News

Filter by:

Limit to news where the title matches:
Limit to items where the date of the news item:
Date range
Limit to items where the date of the news item:
Limit to news items tagged with one or more of:
Limit to news items where the audience is one or more of:
Wednesday, February 3, 2021

Phishing scam reported - February 3

What is happening? The email below was sent to University of Waterloo members this morning. If you have received this email, do not click any links and do not reply.

What should I do if I have received this email? Suspected fraud attempts should be reported to the Security Operations Centre at soc@uwaterloo.ca. Reports of successful fraud should be directed to UW Police Services at uwpolice@uwaterloo.ca.

How do I know if an email I received is a phishing scam? 

  • Hover over links - the real link address will appear at the bottom of your web browser window.
  • Look for typos - phishing emails often contain typos and bad grammar.  
  • Verify with the real source - if you receive a suspicious email supposedly sent by your manager or another department, find their actual contact information and reach out to them directly.

Learn more about cyber security best practices: https://uwaterloo.ca/cyber-awareness/

Questions or concerns? Contact the IST Service Desk, helpdesk@uwaterloo.ca or ext. 44357.

What is happening? The IST Knowledge Base will be consolidated and accessible at https://uwaterloo.atlassian.net/wiki/spaces/ISTKB/. The on-prem Knowledge Base will no longer be available as of Monday, February 8.

Why is this happening? Content in the on-prem IST Knowledge Base has not been updated since the Knowledge Base migrated to Confluence Cloud in November 2020. All up-to-date content can be accessed at https://uwaterloo.atlassian.net/wiki/spaces/ISTKB/.

What is the impact? The IST Knowledge Base will no longer be available athttps://wiki.uwaterloo.ca/Please note this change will not affect any other Confluence spaces hosted on https://wiki.uwaterloo.ca/.

What do website content editors need to do? If you have any links to the on-prem IST Knowledge Base on your website(s), please update with new links to the cloud version of the IST Knowledge Base before February 8.

Questions or concerns? Please contact the IST Service Desk, helpdesk@uwaterloo.ca or ext. 44357.

Resolved (Jan 29, 4:30 p.m.): WCMS sites should be allowing logged in users to access sites as expected again.

  • Users may need to clear all browser cache & cookies and restart their browser to fix any persisting issues.
  • If you continue experiencing issues after taking these steps, please contact rt-ist-wcms@rt.uwaterloo.ca.

Questions or concerns? Please contact the IST Service Desk, helpdesk@uwaterloo.ca.


What is happening? WCMS sites are intermittently behaving as though logged in users have not logged in. IST is investigating and more information will be shared when available.

What do users need to do? IST is recommending that you minimize working on WCMS sites until the issue is resolved.

Questions or concerns? Please contact the IST Service Desk, helpdesk@uwaterloo.ca.

Wednesday, January 13, 2021

CAS to be disabled – January 20

What is happening? In December 2019, IST announced an initiative to decommission the Central Authentication Service (CAS). Having worked with website/application owners to move most affected systems to the centrally supported web-based authentication service, Active Directory Federation Service (ADFS), CAS will be disabled on January 20, 2021.

What is the impact? No impact to end users is expected. Sites that are unable to move to ADFS at this time have been added to an approved-use list. Users will continue to log in to these sites as normal.

Questions or concerns? Please contact the IST Service Desk, helpdesk@uwaterloo.ca

Resolved (Jan 6, 10:40 a.m.): Bell and Virgin mobile users should be able to receive Duo 2FA authentication phone calls again. Please note Duo calls may appear to be coming from Canadian phone numbers outside Ontario.

Questions or concerns? Contact the IST Service Desk, helpdesk@uwaterloo.ca or ext. 44357.
 



What is happening? Bell and Virgin mobile users may be experiencing issues with receiving Duo 2FA authentication phone calls. IST is working with the vendor to resolve the issue and more information will be shared when available.

What do users need to do? Users can accept 2FA prompts using the alternative methods below:

  • Duo Push: enroll your device by going to https://2fa.uwaterloo.ca/duo/enroll and accept Duo Push prompts using the Duo Mobile app
  • Enter a Passcode: select the ‘Enter a Passcode’ option from the Duo Prompt screen to enter a passcode generated via the Duo Mobile app or via SMS
    • For VPN, use 'sms' as the second password to generate a passcode via SMS

Questions or concerns? Contact the IST Service Desk, helpdesk@uwaterloo.ca or ext. 44357.