Cybersecurity Awareness Month
Be Aware of Cyber Security Threats and the Ways to Protect Yourself
Cyber attacks against universities are on the rise, and we need your help to keep NYU cyber-safe. Check out the interviews featuring NYU CIO Don Welch and CISO Richard Sparrow, as well as articles and videos about scam emails, ransomware, good passwords, and more.
Let's all work together to #KeepNYUCyberSecure.
CIO and CISO Interviews
Throughout October, there will be new interviews on cybersecurity topics impacting NYU, featuring Don Welch, Vice President for Information Technology and Global University CIO, and Rich Sparrow, Associate Vice President and Global University Chief Information Security Officer.
Why are Universities a Cyberattack Target?
In this interview, NYU CIO Don Welch and Chief Information Security Officer (CISO) Rich Sparrow explain why universities are a popular target for cybercriminals.
Phishing Uses Deceptive Email to Get Access
NYU CIO Donald Welch speaks about phishing, the threat it poses to NYU, and what the NYU community can do to protect each other.
NYU CISO Rich Sparrow discusses how to stay secure and responsible while using social media, and how oversharing can be a cybersecurity threat.
Ransomware is a form of malware that can encrypt files and block access to all data on your device and on networks. It is the #1 cyberthreat to institutions and universities because of the data these organizations hold.
- Find out more about ransomware on NYU IT's Safe Computing site.
Don’t Let Them Lock You Out of Your Own Computer
Updated for 2022! Learn more about ransomware, including info about some recent attacks on universities, and find out more about the steps you can take to protect yourself and NYU.
- Report any suspected ransomware with NYU's Cyber Incident Response form
Protect Against Ransomware
In this short video, get an overview of what ransomware is, the threat it poses to NYU, how it spreads, and what you should look out for.
- Learn more about securing your computer against ransomware and other forms of cyberattack
Phishing is a social engineering attempt to trick you into revealing personal or sensitive information, and/or installing malware on your device. These messages can be delivered by email, phone call, SMS text message, or other means, including pop-ups on webpages, fake login pages, paid ads, social media posts and messaging, as well as unsolicited tech support.
- Find out more about phishing on NYU IT's Safe Computing site.
Phishing Uses Deceptive Email to Get Access
NYU CIO Donald Welch speaks about phishing—what it is, the threat it poses to NYU, and what the NYU community can do to protect each other from it and other forms of cyberattack.
- Did you get a phishing email? Forward it to firstname.lastname@example.org and help the University block future phishing emails.
Phishing, Spear Phishing, and Whaling
This article explores the variations of phishing, which have distinguishing features that may be categorized using terms such as spear phishing or whaling.
- Did a phishing message get you? Hey, it happens. Immediately reset your NYU password—and do the same for any accounts that use the same password
A strong password is your first line of defense against cyberattacks. NYU has a number of guidelines in place to help you ensure your password is secure, but there are other things you can do to make sure even a good password doesn't get compromised or cracked.
- Find out more about password security on NYU IT's Safe Computing site.
Lock Down Your Login
In this short video, learn the basics about creating a secure password, keeping it secure, and how an insecure or leaked password can impact you and others.
- Need to set a new NYU password? This knowledge base article explains how
Under Lock and Passphrase
In this article, learn how you can use a password manager to relieve the hassle of remembering lots of complex, secure passwords.
- Review NYU's requirements for creating a password in this knowledge base article
Social Media Oversharing
Protect your privacy and the privacy of others by not oversharing, and make sure your privacy selections in each platform reflect your preferences. Social engineers and other malicious actors harvest information from social media sites to use in targeted attacks. Learn to be active on social media in ways that don't compromise your security and the security of friends, family, colleagues, your employer, and any groups, personal or professional, to which you belong.
Don't Overshare on Social Media
Social media can be fun, but what you share online can sometimes be used against you. Watch this short video to learn about ways to keep your personal information safe.
Tools and Resources
It's true—there are a lot of cybersecurity threats out there. Luckily, there are also an ever-growing number of tools you can use to protect yourself and your private info, as well as that of your friends, family, employer, and peers. No single tool can guarantee complete security, but together, and paired with your own cybersecurity smarts, they go a long way to keeping everyone better protected.
- Find out more about NYU's cybersecurity tools, policies, and protections on the Safe Computing site.
Safe Computing: The Source for Cybersecurity Info at NYU
Check out the new Safe Computing site, full of tips to help to protect your personal information and safeguard the University's network and data.
NYU Multi-Factor Authentication (MFA)
NYU MFA, using Duo Push, greatly increases the security on your accounts by using your mobile device or tablet to verify your identity. It's become standard for many online interactions and is required for many NYU services.
Malwarebytes: Protect Your Personal Computer
Malwarebytes is anti-malware/antivirus software available free of charge to NYU students, faculty, and staff for use on their personal, non-NYU-owned computers.
VPN: A Secure Internet Connection Wherever You Go
NYU Virtual Private Network (VPN) provides secure, password-protected access to NYU's campus network (NYU-NET) from an off-campus location.
Cybersecurity Awareness Training
Cybersecurity Awareness Training, powered by KnowBe4, is an education and training platform that increases the NYU community’s ability to recognize and respond to cybersecurity threats and help avoid simple mistakes that would threaten NYU’s networks and data.
Security News and Alerts Blog
Check out the Global Office of Information Security's Security News and Alerts blog for timely information about cybersecurity threats that could impact NYU, as well as updates about cybersecurity resources and good habits.
- Knowledge Base
- Global Support Contacts
- IT Support NY and Study Away
- IT Support Abu Dhabi
- IT Support Shanghai