ITS PRIORITIZED SUPPORT JANUARY 26 - FEBRUARY 9, 2022

ITS Client Services will be providing prioritized support to classroom issues and network support requests from Wednesday, January 26 - Wednesday, February 9, 2022.  Response times for all other requests will be slower than normal.  We apologize for any inconvenience.

Spring 2022 Classroom Technology Training Signup

ITS will be offering classroom technology training sessions from January 10th-26th. 

The trainings will take place on campus with a member of the ITS technology training team. 

The trainings will review the podium guides and basic troubleshooting for the technology in the classrooms. If possible, when signing up for a session, please include the classroom building and number you will be teaching in during the Spring. Please note some classrooms are different than others so the training will be specific to the type of classroom you are teaching in. 

To sign up please click here. 

ITS will also be offering training the second week of classes from January 19th to the 26th. Please email sleavey01@manhattan.edu to schedule a time to review the classroom technology during that time frame. 

Please feel free to reach out to Susanne Leavey (sleavey01@manhattan.edu) directly with any questions or to schedule an alternative time/date if none of the above work for you.

Spring 2022 Classroom Technology Training Sign Up

 ITS will be offering classroom technology training sessions from January 10th-14th. 

The trainings will take place on campus with a member of the ITS technology training team. 

The trainings will review the podium guides and basic troubleshooting for the technology in the classrooms. If possible, when signing up for a session, please include the classroom building and number you will be teaching in during the Spring. Please note some classrooms are different than others so the training will be specific to the type of classroom you are teaching in. 

To sign up please click here. 

ITS will also be offering training the second week of classes from January 19th to the 21st. Please email sleavey01@manhattan.edu to schedule a time to review the classroom technology during that week. 

Please feel free to reach out to Susanne Leavey (sleavey01@manhattan.edu) directly with any questions or to schedule an alternative time/date if none of the above work for you.

Updated Cyber Security Requirements

New Cyber Security Requirements

As you surely have seen in the news or in your personal life recently, cyber attacks continue to develop and increase in frequency and complexity.  Many organizations - including major technology and social media companies - are taking additional steps to ensure that the accounts of their employees and customers remain well-protected.  Manhattan College has not been immune to these attacks and associated risks and we are now being required to implement stricter controls for our community members who access institutional data.  Given this new reality, two specific requirements that we must meet are as follows:

• All Employees must complete a yearly Cyber Security training program (More information will be coming about this shortly. This must be completed by January 21st, 2022)

• All Employees must enroll their JasperNet account in Multi-Factor Authentication (MFA or 2SV) (Must be enrolled by January 18th or you will be auto-enrolled)

MFA Support Sessions

ITS will be offering support sessions with members from the Technology Training team for those who will need to enable DUO Multi-Factor Authentication on their JasperNet accounts. Below please find more information about the drop-in training sessions. There is no signup required.

When:

• January: 5th, 12th, 18th, and 19th from 11:00am-2:00pm

Where: MGL 305 (Computer Lab)

Please remember to bring your cell phone to complete the setup.

If you are unable to attend or have any questions please contact its@mahattan.edu and someone from the Training Team will reach out to schedule a separate time and answer any questions you may have.

Critical Java Vulnerability (Log4j)

In a computer program, a logging library's purpose is to record events to a file. These events could be a request for a web page, a user reports a crash, a sensor is reporting a harmful temperature, a chatbot question from a potential consumer, etc. There is a rule in secure programming to never trust user input because the input could be constructed to subvert the program. The idea that a logging library would parse log event data is incredibly stupid and the fact that it is the default behavior of Log4j 2 until the recent version 2.15 release is the basis of the current nightmare incident we are living through.

Technology vulnerabilities are reported using the CVE (Common Vulnerabilities and Exposures) system that is maintained by The MITRE Corporation. So far, three CVEs exist due to the Log4j vulnerability and they are:

• CVE-2021-44228;
• CVE-2021-45046; 
• and, CVE-2021-45105. 

The first CVE, CVE-2021-44228, has earned a perfect ten from CVSS, which is a scoring system to measure the severity of a given vulnerability. Many security experts have jokingly wondered what a perfect ten would be given that other widely deployed software with critical vulnerabilities rarely earn a 9.8. This Log4j situation is no joke, though.

The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) has published guidance for the Log4j incident.

Additionally, CISA has established a community sourced GitHub repository.

The Apache Foundation maintains Log4j 2 and publishes the Log4j 2 Change Release History Log.

ITS is tracking the evolving nature of this situation so that our organization is not impacted. If you have any concerns about particular software, services, etc. that you use at the College please email its@manhattan.edu.

UPDATE - 15-December-2021 11:03 - 15 - December 2021 - There is an Issue with our authorization provider that is affecting some logins.

UPDATE - 15-December-2021 11:03

Services are returning to normal. We will continue to closely monitor the situation. 

--------------------------------------------------------------------------------

There is an Issue with our authorization provider that is affecting some logins. 

We are working to resolve this issue as fast as possible. 

Next update before 11:00am 

DUO MFA Support Session Wednesday December 15th

ITS will be offering support sessions with members from the Technology Training team for those who will need to enable DUO Multi-Factor Authentication on their JasperNet accounts. Below please find more information about the drop-in training sessions. There is no signup required.

When:

• December: 15th (Wednesday) from 11:00am - 2:00pm
  
  
• January: 5th, 12th, and 19th (all Wednesday’s) from 11:00am-2:00pm

Where: MGL 305 (Computer Lab)

Please remember to bring your cell phone to complete the setup.

For more information on why this is needed please refer to this post.

If you are unable to attend or have any questions please contact its@mahattan.edu and someone from the Training Team will reach out to schedule a separate time and answer any questions you may have.