Security Center

Information to protect the UMass Amherst community, devices, and data.

Report a Security Issue
graphic of a person behind a shield

Security Resources and Actions

Explore resources and support articles to secure computers and devices, guard against online fraud, and protect personal and University data.

Report an Incident Report an Incident IT Security Policies IT Security Policies IT Standards IT Standards IT Security Support Articles IT Security Support Articles Security Software Security Software IT Security Travel Guidance IT Security Travel Guidance Data Categorization Levels Data Categorization Levels

News & Updates

Scam Alert: Fake U.S. National Science Foundation Grant
UMass Amherst Information Technology (IT) is aware of a new threat where scammers claiming to be with the U.S. National Science Foundation (NSF) will contact individuals and say they have won NSF grant money, which can be claimed for a fee.
February 7, 2025
Scam Alert: Fake Captcha Prompts Users to Run Commands
UMass Amherst Information Technology (IT) is aware of a new threat involving fake or fraudulent captchas on third-party websites which may result in your device being compromised, putting accounts and data at risk of exposure. The Information Security team has observed threat actors adding malicious
February 5, 2025
Action Required: Zero-Day Vulnerability Affecting Apple Devices
Apple has rolled out critical security patches to address newly identified zero-day vulnerabilities impacting macOS and iOS. It is strongly advised that all Apple devices be updated to the latest available patch as soon as possible,
January 28, 2025

Don't Get Phished!

maroon clip art of a fish

Phishing is a cyberattack where scammers impersonate trusted entities to steal sensitive information, like passwords or financial details, often through fake emails, websites, or texts.

Learn how to spot and avoid these scams!

Visit these support articles in our IT Knowledge Base as well as video tutorials on Youtube and LinkedIn Learning.

UMass Amherst students, faculty, and staff have unlimited access to LinkedIn Learning's online library of over 15,000 courses. Log in with your UMass account info.

Phishing: Fraudulent Emails, Text Messages, Phone Calls, & Social Media (UMass IT Knowledge Base) Phishing: Fraudulent Emails, Text Messages, Phone Calls, & Social Media (UMass IT Knowledge Base) Report a Phishing Attempt - Forward an Email as an Attachment (UMass IT Knowledge Base) Report a Phishing Attempt - Forward an Email as an Attachment (UMass IT Knowledge Base) Protect Yourself Against Phishing Scams & Identity Theft (UMass IT Knowledge Base) Protect Yourself Against Phishing Scams & Identity Theft (UMass IT Knowledge Base) Report Phishing Attempts in Microsoft Outlook (UMass IT Knowledge Base) Report Phishing Attempts in Microsoft Outlook (UMass IT Knowledge Base) What is Phishing? (UMass IT on YouTube) What is Phishing? (UMass IT on YouTube) How to Avoid Phishing Scams (Linkedin Learning) How to Avoid Phishing Scams (Linkedin Learning) Avoid Phishing Scams (Linkedin Learning) Avoid Phishing Scams (Linkedin Learning) Is this a Phish? Real-world examples of phishing attacks (Linkedin Learning) Is this a Phish? Real-world examples of phishing attacks (Linkedin Learning)

Cybersecurity Training & Resources for UMass Employees

The University of Massachusetts requires annual mandatory cybersecurity training for all employees.

In addition to the systemwide required cybersecurity training, UMass Amherst employees can access cybersecurity resources specific to our campus.

Cybersecurity Training & Resources Cybersecurity Training & Resources
A mouse hovering over the word security