Description

Paul and Graham give their usual round-up of issues both within and outside the University; Graham takes a particular look at Cisco"s SmartInstall.


About four minutes into the episode, Paul alludes to a change in the way people contact CERT but wondered if it might be premature to
mention it. The day after we recorded this, an e-mail went out to the uis-announce mailing list detailing the way that security response
is to become a second-line service from 11 April with immediate issues being resolved by the UIS Service Desk. Perfect timing!

• UIS Service Desk: service-desk@uis.cam.ac.uk
• UIS Cyber Security pages: http://www.uis.cam.ac.uk/cybersecurity
• E-mail CERT: cert@cam.ac.uk
• Phish of the Day: https://help.uis.cam.ac.uk/service/security/stay-safe-online/phishing/phishy
• National Cyber Security Centre: https://www.ncsc.gov.uk/
• Three Random Words: https://www.ncsc.gov.uk/blog-post/three-random-words-or-thinkrandom-0
• The Human Factor: http://jennyradcliffe.com/the-deception-chronicles/
• US govt certificate non-renewal: http://jennyradcliffe.com/the-deception-chronicles/
• Tampa mayor Twitter hacked: https://nakedsecurity.sophos.com/2019/02/25/hijacker-pwns-tampa-mayors-account-2-weeks-before-election/
• Drupal patching: https://www.theregister.co.uk/2019/02/27/drupal_rce_exploits_seen_wild/
• Chrome flagging lookalikes: https://www.zdnet.com/article/google-chrome-to-get-warnings-for-lookalike-urls/