Cyber security is everyone's responsibility. Whether you're a student or a member of staff, staying alert to cyber threats helps protect your personal information, University systems, and the wider community.
Cyber criminals increasingly target universities through email, phone calls, messaging platforms, QR codes, and fraudulent websites. Their goal is often to steal passwords, bypass Multi-Factor Authentication (MFA), gain access to accounts, install malicious software or even access your finances.
The good news is that most cyber-attacks can be prevented by recognising the warning signs and reporting anything suspicious.
Guidance on how to report suspicious activity, potential security incidents, phishing emails, malicious messages, websites, and other cyber security concerns can be found on this page.
Where appropriate, links to additional guidance, training materials, and external resources will be provided for those who wish to learn more and stay informed about the evolving cyber threat landscape.
Before responding to a message, opening an attachment, clicking a link, scanning a QR code, or approving an MFA request, ask yourself:
Different types of threats should be reported using the appropriate process:
Use the 'Report Phishing' button in Outlook.
Once reported, please do not delete the email. Keeping the message available allows the Information Security Team to investigate the reported content, identify any threats, and take appropriate action where necessary.
If you receive a suspicious message in Microsoft Teams, use the 'Report' option within Teams to alert the information security team.
If you encounter a website that appears malicious, suspicious, or is attempting to steal information, please report it as an 'incident' through Beacon.
Where possible, include:
This helps us investigate and take appropriate action more quickly.
If you suspect your account has been compromised, you should immediately:
If you believe your data has been accessed because of a compromise:
Cyber threats are constantly evolving. This page is the central source for cyber security guidance, awareness information, and advice. New and emerging threats, security alerts, safe working practices, and other relevant cyber security information will be published here as necessary.
Any incident not covered in the above guidance should be reported via an information security incident notification form and sent to infosec@solent.ac.uk.