%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R ] /Count 1 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 28 0 R /I2 29 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20250714103937+00'00') /ModDate (D:20250714103937+00'00') /Title (Report 07-2025) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 12 0 R 14 0 R 16 0 R 18 0 R 20 0 R 22 0 R 24 0 R 26 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 4871 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 281.192 521.469 465.542 re f 0.773 0.773 0.773 RG 0.75 w 0 J [ ] 0 d 45.641 281.567 520.719 464.792 re S 0.773 0.773 0.773 rg 61.016 296.942 m 550.984 296.942 l 550.984 297.692 l 61.016 297.692 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(REACTIVATE YOUR USERNAME BEFORE 1 APRIL)] TJ ET 0.400 0.400 0.400 rg BT 61.016 664.909 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 664.909 Td /F3 9.0 Tf [(August 02,2021)] TJ ET BT 170.069 664.909 Td /F2 9.0 Tf [( by )] TJ ET BT 184.577 664.909 Td /F3 9.0 Tf [(IT Communications)] TJ ET 0.153 0.153 0.153 rg BT 61.016 637.420 Td /F4 9.0 Tf [(Network access \(usernames\) for staff will expire at the )] TJ ET BT 279.581 637.420 Td /F1 9.0 Tf [(end of March)] TJ ET BT 335.588 637.420 Td /F4 9.0 Tf [( unless youreactivate your username.)] TJ ET BT 61.016 617.431 Td /F4 9.0 Tf [(We suggest that you reactivate yours as soon as possible to ensure uninterrupted access to IT services \(internet, email, )] TJ ET BT 61.016 606.442 Td /F4 9.0 Tf [(SUN-e-HR etc.\). Keep in mind that the cost centre manager still has to approve your request before your username is )] TJ ET BT 61.016 595.453 Td /F4 9.0 Tf [(reactivated; allow sufficient time for this to be done to avoid disruption of your service.)] TJ ET BT 61.016 575.464 Td /F4 9.0 Tf [(You will receive an email from )] TJ ET 0.373 0.169 0.255 rg BT 183.047 575.464 Td /F4 9.0 Tf [(helpinfo@sun.ac.za)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 183.047 574.313 m 262.220 574.313 l S 0.153 0.153 0.153 rg BT 262.220 575.464 Td /F4 9.0 Tf [( indicating that your username \("engagement"\) will expire soon. Three )] TJ ET BT 61.016 564.475 Td /F4 9.0 Tf [(notifications will be sent before the end of March. Alternatively, you can go directly to the )] TJ ET 0.373 0.169 0.255 rg BT 415.184 564.475 Td /F1 9.0 Tf [(reactivation)] TJ ET 0.18 w 0 J [ ] 0 d 415.184 563.045 m 465.701 563.045 l S 0.153 0.153 0.153 rg BT 465.701 564.475 Td /F4 9.0 Tf [( page.)] TJ ET BT 61.016 544.486 Td /F4 9.0 Tf [(Once logged into the)] TJ ET 0.373 0.169 0.255 rg BT 146.570 544.486 Td /F4 9.0 Tf [(reactivation)] TJ ET 0.18 w 0 J [ ] 0 d 146.570 543.335 m 192.587 543.335 l S 0.153 0.153 0.153 rg BT 192.587 544.486 Td /F4 9.0 Tf [( page, you can select the services you want to reactivate. You areencouraged to read )] TJ ET BT 61.016 533.497 Td /F4 9.0 Tf [(the ECP \(Electronic Communication Policy\) before reactivating.)] TJ ET BT 61.016 513.508 Td /F4 9.0 Tf [(Choose the services \(network / email usernames and internet usernames\) you want to register for \(see images below\).)] TJ ET BT 61.016 493.519 Td /F4 9.0 Tf [()] TJ ET BT 61.016 473.530 Td /F4 9.0 Tf [(Reactivation of internet usernames is no longer necessary and can be ignored.)] TJ ET BT 61.016 453.541 Td /F4 9.0 Tf [(Make sure you select the correct cost points and if you're unsure ask your cost centre manager. Click )] TJ ET BT 465.899 453.541 Td /F2 9.0 Tf [(Accept and )] TJ ET BT 61.016 442.552 Td /F2 9.0 Tf [(Reactivate.)] TJ ET BT 61.016 422.563 Td /F2 9.0 Tf [()] TJ ET BT 63.518 422.563 Td /F4 9.0 Tf [(You will receive a notification stating that your request has been submitted, as well as a confirmation email.)] TJ ET BT 61.016 402.574 Td /F4 9.0 Tf [(The webpage will indicate that it will be activated as soon as it has been approved by the cost centre manager. When the )] TJ ET BT 61.016 391.585 Td /F4 9.0 Tf [(cost centre manager approves the reactivation request access will be extended to the end of March next year.)] TJ ET BT 61.016 371.596 Td /F4 9.0 Tf [(If you have completed these steps successfully and still receive emails from )] TJ ET 0.373 0.169 0.255 rg BT 364.631 371.596 Td /F4 9.0 Tf [(helpinfo@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 364.631 370.445 m 443.804 370.445 l S 0.153 0.153 0.153 rg BT 443.804 371.596 Td /F4 9.0 Tf [( urging you to reactivate, )] TJ ET BT 61.016 360.607 Td /F4 9.0 Tf [(please go back to the )] TJ ET 0.373 0.169 0.255 rg BT 149.072 360.607 Td /F4 9.0 Tf [(reactivation)] TJ ET 0.18 w 0 J [ ] 0 d 149.072 359.456 m 195.089 359.456 l S 0.153 0.153 0.153 rg BT 195.089 360.607 Td /F4 9.0 Tf [( page and make sure the appropriate boxes are checked: Your Network / Email )] TJ ET BT 61.016 349.618 Td /F4 9.0 Tf [(usernames Your Internet usernames)] TJ ET BT 61.016 329.629 Td /F4 9.0 Tf [(If you are still not able to reactivate, please raise a request at )] TJ ET 0.373 0.169 0.255 rg BT 308.642 329.629 Td /F4 9.0 Tf [(servicedesk.sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 308.642 328.478 m 397.175 328.478 l S 0.400 0.400 0.400 rg BT 61.016 311.140 Td /F2 9.0 Tf [(Posted in:Connectivity,E-mail,General,Internet,News,Notices | | With 0 comments)] TJ ET q 155.250 0 0 18.000 61.016 484.310 cm /I2 Do Q endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Annot /Subtype /Link /A 13 0 R /Border [0 0 0] /H /I /Rect [ 183.0467 574.6312 262.2197 583.7887 ] >> endobj 13 0 obj << /Type /Action /S /URI /URI (mailto:helpinfo@sun.ac.za) >> endobj 14 0 obj << /Type /Annot /Subtype /Link /A 15 0 R /Border [0 0 0] /H /I /Rect [ 415.1837 573.2659 415.1837 573.2659 ] >> endobj 15 0 obj << /Type /Action /S /URI /URI (https://maties2.sun.ac.za/rtad4/useradm/auth/reactivate.rtad) >> endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 415.1837 563.6422 465.7007 572.7997 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (https://maties2.sun.ac.za/rtad4/useradm/auth/reactivate.rtad) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 146.5697 543.6532 192.5867 552.8107 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (https://maties2.sun.ac.za/rtad4/useradm/auth/reactivate.rtad) >> endobj 20 0 obj << /Type /Annot /Subtype /Link /A 21 0 R /Border [0 0 0] /H /I /Rect [ 61.0157 484.3099 216.2657 502.3099 ] >> endobj 21 0 obj << /Type /Action /S /URI /URI (http://blogs.sun.ac.za/it/files/2020/02/Your-Network-Email-usernames.png) >> endobj 22 0 obj << /Type /Annot /Subtype /Link /A 23 0 R /Border [0 0 0] /H /I /Rect [ 364.6307 370.7632 443.8037 379.9207 ] >> endobj 23 0 obj << /Type /Action /S /URI /URI (mailto:helpinfo@sun.ac.za) >> endobj 24 0 obj << /Type /Annot /Subtype /Link /A 25 0 R /Border [0 0 0] /H /I /Rect [ 149.0717 359.7742 195.0887 368.9317 ] >> endobj 25 0 obj << /Type /Action /S /URI /URI (https://maties2.sun.ac.za/rtad4/useradm/auth/reactivate.rtad) >> endobj 26 0 obj << /Type /Annot /Subtype /Link /A 27 0 R /Border [0 0 0] /H /I /Rect [ 308.6417 328.7962 397.1747 337.9537 ] >> endobj 27 0 obj << /Type /Action /S /URI /URI (https://servicedesk.sun.ac.za) >> endobj 28 0 obj << /Type /XObject /Subtype /Image /Width 207 /Height 24 /Filter /FlateDecode /DecodeParms << /Predictor 15 /Colors 1 /Columns 207 /BitsPerComponent 8>> /ColorSpace /DeviceGray /BitsPerComponent 8 /Length 55>> stream X 0 }nbr휿e~iO6?m~iBN endstream endobj 29 0 obj << /Type /XObject /Subtype /Image /Width 207 /Height 24 /SMask 28 0 R /Filter /FlateDecode /DecodeParms << /Predictor 15 /Colors 3 /Columns 207 /BitsPerComponent 8>> /ColorSpace /DeviceRGB /BitsPerComponent 8 /Length 1684>> stream hoHSk…CCҟ5)!4D?80Q3~X*12Dƾ(SU1aBm1naqv?E$(,5jHUϸL8v#PTbRCeŒDyS}vGϜN*hHkiURSU~qie)i0:5u|ؑRej4 Hs1S-Zk'+ˡFM!8?84`1%PsUEQHiY>epXx5#HlAN(>z:֋kZ"d]{vPjU$ LbW$!(z-a¨Y[ð* 3XGW9?8RTOo*\ qYJ(,5Z;]e`ڍuT7NgN'CaқVEF>?U-9;2E{rnzwٍMFMYܡr*m#.fPdrQH&#O ENKd,q2V27գ#^ɹ*d z0F|9?8j^InF. ={YIW2(]ZYCoKE^@ği]Ytuo-b{F'E@-YmTAFF)$ێk9q@SmiD!&_tESnO| .PBAIɰ*z (95h13j"> VQ_7AedH=K'F͒@ɓ;wh-6fUyJ˿.yԥ^uGOp?@'Qh zP9tBv,& :/`F`9ޖ پHh2ޭrH䅺.QH(ZLJڵg7%BH<f-,59! *d$ă$LIL\+oHLu[>6?ݥ#'U߿}~6m#d,Anw&f1UQ[꣧%0y7Igu̓W5Z,'8"/p:"/^EH5b z+ృK.HN_Xj B/H,Ս-g,Si7fW ?㕕_p *֋5Uօ&x$K^M*Z9%-aY)Xn n$ B٣毁r\:K`pT72 ;E!%T_>)e5(Oj7}bwq? AT!w(ަ;oS)䎼ڇkZ ma endstream endobj xref 0 30 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000343 00000 n 0000000380 00000 n 0000000518 00000 n 0000000649 00000 n 0000005572 00000 n 0000005684 00000 n 0000005799 00000 n 0000005919 00000 n 0000006027 00000 n 0000006155 00000 n 0000006232 00000 n 0000006360 00000 n 0000006472 00000 n 0000006600 00000 n 0000006712 00000 n 0000006840 00000 n 0000006952 00000 n 0000007079 00000 n 0000007203 00000 n 0000007331 00000 n 0000007408 00000 n 0000007536 00000 n 0000007648 00000 n 0000007776 00000 n 0000007857 00000 n 0000008155 00000 n trailer << /Size 30 /Root 1 0 R /Info 5 0 R >> startxref 10097 %%EOF E-mail « Informasietegnologie
Language:
SEARCH
  • Recent Posts

  • Categories

  • Archives

E-mail

Keeping SU data and information safe: The use of AI tools for meeting recordings

Tuesday, May 13th, 2025

MORE INFORMATION COMING SOON

We are compiling a list of frequently asked questions and further guidance on this topic. This blog post will be updated as soon as new resources become available. Please check back regularly for the latest. If you need support or have questions in the meantime, please log a request via the ICT Partner Portal.

 

(February 2025)

As part of our ongoing effort to keep Stellenbosch University (SU) data and information safe, AI tools for meeting recordings (e.g. Otter.ai, Fireflies.ai, Fathom and others) will be blocked due to the potential risk of a data breach and unauthorised exposure of SU’s confidential data. This includes any online platform used for recording meetings, webinars, online class sessions, live events or discussions. Whilst we want to continue leveraging the potential of AI, we must also take proactive steps to protect sensitive university information and mitigate risks. 

These risks and concerns include: 

  • Data security risks: Personal or sensitive university data can be processed by AI models without visibility on where or how the data will be stored or used.  
  • Public exposure risks: The data absorbed by the AI tool can inadvertently be shared or accessed by unauthorised parties.  
  • Compliance concerns: The use of AI tools may conflict with data protection policies or university regulatory requirements.  

Practical steps for meeting organisers 

A meeting organiser must ensure that AI tools are not introduced into discussions where sensitive or confidential information is shared. Sensitive information may include, but is not limited to, student records, financial details, research data, staff information and internal strategy discussions.

Before the meetings start, please check the following:  

  • Identify AI tools: Check whether any invited platform or application of a participant is using AI-driven technology to record the meeting in the participants’ list. The organiser is allowed to block or kick out the uninvited guest.  
  • Communicate security expectations: Inform the meeting participants about the AI restrictions.  
  • Agreement to record MS Teams meetings: Share with participants that the meeting will be recorded and ask if they agree to this. Share how the recording will be used. For meetings, the recording should only be used for minute-taking purposes and once the minutes have been approved, the recordings must be deleted.  

We appreciate your cooperation in safeguarding university data and your assistance in the ongoing effort to use technology responsibly. If you require assistance, please log a request on the ICT Partner Portal.   

Email security

Friday, March 31st, 2023

Phishing and Report Message

View a PDF here: Phishing and Report Message Infographic

Phishing scam from compromised university account

Tuesday, November 23rd, 2021

Please keep an eye out for an e-mail from a sun email address with the subject line of FYI_Order/Approval. 

It is a phishing scam with a link to a website that is designed to compromise security and steal details such as banking details, login names and passwords. 

The owner of the affected account has already put an Out-of-office notification on her account telling people to ignore the mail sent from her account, but the account is probably still compromised and under the control of the scammers.

Once in the university domain the scammers will continue to attack the university network to steal more information or to obtain bank account details, etc.

Here is an example of one of the mails:

 

Please report this phishing mail if you receive it from the above mentioned address or any other sun address. Here is how you report it:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Go to https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/create/115.​​

Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.​​ Please add the suspicious email as an attachment to the request.

​​~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you have accidentally clicked on the link and already given any personal details to the phishers it is vitally important that you immediately go to the USERADM page (either http://www.sun.ac.za/password or www.sun.ac.za/useradm and change your password immediately.) Make sure the new password is completely different and is a strong password that will not be easily guessed, as well as changing the passwords on your social media and private e-mail accounts, especially if you use the same passwords on these accounts. Contact the IT Service Desk if you are still unsure. 

[ARTICLE BY DAVID WILES]

How to recognise a phishing e-mail

Tuesday, October 5th, 2021

We can’t warn you against every phishing e-mail– there’s a new variation every day. You are the only person who can protect yourself from phishing scams and identity theft. The only way to do this is to learn to recognise a harmful e-mail by paying attention and keeping an eye out for a few tell-tale signs.

phishme_how_to_spot_a_phishTypical characteristics

1. Well-known companies used as bait
These e-mails are sent out to thousands of different e-mail addresses and often the person sending them has no idea who you are. If you have no affiliation with the company the e-mail address is supposedly coming from, it’s fake. For example, if the e-mail is sent by ABSA, but you are a Standard Bank client. Also, see a list of types of companies generally used in phishing e-mails below.

2. Spelling and grammar
Improper spelling and grammar is a dead giveaway. Look for obvious errors. 

3. Lack of client information
Phishers use a generic greeting. For example, the e-mail greets you as “ABSA customer” or “Dear user”, etc. If the company was sending you information regarding your faulty account, they would mention your account details or name in the e-mail.  A company would go through the trouble to address a client by name and won’t ask you for your information. Banks have your information on their system.

4. Deadlines/Sense of urgency
Phishing e-mails demand an immediate response or stipulate a specific deadline, creating a sense of urgency and prompting you to respond before you’ve looked at the e-mail properly. For example,  demanding that you log in and change your account information within 24 hours or your account will be closed.

5. Malicious links
Although many phishing e-mails are getting better at hiding the true URL you are visiting, often these e-mails will show a URL that is unrelated to the company. Move your mouse over the link and look at the display address. Is this the website address of the company who seems to be sending the e-mail? If not, it’s clearly a phishing e-mail.

6. Attachments
Phishing e-mails occasionally include an attachment which contains malware. When opened, it will run and install a small programme on your PC, which hackers use to gain access to your PC and information. 

Typical phishing topics

• Account issues, such as accounts or passwords expiring, accounts being hacked, out-of-date accounts, or account information has to be changed.
• Credit cards expiring or being stolen, a duplicate credit card, credit card transactions, etc. 
• Confirming orders, requesting that you log in to confirm recent orders or transactions before a delivery can be made.
• Winning a prize or getting something for free. Both Woolworths and Pick ‘n Pay’s have been used in fake campaigns to lure people into providing personal details.

Company names phishers generally use

• Any major bank. ABSA and Standard Bank are both popular choices in South Africa.
• Insurance companies, for example, Outsurance.
• Internet service providers
Apple or Microsoft claiming your account has been suspended.
• E-mail providers, e.g. Gmail or Yahoo
• SARS. Especially at this time of year. (We’ve had a few of these.)
DHL or any delivery company claiming they have a package for you.
• Your company’s medical aid, for example, Discovery
• Your company’s IT department
• Casinos and lotteries
• Online dating websites
• Popular websites such as Amazon, Facebook, MySpace, PayPal, eBay, Microsoft, Apple, Hotmail, YouTube, etc.

A few tips to keep you safe

Never follow links in an e-mail you’re uncertain of. Rather visit the page by typing the address of the company in your browser. For example,  instead of clicking on the “ABSA URL” in the e-mail, type http://www.absa.co.za in your web browser and log in at their official website.
Never send personal information by e-mail. If a company is asking for your personal account information or claiming your account is invalid, visit the website and log in to the account as you normally would. If everything seems in order and there aren’t any urgent notifications from your bank, you should be fine.
• If you are still not sure about the status of your account or are concerned about your personal information, contact the company directly, either through an e-mail address provided on their website, over the phone or visit your local branch.
• Delete the e-mail and don’t click on links or fill in any information.
• If you’ve already divulged your information, immediately change your password or PIN and contact the institution to inform them of the breach.
• To report spam or phishing e-mails send an e-mail to sysadm@sun.ac.za with the subject SPAM with the suspect e-mail attached. IT system administrators will then be able to block the e-mail to protect other users.

[SOURCE: www.computerhope.com]

 

Step Up to Stronger Passwords

Tuesday, October 5th, 2021

Weak and reused passwords continue to be a common entry point for account or identity takeover and network intrusions. Simple steps and tools exist to help you achieve unique, strong passwords for your accounts.

 A password is often all that stands between you and sensitive data. It’s also often all that stands between a cyber criminal and your account. Below are tips to help you create stronger passwords, manage them more easily, and take one further step to protect against account theft.

  • Always: Use a unique password for each account so one compromised password does not put all of your accounts at risk of takeover.
  • Good: A good password is 10 or more characters in length, with a combination of uppercase and lowercase letters, plus numbers and/or symbols — such as pAMPh$3let. Complex passwords can be challenging to remember for even one site, let alone using multiple passwords for multiple sites; strong passwords are also difficult to type on a smartphone keyboard (for an easy password management option, see “best” below).
  • Better: A passphrase uses a combination of words to achieve a length of 20 or more characters. That additional length makes it’s exponentially harder for hackers to crack, yet a passphrase is easier for you to remember and more natural to type. To create a passphrase, generate four or more random words from a dictionary, mix in uppercase letters, and add a number or symbol to make it even stronger — such as rubbishconsiderGREENSwim$3. You’ll still find it challenging to remember multiple passphrases, though, so read on.
  • Best: The strongest passwords are created by password managers — software that generates and keeps track of complex and unique passwords for all of your accounts. All you need to remember is one complex password or passphrase to access your password manager. With a password manager, you can look up passwords when you need them, copy and paste from the vault, or use functionality within the software to log you in automatically. Best practice is to add two-step verification to your password manager account. Keep reading!
  • Step it up! When you use two-step verification (a.k.a., two-factor authentication or login approval), a stolen password doesn’t result in a stolen account. Anytime your account is logged into from a new device, you receive an authorization check on your smartphone or another registered device. Without that second piece, a password thief can’t get into your account. It’s the single best way to protect your account from cyber criminals.

Resources

 

 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.