{"id":73134,"date":"2024-10-14T10:58:05","date_gmt":"2024-10-14T17:58:05","guid":{"rendered":"https:\/\/in.nau.edu\/news\/?p=73134"},"modified":"2024-10-14T10:58:05","modified_gmt":"2024-10-14T17:58:05","slug":"2024-cybersecurity","status":"publish","type":"post","link":"https:\/\/in.nau.edu\/news\/2024-cybersecurity\/","title":{"rendered":"Protect yourself from phishing with these ITS cybersecurity tips"},"content":{"rendered":"

October is <\/span>Cybersecurity Awareness Month<\/span><\/a>, and NAU is encouraging all community members to implement strong cybersecurity practices. While NAU\u2019s Information Technology Services (ITS) works to strengthen and protect our campus community from all varieties of cybersecurity threats, we need your help and participation to be successful.\u00a0<\/span>\u00a0<\/span><\/p>\n

Cybersecurity threats are on the rise globally, and educational environments like ours are prime targets for many groups. In Verizon\u2019s 2024 data breach investigation, they determined that 68% of breaches involved an individual falling victim to a scam or attack such as phishing or social engineering, and 62% of attacks were financially motivated with an average cost of $46,000 per breach.\u00a0We need you to be vigilant.\u00a0As much as ITS can do from a technical perspective, such as protecting our authentication with Two-Step Verification or providing flags on emails to indicate external senders, some things are still in your hands.\u00a0<\/span>\u00a0<\/span><\/p>\n

Cyberthreats like phishing, vishing and smishing target our society regularly and, in many cases, can only be detected by a human. Last year, more than 44% of campus employees interactively engaged with, replied to, clicked on or downloaded a document from phishing emails, including simulations provided by ITS. At the start of the Fall 2024 semester, we observed more than 22% of NAU employees interactively engaging with our phishing simulations and only 9% were reported appropriately. The importance of recognizing and reporting phishing emails is critical to campus security and represents one of the university\u2019s top risks.\u00a0<\/span>\u00a0<\/span><\/p>\n

Employees are not the only targets of these types of attacks: ITS has seen a rise in job and internship scams targeting our student community this semester, and we encourage all students to be on the lookout and report these phishing emails. Remember, if it sounds too good to be true, it probably is.\u00a0<\/span>\u00a0<\/span><\/p>\n

It is important to recognize the difference between phishing and spam emails. Spam emails, such as those from online retailers, attempt to get you to spend money or support political candidates. You can unsubscribe from those. Phishing emails attempt to get you to hand over sensitive and private information, such as your passwords, two-step verification information or gift card codes. It is important to report these different forms of emails in the appropriate manner so that ITS security analysts can respond appropriately and in a timely manner. The loss of just one NAU account password could compromise both the affected user and the entire university, resulting in significant damages.\u00a0<\/span>\u00a0<\/span><\/p>\n

Attackers use compromised accounts to target other community members, leveraging their ill-gotten access to further infiltrate NAU and the surrounding community. Protecting your account not only protects yourself and your paycheck, but also protects those around you. Don\u2019t let your account be used to take advantage of fellow students, employees or other university community members.\u00a0<\/span>\u00a0<\/span><\/p>\n

ITS strongly encourages you to take these steps to protect yourself:<\/span>\u00a0<\/span><\/p>\n