CaTS | Information Technology

CaTS Blog

Known Issues With Two-Factor Authentication

Thursday, December 21, 2017

Android OS

*Requires Microsoft Authenticator App to Two-Factor into the following applications*

Affected apps:

  • Outlook app
  • Office apps (e.g., Word, Excel, etc)
  • OneDrive for Business

Unaffected Android Applications 

  • Native smartphone mail app

iOS

Applications where Two-Factor does not currently function:

  • Outlook App
  • Office apps (e.g., Word, Excel, etc)
  • OneDrive for Business 

Workaround is to contact the CaTS Help Desk. The Help Desk will temporarily disable Two-Factor Authentication. User will then authenticate into the app and then the Help Desk will re-enable Two-Factor Authentication. Once a login session is established for these applications, Two-Factor challenge does not regularly reoccur.

Unaffected iOS Applications

  • OWA app
  • Native Mail app
  • Browser-based applications (e.g., using Safari)

macOS

Affected apps:

  • Outlook client
  • Office apps (e.g., Word, Excel) may have issues opening documents from OneDrive

Workaround is to authenticate on a whitelisted network (e.g., wired on campus), or contact the CaTS Help Desk. The Help Desk will temporarily disable Two-Factor Authentication. User will then authenticate into the app and then the Help Desk will re-enable Two-Factor Authentication. Once a login session is established for these applications, Two-Factor challenge does not regularly reoccur.

Unaffected macOS Applications

  • Browser-based application access (e.g., with Safari, Chrome, or Firefox)

Common Issues With Two-Factor Authentication

To read about common issues users have experienced when using Two-Factor Authentication, visit https://guide.duo.com/common-issues. These issues are not Wright State specific.

Important Security Update Available for macOS High Sierra (10.13)

Wednesday, December 6, 2017

If you do not use a Mac computer running macOS High Sierra (e.g., a Windows PC, or earlier versions of macOS), you can disregard this message. Mac users can check the current version of their operating system by clicking into the Apple Menu, and selecting "About This Mac".

Earlier this week a vulnerability was identified in all versions of macOS High Sierra (10.13+) that allowed users access to administrative features of the system by using a blank password with the default administrator account. On Wednesday Apple released a security update for the vulnerability through the Mac App Store (click here for details), and is pushing the update through their standard update process for systems running version 10.13.1. 

This is a required security patch for all macOS High Sierra users. Computers still running version 10.13 of High Sierra may have to update to version 10.13.1 in order for the update to be available. Users can update through the Mac App Store by following the instructions on Apple's website

If you have any questions, contact the CaTS Help Desk at (937) 775-4827, or email helpdesk@wright.edu

Urgent: Phishing Scam Notice 11/20/17

Wednesday, December 6, 2017

CaTS has noticed an increase in the number of phishing attempts targeting Wright State faculty, staff and students. These scams are an attempt to steal your personal or student information, present you with fake job opportunities, or persuade you to transfer money to fake organizations.

What are phishing scams?

  • Phishing scams are emails designed to trick you into sending an unknown third party your account information or other personal or financial information.
  • These emails may look like they’re coming from Wright State, CaTS, your bank or credit card issuer, or any other institution you do business with.

How can you avoid phishing scams?

  • Remember that CaTS, WSU, and other reputable businesses WILL NEVER ask you for any personal information, such as your username and password, via email.
  • Never respond to a suspicious email or click links in those emails.
  • Don’t give out your personal information to anyone via email.
  • Don’t download attachments from an email unless you trust the sender.
  • Don’t give out financial information or transfer any money at the request of an email.

If you receive an email and are unsure if the message is a scam, feel free to contact the CaTS Help Desk at (937) 775-4827. We can help you determine whether the email you received is real or not.

Phishing Scam Notice 9/6/17

Wednesday, September 6, 2017

The Help Desk was recently notified of a phishing scam targeting Wright State students, faculty, and staff. This specific email asks the reader to reply to an email with the words "Reply Test" in order to make sure their email is working properly. If you have received this email, do not reply and delete the message immediately. If you have questions about this phishing scam, please contact the CaTS Help Desk at (937) 775-4827.

For more information about phishing scams and how to spot them, see below.

---------------------------------------------

*What are phishing scams?*

  • Phishing scams are emails designed to trick you into sending an unknown third party your account information or other personal or financial information.
  • These emails may look like they’re coming from Wright State, CaTS, your bank or credit card issuer, or any other institution you do business with.

---------------------------------------------

*How can you avoid phishing scams?*

  • Remember that CaTS, WSU, and other reputable businesses WILL NEVER ask you for any personal information, such as your username and password, via email.
  • Never respond to a suspicious email or click links in those emails.
  • Don’t give out your personal information to anyone via email.
  • Don’t download attachments from an email unless you trust the sender.

---------------------------------------------

If you receive an email and are unsure if the message is a scam, feel free to contact the CaTS Help Desk at (937) 775-4827. We can help you determine whether the email you received is real or not.

Using Shared Directories Between Departments

Wednesday, August 30, 2017

Many campus departments have established restricted network directories called the R drive among each other to facilitate the sharing of documents. If you are using a restricted directory, here are some important tips to more effectively share files between departments. 

  1. Only individuals given rights to the directories are able to see the contents of the directory. Contact CaTS should you need to add or remove individual access rights.
  2. Sharing documents between departments can be accomplished by either:
    1. Saving an original document to the shared directory.
    2. If you need to move an existing file, copying and pasting the document into the shared directory. View an instructional video here: https://www.youtube.com/watch?v=QjFL48OjJRc&feature=youtu.be

Dragging and dropping documents, or moving them, from one directory into another will result in the document not being visible to those users who do not have rights to both directories. This occurs because the document retains the file permissions of the original directory.

For questions about sharing documents using the R drive, or to add/remove access, contact the CaTS Help Desk at (937) 775-4827, or email helpdesk@wright.edu

 

Phishing Scam Notice for 6/28/17

Wednesday, June 28, 2017

The Help Desk was recently notified of an email phishing scam that targets Wright State students, faculty, and staff. This email may have the subject line "Wright Email Misuse Violation” and may appear to come from a Wright State email address.

The message instructs you to click a link in order to resolve some issues with your email account. Please be aware that this is a scam. Do NOT click on the link, reply to the email, or enter your campus username and password.

Recently there has been a large number of phishing attempts targeting Wright State University students, faculty, and staff. If an email is difficult to read or contains poor grammar, it is most likely a scam. Do not click on any links or download any attachments that may be contained in these emails.

If you have any questions about an email you suspect could be a scam, please contact the CaTS Help Desk at (937) 775-4827, or forward the email to helpdesk@wright.edu.

Phishing Scam Notice 6/19/2017

Monday, June 19, 2017

The Help Desk was recently notified of an email phishing scam that targets Wright State students, faculty, and staff. This email may have the subject line " Course issues - Resolve now” and may appear to come from “University of Wright”.

The email instructs you to click a link in order to resolve some issues with your courses. Please be aware that this is a scam. Do not click the link or reply to the email.

If you have any questions about this scam, please contact the CaTS Help Desk immediately for further assistance. You can reach us at (937) 775-4827, or toll free at 1-888-775-4827.

Important Information About Malware Threat

Thursday, May 18, 2017

Recently, a worldwide cyber-attack known as WannaCry Ransomware has affected more than 230,000 computers in over 150 countries. This malware is expected to make further attacks across the world in the coming week.

In order to protect your workstation from this attack, CaTS is requiring a full shut down and restart of all Windows PC machines.


What is the Threat?

Data stored on your computer could be deleted if affected by this attack. A security patch released by Microsoft this past March protects your workstation from being compromised when installed. To install this patch, follow the action steps below.


Actions Needed:

Perform a full Shut Down of your computer before powering it back on. A Restart or Log Off will not accomplish the patching process.
If you see messages referring to updating your computer after initiating the Shut Down, let the update finish. Do not unplug or hold down the power button as it could cause file corruption.
Once the computer fully shuts down it is safe to turn the computer back on for use.
Public computers in labs and classrooms are also at risk and should be shut down. If you manage any public computers, please perform the steps above to those machines as well.

Questions?

If you have any questions, issues, or receive a notice saying an update failed to install, contact the CaTS Help Desk at (937) 775-4827 for assistance.
 

Urgent: Phishing Scam Notice 5/3/17

Thursday, May 4, 2017

CaTS was recently notified of a phishing attempt that is Google-based. Wright State users have been receiving emails from known senders who have Google-based accounts, asking them to view a shared file. If the link is clicked, a user will then be asked to log in to their Google account to download the file. The message can be identified by looking in the “To:” field and seeing the following address:

“hhhhhhhhhhhhhhh @ mailinator.com"

If you receive one of these messages, please do not click the link or give out your personal information. Delete the message immediately.

Important Update: OneDrive for Business

Thursday, April 20, 2017

Due to the increasing demand for faculty and staff to transfer and share files to outside organizations, CaTS is activating the feature to share Microsoft OneDrive for Business files with users outside of Wright State.

This feature was not previously enabled due to security concerns. Though OneDrive for Business is considered secure cloud storage, compliance requirements covering sensitive data require the university to maintain access control over certain data types, and therefore cannot be stored outside of centrally managed storage and systems.

To clarify the acceptable use of OneDrive for Business the following policy guidelines apply:

Acceptable Data Types

  • General non-sensitive business documents
  • Non-regulated Research Data

Non-Acceptable Data Types

  • Social Security Numbers
  • Student Records covered under FERPA
  • Health Care Records - HIPAA
  • Financial Documents covered under the Gramm–Leach–Bliley Act
  • Student Loan Information
  • Personally Identifiable Information not considered directory information
  • Research Data covered under ITAR, Controlled Unclassified Information (CUI), etc.

Sensitive data types should be stored on the Wright State network storage drives (H:, R:, and K: drives).

The University does not sanction personal Dropbox, Box, Google Drive, and other cloud storage solutions for the storing of official university data. Microsoft OneDrive for Business is the university’s recommended solution for cloud file storage.

Request for documents under ‘Sunshine Laws’, or in response to subpoena, require WSU to produce documents on demand; therefore cloud storage needs to be accessible to respond to such requests. Microsoft OneDrive for Business provides the eDiscovery tools needed to respond appropriately. In addition, state law requires data stored in the cloud be kept within the borders of the United States, which many cloud solutions do not.

CaTS is now offering OneDrive and file storage training through our Technical Training program. Register for a workshop today!
To read more about OneDrive for Business, including instructions on how to share files with external users, visit https://www.wright.edu/information-technology/services/onedrive-for-business.

Pages