Last week, OIT notified the campus of a successful phishing campaign targeting the SMU community. In this campaign, we noted that cybercriminals had begun using a new technique where they repeatedly send Duo requests to users who have shared their username and password to annoy users into approving the two-factor request.
This technique, referred to as “MFA fatigue,” has become increasingly common, and over the next several weeks, OIT will begin implementing measures to combat this trend. In the meantime, we recommend you take the following actions if you notice something suspicious: Continue reading Protect Yourself: Fighting MFA Fatigue
Phishing attempts—those pesky emails that try to lure you into revealing personal info like passwords and financial information—are constantly evolving to thwart the University’s effort to stop them. While users only receive a small percentage of these emails in their inboxes, it takes one wrong click to start off a chain of new attempts.
Last October, SMU offered employees the option of participating in a pilot of our first-ever 
In an effort to strengthen password security, starting December 19, 2022, any new password may not contain all or part of the user’s account name, common passwords, or words related to an SMU campaign that are vulnerable to password-guessing attacks. 
Over the past several years, we have begun to rely heavily on Duo Security for our Two-Factor Authentication. With the 