May 1, 2023

UCSF IT Security

Awareness News You Can Use

Monthly Articles, Contests, and Upcoming Events

May's Quiz is on Reporting Incidents via Phish Alarm and Other Means

Please read "See Something Phishy or Strange? Use Phish Alarm to Report Potential Phish and Contact the IT Service Desk or UCSF Police for Other Security Incidents" and take the monthly quiz. All UCSF faculty, staff, contractors, students, and affiliates who take the quiz will be entered in a drawing for one of six $50 Amazon gift cards.

Remember, you can also visit our previous security awareness articles and take the quizzes. Visit our past campaigns at the UCSF Awareness Site.

New IT Security Awareness Flyer Posting Contest to Help Combat Duo Fatigue Attacks! Win a $50 Amazon Gift Card!

As you may recall from last month, Duo Fatigue Attacks are when attackers spam you with Duo push notifications, hoping you will eventually “fatigue” from the onslaught of requests and give in, granting access to your account and UCSF resources such as email.

Duo fatigue attacks are increasing and to help combat them, IT security has created a flyer with the actions needed to protect your credentials and the University. Please post them everywhere allowed such as breakrooms, department bulletin boards, or your refrigerator. Take a picture of the posted flyer and send it to [email protected]. Each picture is an entry in a drawing for a $50 Amazon gift card. April's winner was Rebecca Leon. Thanks, Rebecca!

Click here to view and print the flyer

Latest Phishing Campaign

Congratulations to the over 2400 people who reported the document deletion mock phish via Phish Alarm!

If you missed the "red flags" from our latest mock phish, they are displayed at the bottom of our page "Protect UCSF and Myself from Phishing and Other Similar Scams".

If an email seems at all strange, report it via Phish Alarm. You will find out almost instantly how to further interact with the email. Over-reporting is not an issue! Better safe than sorry! 

New and Improved Required UC Cybersecurity Awareness Course

The next time you complete your annual mandatory UC Cyber Fundamentals Awareness Course on the UC Learning Management System (LMS), you will see a new and improved course - and you could win a $50 Amazon gift card. Find out more about the course and see the new contest below!

See the Latest Phishing Scams and Know

What To Do! 

In the last year, cyber criminals delivered a wave of cyber-attacks that were not just highly coordinated, but far more frequent and advanced than ever before seen. Many of them began with a phishing email. To help everyone be more aware of the current widespread and impactful phishing scams, IT Security has created a page New Phishing Threat Alerts. It lists the prevalent phishing campaigns and provide additional information on:

  • What to watch out for
  • Key actions to take
  • Tips to remember

Please bookmark the page and check back often. IT Security will be updating it frequently.

 

Ongoing Monthly Contests

 

Everyone Can Win a Prize!

1. Refer your UCSF friends and colleagues to the UCSF Awareness Site and ask them to:

  • Read the latest article and take the quiz.
  • Ask them to enter your email address as the referrer.
  • State they are new to the site on the last page of the monthly quiz.

For each 20 people you refer, you will win a $25 Amazon gift card (limit 2/year, referrals do not expire).

 

2. Each month we will be selecting one person to win a $50 gift card from everyone who uses the Phish Alarm Button to report suspicious emails. They will win a $50 gift card. This important security tool analyzes the email and lets you know if it is an actual phish. No need to contact the Service Desk or IT Security when you get something suspicious. For more information, please visit the Phish Alarm Overview Page.

 

3. Each month we will be randomly selecting five people from everyone with “current” status on their UC Cyber Fundamentals Awareness Course assignment to win a $50 Amazon Gift Card. Here’s how to check your status on the annual training requirement:

  • Click on the UC Learning Center link in MyAccess
  • Click on “UC Learning Center Login” from the UC Learning Center page
  • Click on “Required Training”
  • Check the Status of “eCourse: UC Cyber Security Awareness Fundamentals”

Winners Circle

April Awareness Quiz Winners

Tom Dunn

Lina Yu

Bonnie Johnson

Lakshmidevi Pabbisetty

Robyn Kurland

Jennifer Lyon

 

April Phish Alarm Winner

Paul Axelrod

 

April LMS Cybersecurity

Awareness Course Winners

Manu Hegde

Bansri Doshi

Annie Reyes

Turan Aghayev

Hannagiselle Tia-Baluyot

 

April Top Quiz Referrers

Millo Pasquini

Eve Phong (Dinh)

Khin Nyunt

Cristina Morrison

Jennifer Camacho

Julie Erich

Matthew Lau

Thea Dela Cruz

Casey Nelson

John Hasper

Gato Gourly

Jason Dong

 

April Duo Fatigue Flyer Winner

Rebecca Leon

Future Events

Wednesday, May 3, 2023, 9:00 AM - 4:00 PM

UCSF Digital Health Equity Symposium

UCSF Health

Learn and share best practices in advancing health equity across UC and Northern California. Topics include public health policy trends, diversity, equity, and inclusion, and more.

Click here for more information about the UCSF Digital Health Equity Symposium

Thursday, May 11, 2023, 11:00 AM - 2:00 PM

Staff Resource Day 2023

Gene Friend Way Plaza, Mission Bay

 

Join us at the IT Security table! You can take IT Security awareness quizzes and win prizes on the spot. There will also be a drawing for a Pacsafe Vibe Anti-Theft Backpack! It protects your gear while you are on adventures like riding BART with features like stainless steel wire mesh built into the bag's fabric and wire reinforced backpack anchor straps to protect your gear against cut & run.

It also has a zippered main compartment with an RFID blocking pocket that prevents your data (such as from credit cards and key cards) from falling into the wrong hands.

Click here for more information on Staff Resource Day

Thursday, June 6, 2023,11:00 AM - 12:00 PM

Planes, Trains, Automobiles...and Staying Safe Online

National Cybersecurity Alliance

This webinar will provide practical tips for maintaining your amazing cybersecurity habits even when you are away from home! Learn about public wi-fi, when to use your device’s location settings, and keeping your identity safe when traveling. It doesn’t matter if you’re headed across an ocean or down the street, this information will give you a better understanding of how to best protect yourself when you’re on the go.

Click here to register for Planes, Trains, Automobiles...and Staying Safe Online

Past Events

Tuesday, October 4 2022, 11:00AM-12:00 PM

Accessibility and Security Panel Discussion

Panel Members:

Scott Hollier, CEO & Co-founder Centre for Accessibility

Yue-Ting Siu, TVI PHD, Teacher of Students with Visual Impairments

Jiatyan Chen, Online Accessibility Program Manager, Stanford

Nicholas Borton, Chief Information Security Officer UCD

Lucy Greco, Web Accessibility Evangelist UCB

Diane Tyo, IT Operational Continuity Analyst UCLA

Moderator:

Cecile Puretz, Assistant Director of Disability Access & Inclusion at University of California San Francisco

Accessibility and Cybersecurity are both important considerations, particularly in inclusive yet cyber-vulnerable environments like those in the University of California system. Typically, conversations on these two topics are completely separate, but this event brought them together in a panel discussion to increase understanding and awareness of both sets of needs. With some effort and collaboration, it's possible to make technology both more accessible and more secure.

Click here to watch the Accessibility and Security Panel Discussion Webinar