote access to Windows Computer Labs that can be used to access specialized lab software from most computers. This software had a name change and was originally known as LabStats, is now renamed as RemoteLabs.

The application facilitates quicker access to the device and redirects you to the remote lab page. For detailed instructions on how to use this resource, please visit the Remote Lab Access wiki page, or follow the link here.

October is Cybersecurity Awareness Month - CSA

It is CIS's responsibility to share some vital information about how to be safe while using the internet and managing yours and students' information.

Over the next few weeks, CIS will be releasing a weekly blog post that expands on four core topics for this year's CSA month: Phishing, Social Engineering (whaling), Passphrases for passwords, and Ransomware.

At the end of the month, there will be a quiz released to employees and students. Receiving 100% on the quiz will automatically enter the user into a raffle. The raffle will have two winners, one student and one employee, who will each receive a prize* from CIS!

Keep an eye out for the first blog post on October 9, and then every following Monday until the end of the month!

*Please note that prizes will be ordered once they are selected by the prize-winners. CIS will contact prize-winners when the prizes are ready to be picked up from the HelpDesk.


decorative photo of two people on a computer



You can champion Cybersecurity Awareness Month by practicing and sharing the information we share this month with your friends and family.  Each October, we try to raise awareness about digital security and empower everyone to protect their personal data from digital forms of crime.

Now in its 20th year, Cybersecurity Awareness Month continues to build momentum and impact.  It is co-led by the National Cybersecurity Alliance and the Cybersecurity and Infrastructure Agency (CISA).

This year’s theme is: Staying Safe Online

– because while cybersecurity may seem like a complex subject, ultimately, it’s really all about people.
Online Safety Basics - Learn how to protect yourself, your family and devices with these tips and resources.


Security Awareness Week 1: Phishing emails

What is Phishing?

Often carried out over email -- although the scam has now spread beyond suspicious emails to phone calls (so-called "vishing"), social media, SMS messaging services (aka "smishing"), and apps -- a basic Phishing attack attempts to trick the target into doing what the scammer wants. 

Exactly what the scammer wants can vary wildly between attacks. It might be handing over passwords to make it easier to hack a company or person, or sending payments to fraudsters instead of the correct account. This information is often stolen by making requests that look entirely legitimate -- like an email from your boss, so you don't think twice about doing what is asked.

How would you identify a Phishing email?

Emails that contain the following should be approached with extreme caution, as these are common traits of phishing email:

  • Urgent action demands.
  • Multiple sources in the from email address line.
  • Poor grammar and spelling errors.
  • An unfamiliar greeting or salutation.
  • Requests for login credentials, payment information, or sensitive data.
  • Offers that are too good to be true.

Phishing is also a popular method for cyber attackers to deliver malware by encouraging victims to download a weaponized document or visit a malicious link that will secretly install the malicious payload on the person's computer. These kind of attacks mostly are trying to distribute a  trojan malwareransomware . These cyber hackers are hoping you don't look to deep into the email, that you just gloss over the details and click on the link, or download the attachment. Below is a screenshot of a phishing email, and you can see just how tricky they can be.

 

Why is Phishing called Phishing?

The overall term for these scams -- Phishing -- is a modified version of the word 'fishing' except in this instance the one doing this fishing is a scammer and they're trying to catch you and reel you in with their sneaky email lure. In most cases, they will send out many of these lures.

FUN FACT! - Why is Phishing spelled with a "Ph"?

The “ph” spelling of phishing is influenced by an earlier word for an illicit act: phreaking, which involves fraudulently using an electronic device to avoid paying for telephone calls. The people who perpetrated phreaking were called “Phreaks,” and since phreaks and hackers were closely linked, the “ph” spelling was used to denote the phishing scams involving these underground groups. Pretty cool!


We hope by sharing these resources with you, that you will have the tools and information necessary to make informed decisions when using the Internet.


Security Awareness Week 2: Ransomware

The CISA defines Ransomware as a "form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption."

Ransomware can be planted into a network using many methods, like Phishing and Social Engineering. Once it is planted, hackers locate and secure access to important files and move those files to a secure network of their own.

Oftentimes, a hacker needs only access into a network, and can gain such access in a myriad of ways. For example:

  • By sending phishing emails requesting login information or containing malicious code(as we have seen in last week's post) 
  • Looking for weaknesses within your network's security
  • Users are redirected to a suspicious website that infects their computer by browsing or prompts for them to download files off the internet.

       Internet Malicious Actor running away with rucksack filled with user data 

Ransomware Double Attack

A double attack occurs when hackers gain access to a network, move that network's files onto a network they control, then encrypt the data and demand a ransom for a user to regain access and/or to prevent the public publication of those files. The risk: if the ransom is not met, the hackers will sell your data or publish it online.

Unfortunately, users are not typically aware of the attack until they are notified, often by a pop-up declaring the infection and demanding a ransom to receive the decryption key.

Regarding personal data files, law enforcement agencies advise against paying the ransom on such accounts. However, if you don’t have a good back up system, it may be cheaper to pay the ransom to regain access and return your important data.


Computer Safety Tips:

  • Regularly back up important and sensitive data to a separate drive.

  • Install and regularly update antivirus software on your device.

  • Exercise caution when following links in emails, text messages, and websites.

  • Be mindful of what files your are downloading from the internet and avoid suspicious sites.

SPU Employees SPU-Managed Devices:

  • Software and application patches, anti-virus updates, data backups, mandatory browser and security settings are all implemented by CIS and enforced on your school-issued devices.

  • However, it is still essential for all employees to use their best judgement when viewing emails and websites.

If you believe your system is compromised, we urge you to do the following:

  1. Turn off your device.

  2. Disconnect from the internet.

  3. Disconnect your device from any and all external attachments (e.g., usb drives).

  4. Call or email the CIS HelpDesk immediately (206-281-2982 or  help@spu.edu)

Cybersecurity Infographic depicting malicious actors

Security Awareness Week 3: Spear Phishing emails


Spear Phishing is when a cyber-criminal sends an individual an email, SMS message, or voice call, that is designed to manipulate the user into providing the criminal with their login credentials, personal details, or to transfer money.

These types of scams are highly effective because the attackers will typically impersonate the recipient’s boss, colleague, friend, family member, bank, or popular online store to make them feel at ease into giving over sensitive information. (Don't be fooled!)

In many cases, the scammers will imply or threaten that unless the individual acts immediately, there will be negative repercussions, such as the shutdown of an account, legal charges, or other financial penalties, thereby playing on your sympathy response.

While many think these scams are easy to spot, the reality is that anyone can fall victim to them, unless they’ve undergone regular training on how to spot the techniques that attackers use. Below are five examples of Spear Phishing to be aware of. 




Example 1. Fake websites

A cyber-criminal will design a carefully-worded phishing email which includes a link to a spoofed version of a popular website. The website imitates the layout of the original site to trick the victim into entering their account credentials.

  Spear phishing email includes link to a fake site



Google spear phishing email example


Example 2. CEO Fraud

An attacker will take control of an email address familiar to the employee, such as their company’s CEO, Human Resources Manager, or IT admin. The hacker will assume this individual’s identity and ask the user to complete an urgent action, such as transferring funds, updating their personal information, or installing a new app.

CEO Phishing email example


spear phishing email example acting as CEOHR Spear fishing example



Example 3. Malware

In these types of phishing attacks, an attacker will try to trick an employee into clicking on a malicious email attachment. Usually, this type of attack is carried out with a fake invoice or delivery notification.

If you think that the email may be legit, go to a link that you know is safe (one that you have save for the company) and log in from there. Or, you can always call the company and confirm or deny the validity of the email you received.

REMEMBER

If you don't recognize the sender, NEVER click on the attachments or links! 


Ransomware Disguised as Invoice Email








Fake Netflix malware email



Example 4. Smishing

An SMS-based phishing attack in which a hacker will send an SMS or voice message asking the recipient to click on a link to accept a gift, change your password or call a number. The link will take them to a phishing website that they will use to try and gather more information from you.

Also, the link you click on could have malware in it. What does that mean? It could install a program on your phone that will allow the hacker to gain access to all your personal information, e.g. contacts, passwords, email, photos. 


Smishing Amazon text



Examples of Smishing emailsSmishing text posing as law enforcement



Example 5. Vishing

An unknown caller will call the victim and or leave a voicemail urging them to phone them back and hand over personal information, usually by impersonating someone from a trusted company.

The most common type of this is a Tech Support Call.
This attack is widespread in large companies where employees might not know or have met members of the tech support department. Scammers will pretend they need to do a computer update or repair and ask for the victim’s password to do it.




Education is key to beating these attacks. Frequently remind users that you will never ask them to divulge their password over the phone and that they shouldn’t do so under any circumstance.


Vishing scam infographic



Security Awareness Week 4: Passphrases and Canary Files

Zero Trust System

CIS is striving to get as close as possible to Zero Trust security system to secure infrastructure and data across SPU's network. A Zero Trust System requires all users to be authenticated and continuously validated for security configuration before being granted access into SPU's system.

A Zero Trust system is a framework that aims to prevent data breaches from both inside and outside the network. Since only individuals who have been authenticated and authorized for SPU's network can access entry points, adhering to this system provides an added layer of protection for all sensitive data that SPU stewards and prevents unauthorized access to easily accessible entry points.

This framework does not imply that SPU and/or CIS do not trust their students and employees, but rather acknowledges that breaches can occur from anywhere. This system is designed to prevent such incidents. 

Multi-Factor Authentication (or MFA)

MFA is one facet of this system to help protect the SPU network and its users. All SPU users must link their SPU accounts with the Microsoft Authorization app on their phones. When students and employees sign into their accounts, SPU will automatically work to verify that the individual logging into the account has been authorized before granting access.

To make logging in easier and more efficient, keep your phone on hand so that you will be able to immediately verify your identity.


Creating a Strong Passphrase

It is also important for users to use a strong Passphrase or password for securing your account. A strong password will protect your account while also not containing any personally identifiable words; like your mother's maiden name or your childhood pet. It is also important to use a strong or complex password, as a more simple passphrase can be easily guessed.


Here are some key things to follow when creating a password:

  • Use a combination of numbers, capitalization and special characters.
  • Use a longer passphrase that you can easily remember.
  • Don't use a password you have used before, or a slight variation of a pre-existing password.


Do NOT write down OR your share your SPU password with anyone.

Password Managing

If you are worried about keeping track of your passwords, use a password manager that will keep track and record all of your passwords and where they are used. It is also likely that your phone or Google account will have password tracking enabled.

For more information on SPU's Password Policies, please select here.


Canary Files

Canary files are  false or fake files with anti-malware software embedded within them that notifies the user when there has been a breach in your device's security. The files are similar to normal files that would typically be stored on a device by a user.

The normal user will not normally access these files and instead they are acting as a form of bait for files that may be seen as valuable to cyber-criminals. Just like the practice of using canaries in coal mines to signal when it was safe for miners to work, Canary files exist as a prevention method against malware (including ransomware).


There have been rare cases of SPU employees discovering canary files on their device. If you come across canary files on your device, please contact the HelpDesk at (206) 281-2982 or at help@spu.edu for further assistance



Cybersecurity Awareness Month Quizzes

Thank you for joining us for this year's Cybersecurity Awareness month as we covered PhishingRansomwareSocial Engineering (Spear Phishing)Passphrases, and Canary Files

If you have questions or concerns about the topics covered, or would like to learn more, a student technician with the HelpDesk would be more than happy to assist! You can contact the HelpDesk by phone at 206.281.2982 or by email at help@spu.edu.


As a reminder, we are offering one quiz for Faculty and Staff and one quiz for Students to test their knowledge on the topics we covered this month. The quiz will remain open until November 15th, 2023.

A Few Rules to Follow: 

  • One quiz attempt per individual. 
  • A student may not take the employee quiz and employees may not take the student quiz.
  • Only scores of 100% will be automatically entered into the raffle. 
  • Prizes will only be given out to the winning individual(s) after they have made their *selection.
  • One prize per winner. 

*Raffle winners will be contacted by CIS and choose their prize from the available options. Options include bluetooth speakers and/or gift cards. 

Faculty and Staff Quiz Here

SPU Faculty and Staff CSA Quiz

Student Quiz Here

SPU Student CSA Quiz



Welcome to new students and welcome back to returning students! We are so excited to have you at SPU. Know that the CIS HelpDesk is here to support you with your technology needs as you enter this new academic year. Please click on the links below for details and to see campus technology updates we want to share with you.

The CIS HelpDesk


Need help with Banner or logging in to Canvas? Computer running slowly or might have a virus? We're here to help!

CIS Helpdesk Contact 

Submit a CIS Helpdesk Ticket
Email the CIS Helpdesk
Call the CIS Helpdesk: 206-281-2982

Office Hours

Lower Marston Hall

Summer Hours (through Sept. 9th)
Monday - Friday 8:00 AM to 5:00 PM 

Academic Hours (beginning Sept. 12)
In person support: Monday - Friday 10:00 AM to 4:00 PM

Dispatch, email and phone support: Monday - Friday 8:00 AM to 5:00 PM


The CIS HelpDesk is open for walk-ins, but for security reasons the doors are locked and accessible via your campus ID card.

Campus WiFi


WiFi is available all across campus for students and their guests. For detailed instructions see Network and Internet .

Guest WiFi

Guest WiFi is available for parents, friends, and campus guests. Connect to the network ID called  SPU-Guests , then launch a web browser and follow the guest registration instructions. Guests must provide a valid, non-SPU email address or a text-messaging cell phone number for registration. Guest WiFi is bandwidth-limited. SPU students should use the network named  SPU-Wireless  for high speed internet access.  Learn  more here .

Outdoor Wifi Locations

Outdoor WiFi locations are available in Tiffany Loop, Martin Square, and in front of the C-Store.

SPU Online Services 


All of your online services can be found by clicking on the  icon in the top right corner of of any SPU webpage and navigating to the  Students tab.

Microsoft Office 365 for Education



There are many Microsoft Office products available to you as an SPU student, including:


Your SPU Email

Check your SPU email frequently for important campus-wide communications and information from your professors about your classes.   See here  for help with configuring your  SPU email across all your devices (computers, tablets, phones, etc).

Microsoft Teams

Microsoft Teams is a great collaboration tool that all SPU students have access to. Instant message your classmates, host a study group online, share files, and more. See here for more information:   Study Groups In-Person and Online .

OneDrive for Business

As an SPU student you receive ample cloud storage space in OneDrive for Business. Your documents can be stored securely here and your account is accessible from any of your devices, on or off-campus. Documents can also be shared with others for group collaboration.   Learn more here .


Microsoft Office Suite

Current students may obtain the latest version of Microsoft Office for Windows or Mac through the Microsoft Student Advantage Program. There is no cost to install the software on up to 5 personal devices, including your computer (PC or Mac), tablet (iPad or Android), or mobile phone (iPhone or Android). The Office Suite provides powerful productivity tools including: Word, Excel, PowerPoint, OneDrive, and Outlook. Learn more here .


More Office Apps

In addition to the Microsoft Office Suite (Word, Excel, PowerPoint, OneDrive, and Outlook) there are numerous apps that are available for you to use, such as Lists, Project, Visio, Planner and more.  Log into your account to see what's available today .

Minecraft for Education

You have access to Minecraft at no additional cost through your SPU account. See here for more information.

Printing and Copying


SPU provides a campus-wide printing/copying program for students. There are Multi-Function Printers (MFPs)  located across campus for your use. You can submit print jobs via the web from on or off campus and print them from any MFP once arriving on campus.   You can also print directly from your computer or a USB flash-drive, copy, and scan to email.  Document scanning on the MFPs is free and does not require print credit.  Detailed instructions are posted at each MFP and on the CIS website:  MFP Student Printing.

Print Credits

You receive print credits at the beginning of each quarter that accumulates through the academic school year as part of your Technology Fee.

  • Students enrolled in 12 or more credits get $5.00 per quarter
  • Students enrolled in 11 credits or less get $2.50 per quarter.
  • When print credit has been used up, you can use Falcon Funds on your SPU ID Card for additional printing.

Watch Out for Scams!


While many illegitimate messages are filtered out of your inbox some may still get through. SPU will NEVER ask you to send or verify your login credentials or other personal/confidential information via email. Your account credentials should not be shared with anyone!

Job Scams     

You've probably already received several emails scam offering an employment opportunity from someone who appears to be associated with SPU. Please delete these messages and do not respond. All legitimate jobs at the university are posted on SPU's Handshake platform . Employers on Handshake are vetted to guarantee their trustworthiness.  Here is a blog post  with more information to help you identify and avoid employment scammers. If you have any questions about the legitimacy of an email message please forward it to   help@spu.edu. 

Phishing

Phishing scams often come in the form of email messages attempting to steal your username and password. PLEASE DO NOT reply to these messages or follow web links where you must confirm or enter your username and password.   If you have questions about the legitimacy of a message, please forward it to  help@spu.edu and we can assist. See this CyberSecurity Awareness Month blog post about phishing for additional information.

Peer-to-Peer File Sharing and Copyright Compliance


File sharing software that copies and distributes songs, movies, videos, games, and software applications without the permission of the owner is a Copyright Law violation that can subject you to criminal and civil liability. Content owners use technological means to track the file sharing of their intellectual property on the Internet. SPU is required by law to inform you if we are aware, you have violated copyright law and must provide your information to copyright owners for legal action if you do not cease illegal activity.  You are responsible for the activities of your computer when connected to the campus network. See Copyright Basics and  DMCA Copyright Compliance / Peer-to-Peer File Sharing for more information about copyright compliance.

Update Your Emergency Contacts and SPU Alert Info


It is important to be made aware of campus emergencies in real-time, as information is available.

  • SPU-Alert is the emergency alert system used to notify you of campus emergencies via text, email, and voice calls. We need your current contact information so that we can send you alerts during a campus emergency.
  • Emergency Contact Information includes the contact details SPU should use in the event that an emergency situation happens to you.

The beginning of the school year is a great time to review and update your information. Log into the  Banner Information System , go to the  Personal Menu , update your information on the   Emergency Alert System  and  Emergency Contact Information pages.

SPU will  NEVER  ask you to send your login credentials or other personal/confidential information via email.  Your account credentials should never be shared with anyone.

  • No labels