Read the latest issue of the Cyber Awareness Newsletter!
Be sure to sign up to receive the newsletter each month.
Missed a past issue? No problem! View the newsletter archive to catch up.
Phishing prevention
What is phishing?
Phishing is a scam where someone pretends to be a trusted person, organization, or University service to steal information, credentials, or money.
How do I recognize and respond to phishing?
Be cautious of messages that:
- Create urgency or pressure.
- Ask for personal, financial, or login information.
- Contain unexpected links or attachments.
- Come from unusual senders.
- Don't match the sender's normal behaviour.
If something feels off, PAUSE before you act.
What should I do if I suspect phishing?
- Do not click links or open attachments.
- Do not share passwords or Duo codes.
- Report suspicious messages to the SOC.
- Submit phishing emails as an attachment whenever possible.
Password management
What do I need to consider when choosing a password?
- Use a complex password that uses a combination of letters, numbers, and special characters.
- Avoid using information that is commonly known about you (birthday, pet's name, etc.).
- Use a passphrase instead of a password.
- Passphrase: a password made up of multiple words.
What is two-factor authentication?
- Two-factor authentication is an extra layer of security that requires you to verify your identity using a mobile device before allowing you to login.
- Always use two-factor authentication when possible.
What are some password best practices?
- Use different passwords for each account.
- Manage passwords using a password manager.
- Do not save passwords or enter your personal information onto non-secure websites (URLs should begin with https://).
- Learn more about password standards and best practices.
Data security
How do I keep my personal devices safe?
- Install an anti-virus software on your computer to defend yourself against cyber threats.
- Do not store unencrypted files containing personal information such as usernames and passwords on your computer.
- Don't leave your devices unattended in public areas.
- Don't access your bank or work accounts on public computers.
How do I keep my data secure?
- Only use and download software authorized by the University of Waterloo.
- Cloud services (Microsoft 365, Dropbox, iCloud, Google Drive, etc.) should not be used to store sensitive information.
