Computer Security Info for Everyone

Critical Alerts
& Advisories

• Gmail, AOL, Yahoo! All Hit by Webmail Phishing Scam
Fake web site created to lure users into entering their email addresses and passwords.

• US-CERT Current Activity
Subscribe to the US-CERT Current Activity RSS feed

• Current Email Phishing Attempts Targeting UB Community

• 5 More Facebook, Twitter Scams to Avoid

• Microsoft Security Bulletin for September 2009

• Apple Security Updates through September 2009

• Adobe Product Security Vulnerabilities and Issues

• Alert: Updates are now available for Adobe Reader 9 and Acrobat 9 to address critical vulnerability

• Symantec Endpoint Protection Antivirus for Windows Upgrade available to Faculty, Staff, Students

• University at Buffalo Emergency Web Site

• Learn how to recognize phishing scams by playing CMU's Anti-Phishing Phil

• USB Device Nightmare Becomes Reality (Campus Technology)

• Mozilla/Firefox browser: Download Latest Version

• US-CERT: Risks of Peer-to-Peer File Sharing Technology

• Latest Threats & Advisories (Symantec)

• Latest Vulnerabilities & Alerts (US-Cert)

• Are hackers using your PC to spew spam & steal? (USA Today)

• SANS OUCH! Archive - Monthly Security Awareness Alert for End Users

Important Links
• UB IT Policies

• Symantec Virus & Worm Removal Tools

• Microsoft: Protect Your PC Steps

• Mac Security: SecureMac.com site

• Symantec Security Check

• Glossary of Security Terms (WhatIs.com)

Did you know?
You can use a public computer more securely if you follow these 5 safety tips. (Microsoft)

Also: Follow the links for protecting your laptop on the road and using public wireless networks more securely.

practicing secure computing
is everyone's responsibility

October is National Cyber Security Awareness Month - Visit the new computer security web site to learn more about protecting your computer, digital identity & UB, and view the new look of the computer security web site currently under construction.

Phishing Attacks/Scams - are designed to trick you into revealing private information, including passwords, credit/debit card #s, SSNs, and bank account information. Never email or reveal your password to anyone, and don't fall for scams by identity thieves that try to get you to reveal private information. See the Security Alerts Page for more information about current phishing attempts. Follow the OnGuardOnline link to learn more about phishing
and visit Microsoft's "security at home" for info on protecting your computer & yourself.
Finally, visit the UBIT Software page to download free antivirus software.

Security information for anyone using a personal computer.

» UB_Secure: Secure wireless access for your laptop and handheld devices at UB
» Info Security: Everyone's Responsibility - Protecting personal and sensitive data.
» Ten ways to protect your identity on campus (SANS Newsletter)

Information security resources for those who are responsible for managing, supporting, or maintaining desktop and other systems, or the networks to which they are connected

Important security information for managers, deans, unit heads, PIs, with oversight responsibility for information resources

» Payment Card Industry (PCI) Compliance Information
» Subscribe to the PCI RSS feed (from NACUBO/Treasury Institute):

Best Practices

Security Presentations

Downloads/Resources

• Security Tips for Students : SANS Institute Security Newsletter for Computer Users
• OnGuardOnline.gov
Practical Tips to help you be on guard against Internet fraud and protect your personal information
• Stay Safe Online: National Cyber Security Alliance
• Home Computer Security (CERT)
• Before you connect a computer to the network ...
• Identity Theft: What's It All About (FTC)
• Identity Theft Protection
• 10 Tips for safer instant messaging (Microsoft)
• Avoid Phishing Scams
• Electronic Privacy Information Center(EPIC)
• Privacy Tools (EPIC)
• Safety Tips for Using a Public Computer
• Use public wireless networks more safely
• Protect your laptop on the road
• Shields Up! Internet vulnerability profiling for your PC
• Securely Removing Data from Media(Indiana University)
• Guidelines for Media Sanitization(NIST)

• Ken Smith Computer Security Seminar (Summer 2007)
• Security Incident Handling - Shinil Hong Part 1 (Summer 2007)
• Security Incident Handling - Shinil Hong Part 2 (Summer 2007)
• Intrusion Detection - Wes Young (Summer 2007)
• Penetration Testing - Wes Young (Summer 2007)
• Steve Riley Security Presentations (from June 27, 2007 Security Seminar)
• Weekly Audio Security Column and Podcast by Steve Gibson and Leo Laporte
• They Know What? Security & Privacy in the Internet Age (R. Scott Granneman)
• Home Computer Security and Privacy Part One: Firewalls and Exploit Management (Patrick Crispen)
• Home Computer Security and Privacy Part Two: Verification and Prevention (Patrick Crispen)
• Securing Your IT Infrastructure Webinar: H. Morrow Long (Yale), Dennis Malone (U Colorado-Boulder), HP
• Microsoft Home Security Videos (Basic Home Computer Security, Viruses/Worms, Privacy, Spyware, Phishing)

• Symantec Antivirus, UBVPN, SSH downloads (Windows)
• Symantec Antivirus, UBVPN, SSH downloads (Mac)
• UBLinux Sofware Updates
• Microsoft Malicious Software Removal Tool (for Windows)
• CyberTipline: Reporting Child Pornography and Sexual Exploitation(U.S., Canada, Mexico)
• Additional U.S. Agencies to Report Child Pornography and Sexual Exploitation

For further assistance please contact The CIT Help Desk or your local IT Support Provider. For questions & suggestions about this Web page, please contact the the IT Web group.