Microsoft and Western intelligence agencies report that espionage groups, believed to be connected to Russia's Foreign Intelligence Service (SVR), are targeting and compromising hotel and conference Wi-Fi networks around the world. (Source: PCMag.com)

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting. This month's meeting is a special in-person gathering.August Agenda:What: Ice Cream SocialWhen: Wednesday, August…

The Cornell community has experienced an increase in phishing attempts over the past week. Scammers are impersonating the Office of Career Development and its employees to offer students work-study opportunities and remote internships. In some cases, these offers arrive on what appears to be…

Cybercriminals continue to target universities with email messages designed to steal credentials, financial information, and sensitive data. While Cornell's security systems help block many attacks, every member of the community plays an important role in identifying suspicious messages before they…

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.

When this change was rolled out, people were prompted to authenticate with the Microsoft Authenticator instead of Duo as originally communicated. CIT security has rolled back the change to resolve the issue.

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.

PhishAlarm, a third-party solution for reporting suspicious email directly to the IT Security Office, proved successful over its two-year implementation. Since March 9, 2024, Cornell community members have reported 29,300 messages and 11, 276 of those were flagged as malicious by security team…

Cornell security liaisons, technical support providers, and those interested in learning more about security-related topics are invited to join the monthly IT Security SIG meeting.

Tax season has begun and so have tax-related scams. Protect yourself by learning how to recognize and avoid the scams that target taxpayers.  

Cybercriminals work year-round to steal personal and financial information, but they are busier than ever during the holiday season. From November through December, many people take advantage of online shopping and travel services. As these activities increase, so do the notifications and emails…

This October we hope you learned some of the simple but powerful actions you can take to Stay Safe Online. In case you missed it, take a few minutes now to learn all about:

A new scam is popping up in inboxes disguised as an official LastPass email. Be wary of official-looking LastPass emails telling you that your account has been compromised, or that you need to download a “security patch” to regain access to your account.

About the Resource RegistryAs common as possible...Cornell has over two thousand web applications in use across the Ithaca campus. The Cornell IT Resource Registry will inventory ownership, purpose, mission criticality, data sensitivity, location, and security controls for these applications. This…

On Wednesday, February 25, 2026, at the direction of IT leadership, Cornell will complete its accelerated enforcement of DMARC ("Domain-based Message Authentication, Reporting, and Conformance") policies. After the implementation, all email messages from “@cornell.edu” addresses that fail…