IS Security SpiderBytes

Published Date(s): 6/16/2026
Title: Upcoming - Intro to Phishing (Mandatory)
Message: This week the mandatory cybersecurity awareness course, Intro to Phishing, will be made available. This training will help you to recognize obvious signs of phishing and apply methods for avoiding malicious emails. Through practical examples and actionable guidance users will be able to recognize phishing attempts and reduce cybersecurity risk.

The training course will be available through Workday Learning beginning Thursday, June 18th 2026. Users will have up to 60 days from the launch date to complete the required training.

Learning Objectives
- Identify common characteristics and goals of phishing emails
- Identify common warning signs that an email might be a phish
- Explain how to effectively deal with a suspicious email

This training supports UR’s ongoing efforts to strengthen security awareness and stay SpiderSecure.
Website Link: N/A

Published Date(s): 6/18 | 6/23/2026
Title: Available - Intro to Phishing (Mandatory)
Message: This mandatory training is part of UR’s Cybersecurity Awareness & Education Program and focuses on phishing, one of the most common cyber threats. This training will help you to recognize obvious signs of phishing and apply methods for avoiding malicious emails. Through practical examples and actionable guidance users will be able to recognize phishing attempts and reduce cybersecurity risk.

The training course is now available through Workday Learning.
Users will have until Monday, August 31st 2026 to complete the required training

Learning Objectives
- Identify common characteristics and goals of phishing emails
- Identify common warning signs that an email might be a phish
- Explain how to effectively deal with a suspicious email

This training supports UR’s ongoing efforts to strengthen security awareness and stay SpiderSecure.
Website Link: https://sl.richmond.edu/Jq

Published Date(s): 7/6 | 7/20/2026
Title: Available - Intro to Phishing (Mandatory)
Message: This mandatory training is part of UR’s Cybersecurity Awareness & Education Program and focuses on phishing, one of the most common cyber threats. This training will help you to recognize obvious signs of phishing and apply methods for avoiding malicious emails. Through practical examples and actionable guidance users will be able to recognize phishing attempts and reduce cybersecurity risk.

The training course is now available through Workday Learning.
Users will have until Monday, August 31st 2026 to complete the required training

Total Runtime - 10 mins

Learning Objectives
- Identify common characteristics and goals of phishing emails
- Identify common warning signs that an email might be a phish
- Explain how to effectively deal with a suspicious email

This training supports UR’s ongoing efforts to strengthen security awareness and stay SpiderSecure.
Website Link: https://sl.richmond.edu/Jq

Published Date(s): 7/20 | 7/22 | 7/24/2026
Title: LastPass Update: Android Autofill
Message: As of July 28, 2026, LastPass will discontinue its legacy autofill functionality and transition to Android’s built-in autofill service, the secure standard used across Android apps.

What does this mean for you?
If you use the LastPass app on an Android device, this change may affect how autofill is configured.
No action is required for Apple (iOS) users at this time.

To ensure your autofill settings are configured correctly, please review the SpiderTechNet article linked below. It provides step-by-step instructions for checking and updating your LastPass autofill settings on Android, if needed.
Website Link: https://sl.richmond.edu/JT

Published Date(s): 7/22 | 7/29/2026
Title: Available - Understanding Deepfakes
Message: This optional training is part of UR’s Cybersecurity Awareness & Education Program and focuses on AI advancements related to deepfakes. This course will inform users of deepfake techniques such as face swapping and voice cloning.

The training course is now available through Workday Learning.

Total Runtime - 3 mins

Learning Objectives
- Recall what deepfakes are and how they can be created
- Recognize different types of deepfakes
- Recall measures to mitigate the risks of deepfakes

This training supports UR’s ongoing efforts to strengthen security awareness and stay SpiderSecure.
Website Link: https://sl.richmond.edu/JP

Published Date(s): 7/24 | 7/29 | 8/3 | 8/4/2026
Title: Be Ready: Duo Verified Push
Message: On Wednesday, August 5th, be ready to start using Duo Verified Push.

Previously, users approved or denied a login request by pressing a button in the Duo Mobile app. With Duo Verified Push, you will now be asked to enter a 3-digit verification code displayed on the sign-in screen into the Duo Mobile app before approving the request.

Why is this changing?
Cybercriminals often use "push fatigue" attacks by repeatedly sending authentication requests in hopes that someone approves one by mistake.

Duo Verified Push helps prevent these attacks by requiring you to enter a unique 3-digit code displayed on the sign-in screen before approving the request. This extra step adds only a few seconds to the login process while providing much stronger protection.

More information on how Duo Verified Push works is in the provided link.
Website Link: https://sl.richmond.edu/JU