On January 24, 2024, our IT team identified and stopped an illegal intrusion into the Life Sciences Division IT environment. We believe our actions isolated the unauthorized access to the targeted area, which is 1.19% of the campus community. We have engaged a leading cybersecurity firm to assist in our response and notified the FBI. With their assistance, we are conducting a thorough assessment of the incident, including determining the extent of the impact to servers and data.
Recent Security News Articles
As we ramp up for another academic year, it is a great time to be reminded that cybercriminals are all around us and ongoing cybersecurity awareness training is important to help us sharpen skills and protect against data breaches, phishing and other malicious attacks, and other cyber threats.
Confluence Server has been updated and patched; the service is back online.
We'd like to raise awareness about a serious vulnerability with Google Chrome and Chromium based browsers such as Microsoft Edge. Please see the details below. In short, all affected users need to update and restart the browser to resolve the vulnerability.
Wednesday afternoon, many employees received an email with the subject line “A new version of Burst report is available” along with an attached document. We can assure you that this was not a cyberattack but the result of a mistake during the testing of a new report distribution.
I wanted to make you aware of a cyber security incident that may have impacted members of our community and provide you with information and resources to help anyone who might have been affected. Please know that UCLA is committed to the security of your personal information and is working to address this.
UCLA is continuously looking out for your cyber safety. One of the ways we are increasing cyber safety is blocking known malicious threats on the VPN and Wi-Fi networks, effective June 17, 2019.
October is National Cyber Security Awareness Month (NCSAM), which is the perfect time of year for individuals, businesses, and other organizations to reflect on the universe of cyber threats and to do their part to protect their networks, their devices, and their data from those threats.
College students across the country are becoming targets of an employment scam.
Did you miss our IT Services Customer Forum on November 2nd? Here’s what happened.
On the morning of October 21, 2016, malicious actors launched a Distributed Denial-of-Service (DDoS) attack against Dyn, an organization which provides managed DNS services to companies like Twitter, Spotify, Soundcloud, Github, and many others. The outage also affected Box, which is used throughout the UCLA campus.
Security breaches are unfortunately becoming everyday occurrences, and companies must be vigilant about protecting their online data. One security system widely utilized is Multi-Factor Authentication (MFA).
UCLA Logon ID servers and other central campus systems have been updated to help protect your information against the HeartBleed vulnerability. For more information on how to safeguard your accounts, go to: https://www.itsecurity.ucla.edu/heartbleed
Legislation requires disclosure of security breaches of personal information contained in computerized data.
