A critical security vulnerability has been identified in versions of Adobe Flash Player, and UAB users are urged to update it on their computer systems. flash player

Adobe has released an emergency update to address the issue. The vulnerabilities could allow a hacker to take control of a system.

Users can verify that they have the latest version of Flash Player by visiting the website: https://www.adobe.com/software/flash/about/.
AdminSysScreenshot
A new interactive Administrative Systems page, which many UAB staff and students use to access systems and applications across campus, is now live. 

UAB Web Communications and UAB IT collaborated to redesign the page so that users can custom configure the buttons that access various systems, from Banner to Oracle to Xtender. 

The default layout shows the systems in alphabetical order, but users can click the “Configure Layout” button to rearrange the buttons, add or remove them.

A user’s customized layout is retained in the web browser when he or she returns.

Active system alerts and other important messages will also be displayed on the page.

Redesigning the Administrative Systems page was an idea proposed on SPARK, UAB IT’s platform for crowdsourcing innovation. 

UAB IT recommends as a best practice that campus users access systems through the Administrative Systems page, rather than bookmarking systems, so that they can get up-to-date information and alerts as well as the correct links to those systems.
To help protect students, faculty and staff, access to personal information in the Electronic Phonebook at uab.edu/directory is now password-protected. Key Keyboard

All faculty, staff and students will need to log in with a BlazerID to search or access that directory information for people. Information for units and entities will not require a login.

The change was made to protect members of the UAB community from harrassment and scamming. Scammers often use publicly available information — including information from directories and social media accounts — to try to defraud people.

It is important to note that there has been no breach of private information at UAB.

UAB IT also recommends that students, faculty and staff review the privacy settings on their social media accounts. Using complex passwords for all accounts, along with dual-factor authentication when possible, can also help protect your personal information.

Any member of the UAB community who receives a scam phone call should report it to UAB Police, 205-934-4434, and UAB Information Technology at AskIT@uab.edu.
cellphone imageforstory

UAB students — and even their parents — continue to be targets of phone scammers who impersonate law enforcement officers or IRS representatives.

Similar scams — in which malicious callers make threats about alleged debt — have targeted students at universities around the country. Although the phone scammers often know personal details about students — such as their majors — students should know there has been no breach of protected information at UAB. Such information is often publicly available in student directories or social media. The attackers can spoof a police station phone number or a government number so the call will look like it is coming from such an office.

More information about IRS scams is available here.

Tips if you receive one of these calls:
  • Do NOT provide Social Security numbers, birth dates or any other personal information.
  • Ask to call the “officer” or "IRS representative" back, take down their number and call the number back.
  • Ask them to meet you at the police station in question, if they claim to be from a police department.
  • When in doubt, hang up and call the UAB Police Department at 205-934-4434.

Tips for protecting your identity on social media:

  • Set your privacy settings so that your information and your posts are only viewable by those you trust.
  • Only accept friend or connection request from those you know and trust and those you are comfortable with sharing information. For example, posting that you and your family are on vacation on your social media page lets potential criminals know that no one is at your residence. This could make you a candidate for theft. (You can also un-friend or un-connect with those you do not trust.)
  • Consider which pieces of your sensitive information, such as your birth date, personal email address, home address, current employer, high school, etc., you should and shouldn't display. Identity thieves can piece together your information in order to take over your identity.
  • For professional sites, such as LinkedIn, use a different email address than the one used for social media s ites, such as Facebook, MySpace and Twitter. This way, peopel you are linked to professionally can't find you on social media sites via your email.
Page 24 of 33