Cybersecurity Guidance in a Changing Environment
Dear members of the Northwestern community,
As another academic year begins, we want to share some key cybersecurity safety tips as we continue to navigate an evolving threat environment that is increasingly challenging. Keeping Northwestern secure depends not only on technology, but also on each of us.
Advances in artificial intelligence are allowing cybercriminals to make scams more convincing, adaptable and capable of operating at a much greater scale, all while cyberthreats occur around the clock. Universities are increasingly targeted because of the valuable information we hold and our open, collaborative nature.
It is more important than ever that we all know how to recognize common scams, take steps to protect ourselves and know where to get reliable information when issues occur.
Take Steps to Protect Yourself and Others
The most effective protections are simple:
- Be cautious of unexpected emails, text messages, links and attachments.
- Verify requests involving sensitive information, credentials, payments or gift cards.
- Use strong, unique passwords or passphrases. Where available, use passkeys for added security, and never share your passwords.
- Use Multi-factor Authentication (MFA) on your accounts and only approve the requests you initiated.
- Keep your devices and software up to date.
Remember to always report suspicious activity immediately to the Information Security Office at security@northwestern.edu. When you report even a single suspicious email, an unexpected MFA prompt or unusual account activity, you help protect us all.
New and Evolving Scam: Deceptive Verification Prompts
Increasingly, fraudulent websites are using human-verification challenges — “I am not a robot” prompts — to appear legitimate. What looks like a routine step can instead coerce you into taking actions that compromise your devices or credentials. If you encounter an unexpected verification prompt or it asks you to type a series of commands, stop and consider your next steps carefully. If you are unsure, contact security@northwestern.edu. Read more about this scam on the Northwestern IT site.
Know Where to Go for System Updates
The Status of University IT Services page is the official source for information on technology outages and scheduled maintenance. Always check here first to determine if an issue is already known or to see the latest updates. You also can subscribe to updates on the page.
In this complex threat environment, you may occasionally experience unexpected system outages, access changes or other security measures that occur with little or no advance notice. While these steps may seem unusual or unscheduled, they are sometimes necessary as we respond to emerging cyberthreats, critical vulnerabilities or rapidly changing security conditions. We will continue to communicate scheduled maintenance in advance whenever possible, and the Status of University IT Services page should be your first stop for updates in either case.
Security is Our Shared Responsibility
The responsibility for information security belongs to all of us. Thank you for helping us keep Northwestern's digital environment secure. Together, we will continue protecting the people, information and systems that make our academic mission possible.