OREGON STATE UNIVERSITY
Main Menu   Go to extras

You are here

Security & IT Policies

Security Training

Protected Information Training: Information Services provides security training for departments on campus that deal with Protected Information, including Personally Identifiable Information (PII). To learn more about this training, please contact Dave Nevin, Deputy Chief Information Security Officer.

Be Aware: IS also developed Be Aware, a student-focused site which discusses security awareness and the effective ways to respond to security threats.

Helpdocs - Protect Your Computer: General information on protecting your computer from malware and malicious actors can be found on OSU's Helpdocs website.

Security News

Washington Court Data Breach Exposes 160K SSNs

Attackers were able to compromise servers belonging to the Washington State court system and downloaded data belonging to as many as a million residents of the state, including 160,000 Social Security numbers. Visit threatpost.com for more »

New Malicious Software Affects Webservers Hosted on Linux

If you're running a Linux webserver (Apache, Lighttpd or nginx) be sure to read these articles on how to prevent your system from being infected with the backdoor Cdorked.

Data Loss Alert: South Carolina Department of Revenue

The South Carolina Department of Revenue recently reported that 3.2 million Social Security numbers and 387,000 credit and debit card numbers were lost in a cyber attack. If you filed a tax return in South Carolina since 1998, please visit sctax.org to take actionable steps »

Web Browsers Vulnerable to Java Security Flaw

The new version of Java, version 1.7, is vulnerable to a security flaw that allows hackers to break into a person's computer to install malicious software. This vulnerability exists in both Windows and Apple (Mac) computers. Read more »

How Apple and Amazon Security Flaws Led to My Epic Hacking

Mat Honan of Wired describes how, "In the space of one hour, my entire digital life was destroyed. First my Google account was taken over, then deleted... And worst of all, my AppleID account was broken into, and my hackers used it to remotely erase all of the data on my iPhone, iPad, and MacBook... Had I used two-factor authentication for my Google account, it's possible that none of this would have happened." Take Mat's advice and take the steps to protect your accounts and, ultimately, your digital life. Read more at wired.com »

New Android Malware is Disguised as a Security App

Malicious actors seek to exploit security holes in mobile devices. Recently, PC World reported on one such threat, a new variant of the Zeus malware for Android devices that is disguised as a security app. Read more about this alert »

Malicious Actors Exploiting Hotel Internet Connections to Install Malware

According to the Internet Crime Complaint Center (IC3), a partnership of the FBI and the National White Collar Crime Center, malicious actors are targeting travelers abroad through pop-up windows when travelers establish an Internet connection in their hotel rooms. These pop-ups advised the computer user to install a software update. If the user clicked to accept and install the update, malicious software was installed on the traveler's computer. Read more about this alert »

To protect yourself, Information Services recommends that you install any updates to your computer before you travel. When traveling, make sure you can connect to a secure (WPA2) wireless network. Read more »

IT Policies

This section is devoted to providing you links to some important policies here at OSU that are intended to help safeguard security, accessibility, intellectual property, and privacy.