Syracuse Sun

Andrew McClurg, an IT analyst with the Information Security team at Syracuse University, offers advice on staying safe online. He emphasizes four key areas: passwords, multi-factor authentication (MFA), software updates, and recognizing phishing emails.

McClurg advises using unique and complex passwords for each account. He suggests using memorable phrases or song lyrics combined with numbers and special characters. A password manager can help track and monitor passwords, alerting users to any that have appeared in data leaks.

Multi-factor authentication is another layer of security that requires a second form of verification beyond a password. This could include a code sent to a mobile device or biometric verification like fingerprint recognition. The university mandates the use of Microsoft Authenticator for this purpose.

Software updates are crucial as they often contain security patches to close vulnerabilities that could be exploited by cybercriminals. Keeping systems updated strengthens security against potential attacks.

Phishing emails remain a common threat. These are designed to steal sensitive information by creating urgency or containing suspicious links or attachments. McClurg advises caution when receiving unexpected emails asking for personal information.

To identify phishing attempts, users should check URLs carefully before clicking links and verify login screens before entering credentials. Suspicious emails can be reported using the Report Phishing function in Microsoft Outlook, which alerts the security team to take necessary actions.

For more information on MFA and recent phishing threats at Syracuse University, resources such as the ITS Phish Bowl are available for students and staff.