The Information Technology Security Program intends to protect Internet and Information Technology systems resources and assure their availability to support all of the College’s operations.

View our latest guidelines for Working Remotely

Join us at 10AM on the 2nd Friday of every month for a virtual informal cybersecurity discussion. Learn More

Cybersecurity Alerts

Get alerts about the latest cybersecurity threats and ask questions about any security related topics.

Join Here

[PHISH] The Office of Research Engagement

We received reports this weekend of an email claiming to be from a Professor at the college regarding a job offer.  These scams are frequent and often offer very high wages for small amounts of time.  Note that the email comes from a personal Gmail address rather than a tcnj.edu email, as well as the…

[PHISH] SAVE THE DATE: VIP Guest Card

A few users have reported this event invitation phishing email that is making the rounds.   The email comes from an Gmail account and is very vague about this invite.  Hovering over the link shows an unusual URL that doesn’t relate to any commonly used invitation platforms.  Clicking the link will lead to a Cloudflare captcha…

[PHISH] Employee Performance EvaIuation

We received reports this morning regarding a phish claiming to be an employee evaluation.  The email came from a .edu domain but not a TCNJ address, and hovering over the link shows an unusual URL that would not typically be used to share files at TCNJ.  Please always look for these signs before interacting with…

[PHISH] [SEND SECURE] Aetna ERA/EFT Cliams #0087710 – Attention Required – tcnj.edu

We were notified this morning regarding an email that is impersonating an Aetna claims email.  The email address is not associated with Aetna nor is the link contained within the email.  Clicking the link within the email will take you to another domain, also not Aetna related, which is a fake Sharepoint login page.  Attempting…

[PHISH] talkk too shared “The College of New Jersey Promotion Approval” with you

We received reports this morning about a Sharepoint phish going around.  The email does come from Microsoft’s Sharepoint mailservers, but looking more closely at the email we can see the company whose Sharepoint was compromised in order to launch this attack.  See the circle areas in the screenshots below.  Be sure to thoroughly read these…

[PHISH] Signature Request: Contract #RO-2018-894 – (March 16, 2026)

We’ve received reports this morning about another phishing campaign imitating our legal team.  This one appears to be a contract renewal document, but the email sender address is not a DocuSign address.  Even if it were, attackers often use DocuSign to host malicious documents containing additional links to evade detection. The word “Tcnj” is not…

[PHISH] Message From The college of new jersey_HR

We received reports of a QR code phishing attack earlier today imitating our HR department.  The email contained no body and was merely and attachment that attempted to look like a formal TCNJ document.  There are a number of markers within, such as odd wording, the use of the word “Corporate” in relation to policies,…

[PHISH] An Exclusive Invitation Just For You

We have received reports of an attack this morning that unfortunately succeeded in compromising at least one TCNJ account, which the attacker then utilized to send more emails and add a level of legitimacy to the appearance of the email.  This is an unsolicited invitation email that, upon clicking the link contained within, will lead…

[PHISH] Payment Request for new Invoice

We are seeing another round of emails impersonating President Bernstein this morning approving payments for fraudulent invoices.  Please see email examples below.  Note that despite the email addresses appearing in the email body as tcnj.edu addresses and blue links, if you hover over them (same as you would with URLs) in the bottom left the…

Top