��������Ƶ

You’re probably used to getting pop-ups on your computer, phone or other devices telling you a system update is available, right? Top tip – don’t ignore them!

Updated versions of your device's operating system (OS) include enhanced security features that older versions don’t have! Keeping your OS up to date is a minimal effort way to protect your devices and information.

What we recommend

• Enable automatic updates wherever possible, or at least avoid delaying updates when reminders appear
• Allow updates to download over mobile data and not just Wi-Fi (if you're on a mobile plan that can accommodate it)
• Restart your device regularly to auto-install updates.

Malware can infect our everyday devices even through simple interactions with software and web-based services.��Security software (e.g. antivirus software) protects devices, servers and networks from unauthorised access, viruses and other threats.��This software can be integrated into an operating system, or installed separately.

What we recommend

• Look for security software that offers a multi-layered defence system encompassing features like anti-virus, anti-phishing, anti-malware, safe browsing and firewall capabilities
• Check your device's built-in security software and ensure they're up to date.

Passwords, pins, patterns and other security question responses are important barriers for preventing unauthorised access to your accounts.

What we recommend

• Use different passwords for different accounts
• Don’t store passwords or answers to security questions in plain text form on your system or anywhere that is accessible to others. Use a password manager which will store your passwords in an encrypted format.

Multi-Factor Authentication (MFA) is an electronic verification method that requires two or more steps of authentication to provide access to online accounts, apps and other digital services.��

For example, some online accounts might require you to enter your password (the first 'factor of authentication'), along with a one-time code that's sent to you at the time of logging in (the second 'factor of authentication'). The one-time code may be sent to you by SMS or to a device such as your mobile phone.

What we recommend

• If you receive an email, SMS or notification from your MFA app triggered by a login attempt and you’re sure it wasn’t you, don't accept it - reset your password and report the issue
• Not all forms of MFA are created equal. Mobile app-based login prompts with number matching (like the ) are stronger than SMS-based ones.��Where possible, use strong MFA, especially for your private email accounts and cloud storage services.��

Email and text messages present a prime opportunity to exploit individuals and organisations. Cyber criminals can use various techniques such as phishing and smishing (SMS-based phishing) to deceive you into clicking malicious links, downloading malware-infected attachments or divulging sensitive information.��These attacks are often disguised as legitimate emails from trusted sources, making it challenging for users to identify the threats.

Successful mail-based and text-based attacks can lead to data breaches, unauthorised access to systems, financial losses and reputational damage.

What we recommend

• Report all potential phishing emails. Your personal email service provider will have a method by which you can do this. Follow the instructions for , if you are using your UNSW account
• Avoid opening attachments or links from unsolicited emails. Remember that you can check the identity of a sender via secondary methods, such as by phone or in-person. You can also search for the site with a search engine
• Never open emails that make outlandish claims or offers that seem “too good to be true”
• Enable mobile device security spam filters where possible - learn more for �����Ի���.
• Beware of suspicious messages requesting personal details or containing links.

Medibank security incident

In late 2022, a major cyber incident occurred within Medibank Private, affecting international students in Australia with overseas student health cover policies from Medibank Private or its subsidiary, Australian Health Management Group Pty Ltd (ahm).

Who can I speak to?

• Visit the  on Kensington campus for face-to-face enquiries between 9:30am - 3pm, Monday to Friday
• Contact Medibank directly on 13 23 31
• Continue to check your email for further updates from Medibank.

Backup and recovery methods ensure that important information stored on your devices and applications is also accessible to you from somewhere else.��If the primary location is disrupted, you can then simply restore the data from your secondary location. Businesses employ this technique to avoid data loss issues.

What we recommend

• Regularly back up personal information stored on devices to your preferred collaboration and storage platform
• Use strong passwords and MFA for your chosen storage platforms
• Encrypt laptops, PCs and mobile devices so they can't be tampered with if stolen.