Read the latest issue of the Cyber Awareness Newsletter!
Be sure to sign up to receive the newsletter each month.
Missed a past issue? No problem! View the newsletter archive to catch up.
See our cybersecurity tips and key takeaways to help keep yourself and your data safe.
Phishing prevention
What is phishing?
Phishing is a scam where someone pretends to be a trusted person, organization, or University service to steal information, credentials, or money.
How do I recognize and respond to phishing?
Be cautious of messages that:
- Create urgency or pressure.
- Ask for personal, financial, or login information.
- Contain unexpected links or attachments.
- Come from unusual senders.
- Don't match the sender's normal behaviour.
If something feels off, PAUSE before you act.
What should I do if I suspect phishing?
- Do not click links or open attachments.
- Do not share passwords or Duo codes.
- Report suspicious messages to the SOC.
- Submit phishing emails as an attachment whenever possible.
Password management
What do I need to consider when choosing a password?
- Use a complex password that uses a combination of letters, numbers, and special characters.
- Avoid using information that is commonly known about you (birthday, pet's name, etc.).
- Use a passphrase instead of a password.
- Passphrase: a password made up of multiple words.
What is two-factor authentication?
- Two-factor authentication is an extra layer of security that requires you to verify your identity using a mobile device before allowing you to login.
- Always use two-factor authentication when possible.
What are some password best practices?
- Use different passwords for each account.
- Manage passwords using a password manager.
- Do not save passwords or enter your personal information onto non-secure websites (URLs should begin with https://).
- Learn more about password standards and best practices.
Data security
How do I keep my personal devices safe?
- Install an anti-virus software on your computer to defend yourself against cyber threats.
- Do not store unencrypted files containing personal information such as usernames and passwords on your computer.
- Don't leave your devices unattended in public areas.
- Don't access your bank or work accounts on public computers.
How do I keep my data secure?
- Only use and download software authorized by the University of Waterloo.
- Cloud services (Microsoft 365, Dropbox, iCloud, Google Drive, etc.) should not be used to store sensitive information.
