Russia’s invasion of Ukraine has resulted in an increase in global cyber threats. While there is no specific threat to York University, we would like to stress the importance of protecting your accounts, devices, and data.

Protective steps include:

• Use multi-factor authentication with your accounts to help verify access. York’s Duo 2FA service is required for Passport York accounts. If you receive an unexpected 2FA request, that may indicate that the password to your account has been compromised. If this happens, change your Passport York password immediately and notify Information Security.
• Use strong passwords. Use a password manager to generate strong passwords and to store your passwords.
• Do not use the same password for multiple services; a breach in one service can lead to a breach of all your other accounts.
• Update your software. To make this easier for you, enable automatic updates on all your devices and software packages.
• Backup critical data. In case of malware or ransomware attacks that can destroy data, ensure there are secured backups of critical data. This can be accomplished using UIT data storage services.
• Think before you click. Most cyber-attacks start with a phishing message in which a seemingly legitimate-looking webpage or email is used to trick you into revealing your passwords or other personal information. The information you provide can be used for identity theft or to cause you to run malicious software. If it feels suspicious, trust your instincts, and use the “Report Phishing” button on your Outlook or Gmail. This will automatically report suspicious messages to the Information Security team.

Please visit the Information Security website to learn more about:
Cyber Security Awareness
Duo Two-Factor Authentication
How to Report Phishing

If you have questions, please contact askit@yorku.ca. If you would like to report a cyber incident, contact infosec@yorku.ca.