Alerts | Page 18 | Information Technology | University of Pittsburgh
!

You are here

Alerts

Phishing Alert: Employee Evaluation Scam Links to Harmful Online Form

Monday, December 14, 2020 - 10:27

 

Pitt Information Technology is responding to an email phishing scam that mimics an employee evaluation notification from the University. The email informs the recipient that a file has been shared with them via OneDrive. The email includes an attachment that links to an online form, which then prompts the recipient to enter their username and password.

The following is a sample of the recent scam. If you receive this message (or any message similar to it), please report it as a phishing scam by forwarding the email message as an attachment to phish@pitt.edu. Detailed instructions on reporting scams are available at https://www.technology.pitt.edu/security/phishing-scams.

If you entered your username and password into the malicious website, please reset your University password as soon as possible.

******************************************************************************

Example of Phishing Scam

******************************************************************************

Opening the attachment displays a message like the one shown below:

Clicking the link contained in the attachment opens an online form similar to the one below that attempts to collect the recipient’s username and password.

Pitt IT strongly recommends that you do not reply to unsolicited emails or emails from unverifiable sources. If you were not expecting to receive such an email, confirm with the sender prior to interacting with the message. If you must interact with the message, avoid clicking on links contained in such emails. These may lead to sites that contain malicious software, or sites that attempt to steal your credentials. If a link looks suspicious, you can hover over the link with your mouse to preview the URL without clicking on it.

In addition, Pitt IT recommends that all students, faculty, and staff install Antivirus and Anti-Malware (Malwarebytes) Protection. Departments can submit a help request to obtain Malwarebytes for multiple machines.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

December Microsoft Security Update

Tuesday, December 8, 2020 - 16:45

 

Microsoft Corporation has announced security updates for December that affect the following software: 

  • Microsoft Windows
  • Microsoft Edge (EdgeHTML-based)
  • Microsoft Edge for Android
  • ChakraCore
  • Microsoft Office and Microsoft Office Services and Web Apps
  • Microsoft Exchange Server
  • Azure DevOps
  • Microsoft Dynamics
  • Visual Studio
  • Azure SDK
  • Azure Sphere

Pitt Information Technology recommends that users immediately identify and install the security updates necessary to remediate these vulnerabilities by using Microsoft's Windows Update feature on their computers as soon as possible. Additional information about the updates is available on Microsoft’s Security TechCenter.

In addition, Pitt IT recommends that all students, faculty, and staff install Antivirus and Anti-Malware (Malwarebytes) Protection. Departments can submit a help request to obtain Malwarebytes for multiple machines.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

Apache Announces Vulnerability in Apache Struts

Tuesday, December 8, 2020 - 16:42

 

Apache has announced a new vulnerability in Apache Struts, an open-source framework used for building Java web applications. An attacker who successfully exploits the vulnerability could potentially install programs; view, change, or delete data; or create new accounts with full user rights.

If your department uses Apache Struts, Pitt IT recommends you take the following actions:

  • Upgrade to the most recent version of Apache Struts after appropriate testing.
  • Verify no unauthorized system modifications have occurred on the system before applying the patch.
  • Frequently validate type and content of uploaded data.
  • Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack.

Additional information and a link to the latest version of Apache Struts are available on Apache’s website.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement

Phishing Alert: Payroll Notification Scam Links to Malicious Website

Monday, December 7, 2020 - 09:56

 

Pitt Information Technology is responding to an email phishing scam that claims to be a payroll notification from the University. The email links to a malicious website that attempts to capture an individual’s University credentials and mimics a Microsoft login page. The scam originates from outside the University, but the message claims to be from a University of Pittsburgh source.

The following is a sample of the recent scam. If you receive this message (or any message similar to it), please report it as a phishing scam by forwarding the email message as an attachment to phish@pitt.edu. Detailed instructions on reporting scams are available at https://www.technology.pitt.edu/security/phishing-scams.

******************************************************************************

From: Pitt <external email address removed>
Sent: Sunday, December 6, 2020 2:11 PM
To: Doe, J <jdoe@pitt.edu>

Subject: Payroll Notification 

You have a payroll update from pitt.edu Staff Portal

<link removed> to read.

Best Regards,
pitt.edu.

******************************************************************************

Clicking the link in the email takes the reader to a fake Outlook Web App login page like the one shown below:

Pitt IT strongly recommends that you do not reply to unsolicited emails or emails from unverifiable sources. If you were not expecting to receive such an email, confirm with the sender prior to interacting with the message. If you must interact with the message, avoid clicking on links contained in such emails. These may lead to sites that contain malicious software, or sites that attempt to steal your credentials. If a link looks suspicious, you can hover over the link with your mouse to preview the URL without clicking on it.

In addition, Pitt IT recommends that all students, faculty, and staff install Antivirus and Anti-Malware (Malwarebytes) Protection. Departments can submit a help request to obtain Malwarebytes for multiple machines.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

Lecture Capture (Panopto) Maintenance Scheduled on Dec. 19

Tuesday, December 8, 2020 - 10:00

 

Panopto—the service provider for Lecture Capture—will be unavailable during scheduled maintenance from 9 until 11:59 p.m. on Saturday, Dec. 19. This maintenance is necessary to maintain the stability and reliability of the service. 

Users will not be able to access online recordings or upload new videos during the maintenance period.

You can learn more about the upgrade on Panopto’s support page.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

Reminder – CourseWeb (Blackboard Learn) Retirement

Monday, December 7, 2020 - 09:27

 

As previously announced, CourseWeb (Blackboard Learn) will be fully retired and no longer available later this term. As a reminder, students and faculty should download any remaining copies of content from the University’s legacy LMS before Friday, Dec. 11, at 11 p.m.

The University Center for Teaching and Learning has created the following resources to support students and faculty through this transition:

  • A “5 Important Things to Know About the CourseWeb (Blackboard Learn) Retirement” webpage.
  • For students – A checklist and instructions for downloading copies of CourseWeb content, including submitted and graded papers, copies of course grades (not official transcripts), and files from your instructors
  • For faculty – A checklist and instructions for downloading copies of CourseWeb content, including student submitted and graded papers, tests, discussions, grade centers, test item pools, and a zipped file of your course’s content collection.

Canvas training opportunities and online resources remain available through the Teaching Center.

Canvas also offers 24/7/365 support for all Pitt faculty, student, and staff. Find details and the latest updates at teaching.pitt.edu/canvas.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

Resolved: Issue Affecting Access to Oracle Planning and Budgeting Cloud Service

Wednesday, November 25, 2020 - 10:38

 

10:44 a.m., Wednesday, Nov. 25, 2020

Oracle has resolved the issue affecting access to the Oracle Planning and Budgeting Cloud Service and restored full service.

10:38 a.m., Wednesday, Nov. 25, 2020

Oracle is experiencing an issue that is affecting access to the Oracle Planning and Budgeting Cloud Service.

Oracle is aware of the problem and working to restore service as quickly as possible. They estimate service may be restored by 11 a.m. Updates will be posted to status.pitt.edu as they become available.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

CourseWeb (Blackboard Learn) Retirement

Wednesday, November 18, 2020 - 13:40

 

As previously announced, CourseWeb (Blackboard Learn) will be fully retired and no longer available later this term. Students and faculty should download any remaining copies of content from the University’s legacy LMS before Friday, Dec. 11, at 11 p.m.

The University Center for Teaching and Learning has created the following resources to support students and faculty through this transition:

  • A “5 Important Things to Know About the CourseWeb (Blackboard Learn) Retirement” webpage.
  • For students – A checklist and instructions for downloading copies of CourseWeb content, including submitted and graded papers, copies of course grades (not official transcripts), and files from your instructors
  • For faculty – A checklist and instructions for downloading copies of CourseWeb content, including student submitted and graded papers, tests, discussions, grade centers, test item pools, and a zipped file of your course’s content collection.

In addition, “Blackboard Retirement: What You Need to Know” webinars are being offered on Nov. 18 and Dec. 4 at 2 p.m. Canvas training opportunities and online resources remain available through the Teaching Center.

Canvas also offers 24/7/365 support for all Pitt faculty, student, and staff. Find details and the latest updates at teaching.pitt.edu/canvas.

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have any questions regarding this announcement.

Zoom Recordings to be Stored Exclusively in Panopto Beginning Dec. 15

Tuesday, November 17, 2020 - 13:53

 

Effective Tuesday, Dec. 15, 2020, Zoom meetings recorded to the cloud will be stored only in Lecture Capture (Panopto), which provides easy-to-use editing tools and granular options for sharing recorded meetings. Zoom recordings made on or after Dec. 15 will no longer be stored in Zoom.  

Previous Zoom Recordings

All recordings more than 120 days old will be removed from Zoom on Dec. 15, 2020. All remaining recordings will be removed from Zoom on a rolling basis once they reach 120 days old.

  • Zoom recordings made before May 1, 2020, are saved only in Zoom and will be removed on Dec. 15. If you wish to save these recordings, please transfer them to a cloud storage service like Panopto before Dec. 15.  
  • Zoom recordings made after May 1, 2020, are already stored in Panopto and do not need to be copied or saved elsewhere.

Finding Recordings in Panopto

  • Zoom Recordings made through Canvas can be viewed by clicking the Panopto Video link in the associated Canvas course.
  • Zoom Recordings made outside Canvas are stored in your Panopto My Folder within a sub-folder named Meeting Recordings. You can control access to your recorded meetings by setting sharing permissions on the Meeting Recordings folder

We Are Here to Help

Please contact the Technology Help Desk at 412-624-HELP (4357) if you have questions or need assistance locating or moving your Zoom recordings. More information about using Panopto is available on the Pitt Information Technology website

UPMC Partners with Pitt to Implement Eduroam Global Wi-Fi Across Institutions

Wednesday, November 11, 2020 - 11:59

Change enables seamless internet connectivity between UPMC facilities in Pittsburgh’s East End, the University of Pittsburgh, and universities and research institutions around the world—from Albania to Zimbabwe

For the first time ever, associates from both the University of Pittsburgh and UPMC hospitals in the city’s Oakland, Shadyside, Lawrenceville, and Uptown neighborhoods can use log-in credentials from their home institution’s network to connect to the internet at either organization’s facilities. The change comes thanks to UPMC’s collaboration with Pitt Information Technology to extend Eduroam, a secure, global Wi-Fi network, to UPMC.

Available at Pitt since 2012, Eduroam was developed for the international research and education community in 2003 and is now available in over 100 territories. Eduroam enables access for UPMC affiliates and Pitt students, faculty, and staff who previously were required to obtain guest approvals for access while in the other’s buildings. UPMC login credentials may now also be used to access the internet at thousands of additional organizations around the globe. Likewise, visitors from Eduroam-affiliated institutions can use their home credentials to access the internet when working, studying, or conducting research at Pitt and UPMC.

“This is a significant step toward realizing our shared vision of continuous, fast, reliable, and secure Wi-Fi throughout the Oakland corridor” said Jay Graham, enterprise architect with Pitt IT. “It’s a fantastic benefit to students, faculty, and staff from both institutions—particularly resident and visiting researchers collaborating between Pitt and UPMC.”

Eduroam is now available at UPMC Presbyterian, UPMC Montefiore, UPMC Shadyside, UPMC Children’s Hospital of Pittsburgh, and UPMC Mercy.

UPMC, a known innovator in health IT, and the University of Pittsburgh Schools of the Health Sciences, among the top 10 in the U.S. to receive research funding from the National Institutes of Health, collaborate on breakthrough research and world-renowned health programs in transplantation, cancer, neurosurgery, psychiatry, orthopedics and sports medicine, among other specialties.