Computer Security Info for Everyone

Critical Alerts
& Advisories

• Current Email Phishing Attempts Targeting UB Community

• Microsoft Security Bulletin for June 2009

• Apple Security Updates Through June 2009 (Includes Apple QuickTime Player Updates)

• Flaws in Adobe Reader Leave Computers Vulnerable: Disable JavaScript Follow the link to learn how to do this.

• Alert: Updates are now available for Adobe Reader 9 and Acrobat 9 to address critical vulnerability

• Symantec Endpoint Protection Antivirus for Windows Upgrade available to Faculty, Staff, Students

• University at Buffalo Emergency Web Site

• Learn how to recognize phishing scams by playing CMU's Anti-Phishing Phil

• USB Device Nightmare Becomes Reality (Campus Technology)

• Mozilla/Firefox browser: Download Latest Version

• US-CERT: Risks of Peer-to-Peer File Sharing Technology

• Latest Threats & Advisories (Symantec)

• Latest Vulnerabilities & Alerts (US-Cert)

• Are hackers using your PC to spew spam & steal? (USA Today)

• SANS OUCH! Archive - Monthly Security Awareness Alert for End Users

Important Links
• UB IT Policies

• Symantec Virus & Worm Removal Tools

• Microsoft: Protect Your PC Steps

• Mac Security: SecureMac.com site

• Symantec Security Check

• Glossary of Security Terms (WhatIs.com)

Did you know?
You can use a public computer more securely if you follow these 5 safety tips. (Microsoft)

Also: Follow the links for protecting your laptop on the road and using public wireless networks more securely.

practicing secure computing
is everyone's responsibility

Phishing Attacks/Scams - are designed to trick you into revealing private information, including passwords, credit/debit card #s, SSNs, and bank account information. Never email or reveal your password to anyone, and don't fall for scams by identity thieves that try to get you to reveal private information. See the Security Alerts Page for more information about current phishing attempts. Follow the OnGuardOnline link to learn more about phishing
and visit Microsoft's "security at home" for info on protecting your computer & yourself. Then read about how your computer can become part of a botnet, sending emails by the millions (SANS Ouch, 3/2009)

Security information for anyone using a personal computer.

» Info Security: Everyone's Responsibility - Protecting personal and sensitive data.
» Ten ways to protect your identity on campus (SANS Newsletter)

Information security resources for those who are responsible for managing, supporting, or maintaining desktop and other systems, or the networks to which they are connected

Important security information for managers, deans, unit heads, PIs, with oversight responsibility for information resources

» Payment Card Industry (PCI) Compliance Information
» Subscribe to the PCI RSS feed (from NACUBO/Treasury Institute):

Best Practices

Security Presentations

Downloads/Resources

• Security Tips for Students and Current Scams & Hoaxes : SANS Institute Security Newsletter for Computer Users
• OnGuardOnline.gov
Practical Tips to help you be on guard against Internet fraud and protect your personal information
• Stay Safe Online: National Cyber Security Alliance
• Home Computer Security (CERT)
• Before you connect a computer to the network ...
• Identity Theft: What's It All About (FTC)
• Identity Theft Protection
• 10 Tips for safer instant messaging (Microsoft)
• Avoid Phishing Scams
• Electronic Privacy Information Center(EPIC)
• Privacy Tools (EPIC)
• Safety Tips for Using a Public Computer
• Use public wireless networks more safely
• Protect your laptop on the road
• Shields Up! Internet vulnerability profiling for your PC
• Securely Removing Data from Media(Indiana University)
• Guidelines for Media Sanitization(NIST)

• Ken Smith Computer Security Seminar (Summer 2007)
• Security Incident Handling - Shinil Hong Part 1 (Summer 2007)
• Security Incident Handling - Shinil Hong Part 2 (Summer 2007)
• Intrusion Detection - Wes Young (Summer 2007)
• Penetration Testing - Wes Young (Summer 2007)
• Steve Riley Security Presentations (from June 27, 2007 Security Seminar)
• Weekly Audio Security Column and Podcast by Steve Gibson and Leo Laporte
• They Know What? Security & Privacy in the Internet Age (R. Scott Granneman)
• Home Computer Security and Privacy Part One: Firewalls and Exploit Management (Patrick Crispen)
• Home Computer Security and Privacy Part Two: Verification and Prevention (Patrick Crispen)
• Securing Your IT Infrastructure Webinar: H. Morrow Long (Yale), Dennis Malone (U Colorado-Boulder), HP
• Microsoft Home Security Videos (Basic Home Computer Security, Viruses/Worms, Privacy, Spyware, Phishing)

• Symantec Antivirus, VPN, SSH downloads (Windows)
• Symantec Antivirus, VPN downloads (Mac)
• UBLinux Sofware Updates
• Microsoft Malicious Software Removal Tool (for Windows XP/2000/Server 2003)
• CyberTipline: Reporting Child Pornography and Sexual Exploitation(U.S., Canada, Mexico)
• Additional U.S. Agencies to Report Child Pornography and Sexual Exploitation

For further assistance please contact The CIT Help Desk or your local IT Support Provider. For questions & suggestions about this Web page, please contact the the IT Web group.