Information Security
Security Training
Security Training – Learn how to be safer and more secure when using technology. Take the University’s annual online Security Awareness Training course.
How can we help you?
- Report a possible phishing attempt
- I need to complete Security Awareness Training
- I need to reset or recertify my CNetID or password.
- I want to know how to use two-factor authentication.
- I need an SSL, code signing, or some other kind of security certificate.
- Report a possible compromise or other security incident
- I have a question about security for my application or have my application reviewed.
- My account was locked for spamming or due to some other security issue.
- I need access to phone records, emails, or other data for an investigation or personnel matter.
- I’m traveling and received an email asking that I contact the security team.
- My computer or phone was blocked from the network due to a virus detection.
- I want to send the security team a report about a security vulnerability or some other issue I discovered.
- A website I tried to visit is blocked and erroneously listed as suspicious. What do I do?
IT Policies
Refer to the University’s official IT policies regarding data security and use of copyrighted material.
Training and User Guides
Complete security training and get user guides for helpful security tips and advice.
Phishing Alerts
Listed below are the latest phishing scams that have been acted upon by Information Security. Think you’ve received a phishing email? Don’t click it, report it.
Email Scam (Jan 18, 2019): “E-service system update.”
From: Mark Geis Sent: Friday, January 18, 2019 9:25 AM Subject: E-service system update. All Staff are expected to migrate to the New 2019 Microsoft Outlook Web Portal to enable access to the below, Click here to migrate immediately. · Access the new staff directory ·...
read moreEmail Scam (Jan 11, 2019): “RE: 2019 mailbox update.”
Date: Fri, 11 Jan 2019 10:19:58 +0000 To: "Steve Kline" From: "Steve Kline" ITS service desk will be working to upgrade our mailbox service quota today. reason for this mail is to expand our service quota to 150GB faculty and staff are hereby advice to kindly upgrade...
read moreEmail Scam (Jan 10, 2019): “New Year Payroll Review and Validation”
From: Liy Wong, Carmen Sent: Thursday, January 10, 2019 8:51 AM To: Liy Wong, Carmen Subject: RE: New Year Payroll Review and Validation Guidelines for Validating Employee Pays. You can now VALIDATE the payroll for 015367 (January 2019) for On Cycle Please click...
read moreSecurity News
Check here for the latest security alerts that may affect you.
Threatening Hoax Email
Written by Craig Drake, Information Security Engineer (ITS) IT Security has detected a new email scam that began affecting the University of Chicago community yesterday, December 13. The scam has been widely reported at other higher education institutions. The email...
Phone Calls You Can Ignore – It’s a scam!
Written by Kendall R Williams, Information Security Engineer (ITS) Have you ever received a threatening phone call from the IRS, Social Security Administration, or perhaps from the Chinese Consulate? Phone scams are on the rise, especially during this time of year...
This Email Scam has a Real Password
Written by Kendall R Williams, Information Security Engineer (ITS) You may want to react to this new email scam, but don’t. From: Bad Guy <badguy@outlook.com> Subject: - SEuJ5Kyb Lets get right to the purpose. You don't know me and you are most likely thinking...
Vulnerability Alert: Meltdown and Spectre
What is Meltdown and Spectre? You may have heard about Meltdown and Spectre in the news these past few days. There is a lot of confusing information out there since these vulnerabilities were revealed to the public much earlier than anticipated - so we're going to...