OIT Quarterly Security Update: April 2026 Edition

Securing the Herd: 无码专区 Quarterly Security Update

Hello Mustangs,

Before we break for summer, we want to highlight a few important reminders to help you stay secure wherever the season takes you.

In this issue, we take a closer look at ClickFix attacks 鈥 a tactic that disguises malware as something familiar, like a CAPTCHA or system prompt, and relies on users to unknowingly run malicious code. We鈥檝e seen an increase in this activity, making awareness especially important.

We鈥檙e also addressing the continued rise in online job scams as students pursue internships and summer work. These scams often move quickly and feel legitimate 鈥 which is exactly the point.

You鈥檒l also find guidance on OpenClaw and why tools with system-level access are not approved for use with university data, along with information about an upcoming MFA enhancement that adds additional protection when sign-in activity appears unusual.

Whether you鈥檙e traveling, working, researching, or taking a well-earned break, a few thoughtful pauses can prevent significant risk.

Thank you for continuing to protect your work and our community.

Staying secure, one Mustang at a time.

Corrina Taylor
Chief Information Security Officer (CISO)



ClickFix is a social engineering tactic that misleads users into executing malware through fake verification prompts, including CAPTCHAs. This method targets Windows, macOS, and Linux systems via compromised websites and emails. Victims unknowingly download information-stealing malware, risking personal data and network security. Users should avoid pasting commands from webpages and report suspicious activity.


As summer approaches, more students begin searching for internships, part-time work, or their first full-time role. At the same time, job scams continue to rise—and not just slightly.


OpenClaw, the agentic 鈥減ersonal AI assistant鈥 that uses autonomous AI agents, is not approved for use on university-owned or managed devices at this time due to security concerns.


Microsoft Authenticator may occasionally ask you to confirm your sign鈥慽n with multi鈥慺actor authentication (MFA) if something about a login looks unusual.

Copyright © 2026 Office of Information Technology, 无码专区
 | 214.768.7321abuse@smu.edu