Duo has also introduced a new Self-Service Device Management (SSDM) portal to allow users to access the device management interface directly. This will allow users to add/remove devices without the help of IT/Help Desk staff. To access Duo SSDM, please visit https://yorku.login.duosecurity.com/ and login with your Passport York credentials. Once inside the portal, users will […]
News
New Duo Security Enhancements Coming to York
As part of planned updates to York’s current Duo 2FA service, UIT will be deploying an extra layer of security through the implementation of Duo Verified Push, Time-Based One-Time Password (TOTP) codes, and the Self-Service Device Management (SSDM) portal. What’s Changing? Verified Push will ask you to enter a 3-digit code during the login process. […]
Job Scam - Ontario Universities Students Jobs Placement 2024 Fall Semester
We have identified another targeted phishing email with the subject line "Ontario Universities Students Jobs Placement 2024 Fall Semester". The email includes a PDF attachment and asks recipients to contact hr@careers-opinionoutpost.com. Do not respond, open the PDF, or engage with the email. This is a scam aimed at financially defraud you. If you have already […]
Passport York password complexity requirements update
Passport York uses a password strength estimator to ensure that users set strong, difficult to crack passwords for their account. This is done in order to increase the security of their various accounts at the University. The estimator analyzes passwords and assigns them a score based on their complexity. We have increased the score required […]
Upcoming Change to Duo 2FA Prompt
As part of planned updates to York’s Duo 2FA service, the Duo login prompt will change to a refreshed and modernized look that is better optimized for desktop and mobile experiences - known as the Duo Universal Prompt. There are no functionality changes to Duo and the service will continue to be part of your […]
Phish Alert - "Ongoing Employment Opportunity" AND "Executive Assistant/Administrative Assistant!!"
Scammers are using compromised YorkU email accounts to send fictitious employment emails looking for an Executive Assistant/Administrative Assistant. The link will open a Google Form, asking for personal information and requests that recipients get in touch with Dickens Tryone at hrworldvision1@outlook.com. The scammer may ask to connect over the messaging app, Discord. […]
Job Scam Alert - Open Job Position
Please note that York will NEVER request for passwords, Duo passcodes or other personal information via email or Google Form. Below is the latest job scam email that was sent to various mailboxes. The Information Security team has taken action to remove the fraudulent messages. If you receive similar messages, please report it immediately […]
Upcoming Changes to the Phish Reporter Button
As of August 2nd, UIT is making changes to the current “Report Phishing” button in Outlook. Users will see the existing button with the “fish” icon be replaced by a new version that is integrated with new Microsoft email protection technologies. The new button has a different icon but works similarly and provides more immediate […]
Advisory Notice - OFAC sanctions and service restrictions
University Information Technology (UIT) is advising of current and upcoming changes to York-provided services Zoom and Duo (two-factor authentication) as a result of the situation in Ukraine. These services are now or will be unavailable to individuals attempting to authenticate from several countries and regions restricted by the Office of Foreign Assets Control (OFAC) — a financial intelligence […]
Cyber Security Advisory - Protecting against increased cyber threats
Russia’s invasion of Ukraine has resulted in an increase in global cyber threats. While there is no specific threat to York University, we would like to stress the importance of protecting your accounts, devices, and data. Protective steps include: Use multi-factor authentication with your accounts to help verify access. York’s Duo 2FA service is required […]
