Category Archives: TechNews

What we’ll be doing

Special News, TechNews, , , ,

Simmons Technology continues to review recent incidents and take actions that make our infrastructure safer and less appealing to cybercriminals but there isn’t much we can do if you give away your credentials online.  In an effort to make our login process more secure, we will be doing the following in the near future:

  • Removing DUO mobile passcode, phone callback, and SMS passcode features from Sharkpass/DUO.  Logging in will require utilizing a “Push” to your mobile device.  
  • For those unable to use the DUO Push notification on their mobile app, hardware tokens and security keys will be made available.
  • Implementing a mandatory password reset for the community.  

We realize these measures will cause a small change in the way some of us work and utilize Simmons resources.  We are confident that after a brief adjustment, all will be able to adapt and aid in helping create a safer online environment.  Please stay tuned for more information about these upcoming information security changes.  And please reach out to me or the Technology Service Desk ([email protected] or 617-521-2222) with any questions or concerns.

Thank you,

David Bruce
Vice President, CIO
Simmons University

October is CyberSecurity Awareness Month

TechNews, , ,

Do Your Part. #BeCyberSmart.

Cybersecurity & Infrastructure Security Agency LogoPhishing and social engineering campaigns are the #1 source of ransomware and other malware1. Reduce your chances of your falling victim to phishing attacks!

  • Update your passwords. Consider using the longest password possible. Be creative and customize your passwords for different websites. Use a password manager to keep track of them.
  • Enable two-factor authentication on your accounts where available.
  • Limit the information you post on social media. Cybercriminals use public information to know you better, so be sure to keep personal information safe from strangers.
  • Keep track of your apps. Make sure your apps are up-to-date and check your app permissions.
  • Update your computer and mobile devices.
  • Make sure your antivirus is up-to-date and running.
  • Stay protected while connected. Only connect to legitimate wireless hotspots. Avoid sensitive activities on public networks and only use sites that begin with “https://” when shopping or banking online.
  • If an email looks suspicious, do not respond and do not click on any links or attachments. When available, “Report phishing” to block other suspicious emails.

[1] 2021 Verizon Data Breach Investigations Report (DBIR)

Sharkpass Duo Mobile App Update

TechNews, , , , ,

Screenshot of Updated Duo MobileBeginning in October, Duo Security — the technology behind Simmons Sharkpass — will be updating their mobile application on Apple iOS and Android platforms.  The redesigned application, which will be released through the Apple App Store and Google Play Store, will be delivered if you have automatic updates enabled on your device.  The new version’s improvements include:

  • Updating the position of the Approve / Deny buttons so that Approve is on the right, a more natural location.
  • Improving the accessibility of the app, including adding a landscape view, variable font sizes, and improved color contrast.
  • Providing clear guidance on restoring your accounts if you get a new phone.
  • Making it easier to find and manage your accounts with a simpler interface.

The new version will contain all the functionality of the current one.  All of your protected accounts will be automatically present in Duo Mobile after the update. You will not need to re-add anything. In addition, all of your existing settings, such as for Duo Restore for third-party accounts like Instagram or Facebook, will also carry over automatically.

Duo can also be used to secure access to other online accounts and services such as Twitter, Facebook, and Amazon.com.  Check out Duo’s Guide to Two-Factor Authentication.

Phone and Email Scams on the Rise

TechNews, , , ,

Image of fishing hook with noteScams targeting students are being reported from local universities.  Phishers and imposters, disguised as employers and government officials, are tricking students into handing over money. Some of the scams may offer a job opportunity or threaten the recipient with prosecution from a foreign government.

Beware of messages that:

  • Do not clearly identify themselves or their company
  • Come from an email address that does not match the company’s domain
  • Do not give full contact information such as the title of sender, the company’s physical address, or phone number.
  • Make too good to be true offers with no strings attached
  • Ask to pay an upfront fee or asks you to transfer money for them
  • Ask to give your credit card or bank account numbers
  • Ask to send copies of personal documents

Remember: DO NOT provide any personal information, especially Social Security numbers or financial information. Legitimate companies would not ask for this information over the phone or email.

If you have any questions or concerns about keeping safe from phishing attacks and scammers, contact Technology’s Information Security Analyst, [email protected].

Phishing Icon made by Smashicons from www.flaticon.com

Simmons Connection Retiring

TechNews,

Simmons Connection LogoWith final grading for some classes finishing up in AARC and all future student information activity having moved to Workday, Simmons Connection will be retiring at the end of October. Quick links to frequently used services are now available on internal.simmons.edu.  Select either “Current Students” or “Faculty & Staff” and scroll down to view various resources that are available to you.

Looking for events?  Navigate to events.simmons.edu in your browser and you will find what’s happening on campus.  You can also reserve a room for meeting or study. 

If you have questions regarding the retirement of Simmons Connection, please contact the Service Desk.