Tags » Middlebury Community Interest

 
 
 

FakeAV a leading threat in 2013

Categories: Midd Blogosphere

What is FakeAV: FakeAV is a virus designed to look like real anti-virus software in the hopes that the victim will click a link and download a malicious package. The malware often does not stop there. Many FakeAV packages continue the con by disabling true anti-virus packages claiming that they are harming the system they are intended to protect. These viruses come in many forms but are well crafted to present like a trusted virus prevention source.

Read more about FakeAV at: http://www.middlebury.edu/offices/technology/security/InfosecArticle. 

Learn more about security threats and awareness at http://go.middlebury.edu/infosec

 

Friday Links, Feb. 22, 2013

Categories: Midd Blogosphere

Got MOOCs?  Here are two recent pieces I found interesting:

The first is from Wired: Beyond the Buzz, Where Are MOOCs Really Going? by Michael Horn and Clayton Christensen.  “We believe they are likely to evolve into a scale business, one that relies on the technology and data backbone of the medium to optimize and individualize learning opportunities for millions of students. This is very different than simply putting a video of a professor lecturing online.”

The second is The Trouble With Online College from the New York Times and takes perhaps a less optimistic view. “Courses delivered solely online may be fine for highly skilled, highly motivated people, but they are inappropriate for struggling students who make up a significant portion of college enrollment and who need close contact with instructors to succeed.”

Friday Links, Feb. 22, 2013

Categories: Midd Blogosphere

Got MOOCs?  Here are two recent pieces I found interesting:

The first is from Wired: Beyond the Buzz, Where Are MOOCs Really Going? by Michael Horn and Clayton Christensen.  “We believe they are likely to evolve into a scale business, one that relies on the technology and data backbone of the medium to optimize and individualize learning opportunities for millions of students. This is very different than simply putting a video of a professor lecturing online.”

The second is The Trouble With Online College from the New York Times and takes perhaps a less optimistic view. “Courses delivered solely online may be fine for highly skilled, highly motivated people, but they are inappropriate for struggling students who make up a significant portion of college enrollment and who need close contact with instructors to succeed.”

Re: EDUCAUSE Security Breach

Categories: Midd Blogosphere

Earlier today, we received notification from EDUCAUSE that they experienced a security breach in early February. We immediately changed our domain administration passwords for miis.edu and middlebury.edu, as recommended by EDUCAUSE. In addition, we have verified that our domain details for miis.edu and middlebury.edu are okay.

Any Middlebury and Monterey users who have an EDUCAUSE account and/or profile should immediately reset their EDUCAUSE passwords  and verify their account information at http://www.educause.edu.

–Chris
PS. If you cannot reach the EDUCAUSE website right now, you might try again in a little while after the initial rush to action has subsided.

Please review the statement from EDUCAUSE below;

February 19, 2013 – Garth Jordan, Vice President, Operations, of EDUCAUSE, issued the following statement with regard to a recent breach of EDUCAUSE servers by an unauthorized third party.

“On February 5th, EDUCAUSE discovered that the server that maintains the .edu domain information and our member profile information was breached. The breach may have compromised .edu domain passwords and information contained in individual EDUCAUSE website profiles, including names, titles, e-mail addresses, usernames, and passwords. Based on our investigation to date, we do not believe the breach included access to credit card data, financial accounts, or other sensitive information.

“EDUCAUSE took immediate steps to contain this breach and we are working with Federal law enforcement, investigators, and security experts to make sure this incident is properly addressed. Additional security measures have been implemented to help prevent any future occurrences.

“As a precaution, we are proceeding as though all individual EDUCAUSE website profiles and all .edu domain holders might have been impacted. We have notified via email all .edu domain holders and all individuals with website profiles about the breach and requested that they change their passwords. All that is required from those impacted by this breach is a password re-set.

“The threat of a breach is a constant business concern; no organization is immune from these illegal and harmful activities. Therefore, our priority remains ensuring the security and privacy of our members, domain holders, and everyone who relies on our services.”

For help with EDUCAUSE website profile password changes, please contact EDUCAUSE Member Services at info@educause.edu or +1-303-449-4430.

Re: EDUCAUSE Security Breach

Categories: Midd Blogosphere

Earlier today, we received notification from EDUCAUSE that they experienced a security breach in early February. We immediately changed our domain administration passwords for miis.edu and middlebury.edu, as recommended by EDUCAUSE. In addition, we have verified that our domain details for miis.edu and middlebury.edu are okay.

Any Middlebury and Monterey users who have an EDUCAUSE account and/or profile should immediately reset their EDUCAUSE passwords  and verify their account information at http://www.educause.edu.

–Chris
PS. If you cannot reach the EDUCAUSE website right now, you might try again in a little while after the initial rush to action has subsided.

Please review the statement from EDUCAUSE below;

February 19, 2013 – Garth Jordan, Vice President, Operations, of EDUCAUSE, issued the following statement with regard to a recent breach of EDUCAUSE servers by an unauthorized third party.

“On February 5th, EDUCAUSE discovered that the server that maintains the .edu domain information and our member profile information was breached. The breach may have compromised .edu domain passwords and information contained in individual EDUCAUSE website profiles, including names, titles, e-mail addresses, usernames, and passwords. Based on our investigation to date, we do not believe the breach included access to credit card data, financial accounts, or other sensitive information.

“EDUCAUSE took immediate steps to contain this breach and we are working with Federal law enforcement, investigators, and security experts to make sure this incident is properly addressed. Additional security measures have been implemented to help prevent any future occurrences.

“As a precaution, we are proceeding as though all individual EDUCAUSE website profiles and all .edu domain holders might have been impacted. We have notified via email all .edu domain holders and all individuals with website profiles about the breach and requested that they change their passwords. All that is required from those impacted by this breach is a password re-set.

“The threat of a breach is a constant business concern; no organization is immune from these illegal and harmful activities. Therefore, our priority remains ensuring the security and privacy of our members, domain holders, and everyone who relies on our services.”

For help with EDUCAUSE website profile password changes, please contact EDUCAUSE Member Services at info@educause.edu or +1-303-449-4430.

Open Access Journal PeerJ Publishes First Articles

Categories: Midd Blogosphere

From Library Journal / The Digital Shift:
“Multidisciplinary Open Access journal publisher PeerJ announced the publication of its first 30 peer-reviewed articles today. Co-founders Jason Hoyt, formerly chief scientist and VP for research and development for Mendeley, and Peter Binfield, formerly publisher of the Public Library Of Science (PLOS), launched PeerJ in June 2012. They quickly garnered support for the project, ultimately assembling an Editorial Board of 800 academics and an advisory board of 20—five of whom are Nobel Laureates…”
Full article.

Middlebury Google Apps – Security Alert

Categories: Midd Blogosphere

Hello Middlebury Google Apps users,

While this is NOT a phishing message, it does relate to the general topic of phishing as it pertains to Middlebury’s Google Apps live pilot instance. Please read on for important information.

As you may be aware, LIS recently sent an email message to all students about an increase in the number of successful phishing attempts that are targeting middlebury.edu email addresses. In order to limit the number of compromised accounts from this most recent wave of phishing attempts, students were required to change their Middlebury password. This action has greatly reduced the number of compromised accounts, which is good!

However, we also discovered that a behavior of the Google Drive/Docs service may be causing our users to believe that certain fraudulent web forms, (such as the example screenshot below), are legitimate because the URL appears to be within our Middlebury Google Apps instance, to authenticated users.

These are NOT legitimate web forms! As standard practice, LIS does NOT request the type of information shown in the example below via Google web forms. Additionally, Google has advised that security improvements to the Google Drive/Docs service will soon be introduced to address this problem.

If you suspect that you may have recently provided your Middlebury credentials to a fraudulent Google web form, you should immediately reset your password at go/activate and then contact the Helpdesk.

If you become aware that your Middlebury account has been disabled, you must contact the Helpdesk to resolve.

It is also important that community members keep themselves informed about these types of information security threats and be vigilant about protecting their credentials and personal information. More information about safe computing practices is available at go/infosec.

EXAMPLE OF FRAUDULENT GOOGLE WEB FORM

MIDD-PHISH-WIN7-IE-400