QR code login is being introduced, better access to Freja for international users
The interface when you log in to the IT services that require strong authentication is changing. All users will see a partially altered login flow. This will better support both international Freja users and logins on mobile phones.
Read more in a previous article: QR code login introduced to facilitate international users (in Swedish)
Email and other IT services to get strong authentication in October
An additional group of IT services now require strong authentication. Lucris will be subject to strong authentication from 1 October, while Microsoft 365, Zoom and others will require it from 15 October. These are systems many people use and if you have not yet prepared for strong authentication, now is the time. Microsoft 365 includes email and calendars, for example.
A common question is whether external guests, with whom you have Teams or Zoom meetings, will also need strong authentication. The answer is no. Strong authentication only applies to accounts at Lund University. Your guests log in with their own accounts and enter the meeting as usual.
Instructions and guides on how to prepare: Strong authentication
A list of the IT services affected (in the right column): Authentication/authorisation | IT Website.
Regarding the cyberattack on Miljödata
The attackers against Miljödata AB, which supplies the Adato system to Lund University, succeeded in gaining access to some information about all employees at the University.
Read more about the incident: A cyberattack targeting Lund University's system supplier, Miljödata AB, has resulted in a personal data breach
Take the compulsory information security course
Protect yourself – and the whole University!
Everyone with a LU account is to complete the mandatory basic information security training. The aim is to raise awareness of the risks that may exist when handling different types of information within the University’s operations.
Have you taken the information security course?
5 ways to increase IT security
The Division of IT is often asked what measures people can take themselves to enhance IT security. There are many things you can do. Here are five useful tips.
- Think before you click. Be careful with links in emails – even if they appear to come from a colleague or manager. Check the sender carefully. Even if the email appears to come from a well-known sender, you should be wary of strange links.
- Report suspicious emails. Have you received a suspicious email? Report it straight away. This helps University IT organisations to act quickly and protect others. If you suspect that you have fallen prey to any type of phishing, it is important that you change your password immediately. You report this to LU Servicedesk as usual, servicedesk [at] lu [dot] se (servicedesk[at]lu[dot]se).
- Be careful about using computers and phones other than your own. Insecure computers and phones are a common cause of password breaches. You might use a shared family computer with weaker security. Perhaps you borrow a computer from a colleague at a conference to check your emails. Or you take an old, scrapped computer out of your desk drawer. When you use a computer managed by Lund University, you can rest assured that it is protected from viruses and similar threats.
- Update your software regularly. Make sure your computer and known apps/programmes are up to date. If an “Update software” banner appears, you are to update. Security updates eliminate known vulnerabilities.
- Lock your computer when you leave it. This is an easy way of preventing unauthorised access, especially in open plan office environments.
And remember – never share your login details. Not even with your closest colleague. Your login details are yours alone.
When travelling or commuting, there are several things to consider in order to increase IT security. We have summarised this advice in a Travel Safety Checklist.
Would you like to help provide better information on IT and support?
The Division of IT wants to improve communication and support around IT and telephony at the University. As part of these efforts, we would like to conduct a number of interviews, primarily with employees. Each interview lasts approximately 45 minutes. They are individual but anonymised afterwards. The subject of the questions may vary. At the moment we are interested in questions about support and self-service, but we may be interested in other topics in the future. Contact kommunikation [at] it [dot] lu [dot] se (kommunikation[at]it[dot]lu[dot]se) if you are interested in helping to improve IT communication and support.