Category Archives: TechNews

Duo Mobile on Legacy Devices

Picture of no mobile deviceDuo has announced that effective February 9, 2023, Duo Mobile will no longer be supported on devices running Android 8 or 9, or iOS 13 or earlier. This means that users will not be able to download the latest version of Duo Mobile on these devices, and they will no longer receive fixes or security updates for Duo Mobile. Support teams will also have limited ability to troubleshoot issues with Duo Mobile on these older operating systems.

However, Duo Push will continue to work on already-installed versions of Duo Mobile on these devices, and users will still be able to authenticate using Duo. Duo Mobile will continue to be fully supported on devices running iOS 14 or Android 10 or newer.

To determine which operating system your mobile device is running, please see these articles:

If you need assistance determining whether your device will be compatible with Duo Mobile after February 9, 2023, you can contact the Simmons Technology Service Desk or call 617-521-2222.

If you do not have a compatible device, you may be eligible for a free two-step verification hardware token. Please contact the Service Desk to request one.

These changes are part of Simmons’ ongoing efforts to improve security for our community members and our computer systems. Please be on the lookout for future communications as we get closer to the critical dates.

If you have any questions or concerns, please contact Richard Phung at [email protected] or 617-521-2692.

No phone icons created by Freepik – Flaticon

October is CyberSecurity Awareness Month

Cybersecurity & Infrastructure Security Agency Logo

See Yourself in Cyber. #BeCyberSmart.

Even though cybersecurity may seem like a complex subject, ultimately, it’s really all about people. This month we focus on the “people” part of cybersecurity, providing information and resources to help everyone make smarter decisions whether on the job, at home, or at school. 

4 Things You Can Do to #BeCyberSmart

About Your Role

When we say See Yourself in Cyber, we mean see yourself in cyber no matter what role you play. As an individual or consumer, take steps to protect your online information and privacy. Faculty, staff, and service providers can take ownership of their role by putting cybersecurity in place to prevent incidents while protecting the University’s brand and reputation. Administrators support critical operations and are a part of the network of functions and systems that others rely on.

Remember: your role plays an important part in ensuring cybersecurity for the larger ecosystem!

Phishing and Social Engineering

Phishing and social engineering campaigns are the #1 source of ransomware and other malware[1].
Phishing is a type of cybersecurity attack where malicious actors send messages pretending to be a trusted person. Social Engineering is the psychological manipulation of people into performing actions like installing malicious software, clicking a malicious link, or divulging sensitive information.

Reduce your chances of your falling victim to phishing attacks!

Beware of messages that:

  • Do not clearly identify themselves or their company
  • Come from an email address that does not match the company’s domain
  • Do not give full contact information such as the title of sender, the company’s physical address, or phone number
  • Make too good to be true offers with no strings attached
  • Ask to pay an upfront fee or asks you to transfer money for them
  • Ask to give your credit card or bank account numbers
  • Ask to send copies of personal documents
  • Remember: DO NOT provide any personal information, especially Social Security numbers or financial information. Legitimate companies would not ask for this information over the phone or email.

If an email looks suspicious, do not respond and do not click on any links or attachments. When available, “Report phishing” to block other suspicious emails.

[1] 2021 Verizon Data Breach Investigations Report (DBIR)

Beware of Disaster Scams

Remain vigilant for scams particularly related to disasters and other current events. Recent phishing campaigns include emails with attachments or links to fraudulent websites to trick victims into revealing sensitive information or donating to fraudulent charities or causes. Exercise caution in handling any email with Hurricane Ian-related subject line, attachment, or hyperlink, and be wary of social media pleas, texts, or calls related to Hurricane Ian relief efforts.

In general, avoid clicking links in unsolicited emails, never reveal personal or financial information in email and do not respond to solicitations for this type of information. Always verify the sender of email messages.

For more information about phishing and Internet scams, as well as ways to identify them, please visit our Phishing and Scams resource page

Please send any questions or concerns to Simmons Information Security Officer, Richard Phung, or the Technology Service Desk.

Upcoming Sharkpass Duo Updates

Example of a new Duo Push

Simmons Technology will be updating Duo Security — the technology behind Simmons Sharkpass — to the Universal Prompt which will affect the look-and-feel of logging into Simmons resources. 

After this change, a redesigned prompt will be presented to users at the time they login providing a sleeker, more simplified interface. 


Stay tuned! More details to be announced soon.