New Security Measure for Password Resets and Duo Assistance

New Security Measure for Password Resets and Duo Assistance

The Office of Information Technology (OIT) has started a new security process at the Help Desk. This measure aims to enhance the protection of our community members’ accounts and ensure the authenticity of requests for password resets and Duo assistance.

Video Confirmation of Identity

If you can’t reset your password or fix Duo issues on your own, the OIT Help Desk has a new way to help. They’ll send you a video link when you contact them. This video chat helps make sure it’s really you asking for help. This keeps your account safe and protects everyone at UCI from security risks.

Use Self-Service Whenever Possible

We encourage everyone to continue using the self-service tools whenever possible. However, if you require assistance and are asked to complete this video verification, please know that it is for your own security and the integrity of our systems.

Questions or Concerns?

For any questions or concerns regarding this new process, please contact the OIT Help Desk.

Thank you for your cooperation in maintaining the security of our digital environment at UCI. Your participation helps keep our entire community safe!

Understanding and Preventing Zoom Bombing

Understanding and Preventing Zoom Bombing

In our increasingly digital world, video conferencing has become an essential tool for work, education, and social connections. However, this shift has also brought security challenges, with “Zoom bombing” emerging as a significant concern.

What is Zoom bombing?

Zoom bombing occurs when uninvited participants gain access to a video conference call, typically on platforms like Zoom. These intruders often disrupt meetings by sharing inappropriate content, making loud noises, or flooding the chat with unwanted messages.

Why is it a problem?

These intrusions can be more than just annoying – they can expose participants to offensive material, compromise sensitive information, and create a hostile environment. Zoom bombing can lead to lost productivity and potential legal issues.

How to protect your meetings:

  1. Use unique meeting IDs and strong passwords for each session
  2. Enable waiting rooms to screen participants before admitting them
  3. Restrict screen sharing capabilities to hosts only
  4. Lock meetings once all expected participants have joined
  5. Avoid sharing meeting links on public platforms or social media
  6. Use the latest version of your video conferencing software
  7. Educate your team or students about online meeting etiquette and security, and familiarize yourself with the actions you can take as a host to stop inappropriate behavior in the moment

Not Just Zoom

Remember, while Zoom has given its name to this phenomenon, similar disruptions can occur on any video conferencing platform. Stay vigilant and implement these security measures regardless of the service you use.

By taking these precautions, we can create safer virtual spaces for collaboration, learning, and connection. Let’s work together to keep our online meetings secure and productive!

OIT Launches ZotDefend, a Cybersecurity Campaign Protecting UCI’s Digital World

OIT Launches ZotDefend, a Cybersecurity Campaign Protecting UCI’s Digital World

As UC Irvine increases digital collaboration, protecting our shared electronic information is more critical than ever. Over the next year, UC Irvine will be working diligently to update, strengthen and elevate our security processes to achieve new security standards that all UC campuses have committed to upholding. This initiative, named ZotDefend, will focus on protecting UCI’s digital world.

OIT’s first campus wide initiative under ZotDefend is facilitating the completion of Cybersecurity Awareness Training for all employees. Protecting UCI’s information and resources is vital to the security of our future and a responsibility that each of us share, which is why we must reach 100% compliance across campus.

Additional changes and updates to services affected by this campaign will be communicated in the coming weeks and months. 

For more about cybersecurity, and how you can protect yourself from cyberattacks, visit the Information Security website. For questions, contact OIT Security at security@uci.edu.

More Information

Changes Coming to Duo MFA on 10/19

Changes Coming to Duo MFA on 10/19

Login Changes Coming to Duo Multi-Factor Authentication

On October 19, 2023 the UCI Single Sign On (SSO) process is changing slightly. You will no longer need to select “send a push” after entering your UCInetID and password. It will automatically send a push to the last used device. The update should be seamless for most UCI faculty, staff and students, with no interruptions to services.

Below you will find the new four step process for logging in:

Step 1: Login to an SSO-enabled service (such as ZotPortal or Canvas) as you normally would with your UCInetID and password. 

Step 2: The page that states the Duo push has been sent to your phone will look a little different. 

Step 3: Open the Duo Mobile app and tap Approve. You will be automatically taken to the website you were trying to visit on your computer (ZotPortal, Canvas, etc). In the event that you don’t receive the push notification, you can select “Other options” where you can enter a 6-digit code to login (this code can be found in your Duo Mobile app).

Step 4: The page will reload asking you if this is your device. If you are using your own device, click on “Yes, this is my device” to have it remember your Duo authentication for the next 24 hours or if you are using a public computer select “No, other people use this device”, and you’re done!

Additional details can be found in this Knowledge Base article. If you need assistance with this process after the go-live on 10/19, please reach out to the Help Desk by emailing oit@uci.edu or via phone at 949-824-2222

UCI Single Sign-On Migration

UCI Single Sign-On Migration

On Thursday, February 23, 2023, The Office of Information Technology will be migrating its UCI Single Sign-On (SSO) Service away from a home grown legacy service, in favor of a modern standard based solution. Currently both servers are active and intertwined, enabling users to access a variety of different online services at UCI without having to sign in multiple times. 

This move allows UCI easier integration with vendors/3rd parties, provides a higher capacity service, can potentially reduce application development overhead and is also widely supported amongst Higher Education, which will allow for easier research and collaboration opportunities with other Universities. 

While we don’t anticipate any interruptions for our campus community currently utilizing SSO, bookmarks and links to login.uci.edu may stop working after Thursday and may need to be updated.

Additional information about this project can be found on the OIT website. If you experience any issues on or after Thursday please review the OIT Knowledge Base Article or contact the OIT Help Desk at oit@uci.edu.