Experiencing phishing, fraud, or another security incident? Report an incident
Ransomware can have a significant impact on an organization – from shutting down operations to the loss of years of research data. That’s why it’s critical for the U of T community to understand the risks and know how to prevent ransomware attacks.
U of T systems remain unaffected by the CrowdStrike incident. FAQs are available for those concerned about the potential for similar disruptions.
As technology advances and consumers become more connected online, shopping on the internet is becoming an increasingly common way to purchase gifts and everyday items.
Multi-factor authentication (MFA) is essential to secure your accounts. It’s quick to set up, easy to use and improves security. With MFA enabled, you can shop, play and work online with confidence.
A critical unauthenticated remote code execution (RCE) vulnerability in OpenSSH, identified as CVE-2024-6387 and dubbed "regreSSHion" has been discovered, which allows attackers to gain root privileges on glibc-based Linux systems.
Password re-use is a significant contributor to data breaches, as stolen credentials can be exploited to gain unauthorized access to other accounts. The University of Toronto has acquired 5,000 1Password Business licenses for staff, faculty and librarians and four years of 1Password Families at no cost for students.
The Security Awareness and Training (SAT) Foundations project provides essential cyber security training that has made strides to strengthen security awareness at U of T. The project is now expanding its impact even further by onboarding faculty.
Veeam has notified one of our units about the vulnerabilities in their Backup Enterprise Manager product listed below. The worst of them, CVE-2024-29849, allows an attacker to log in to the web interface as any user.
On March 21, the Security Awareness and Training Foundations (SATF) project celebrated a significant milestone by recognizing the first 20 units to join and the first 50 users who successfully completed onboarding training in phase two, commending their collective effort in driving the project’s success.
On March 8, QNAP published a security bulletin disclosing three security flaws in its NAS software products. Exploitation of these vulnerabilities can lead to an authentication bypass, command injection and SQL injection.
