![\"\"](\"https:\/\/k1nytt.w.uib.no\/files\/2024\/06\/burheim_uib.jpg\")
Grunnet et alvorlig sikkerhetsavvik hos v\u00e5r leverand\u00f8r Sikt – Kunnskapssektorens tjenesteleverand\u00f8r (tidligere UNINETT), vil vi anbefale alle v\u00e5re brukere som har f\u00e5tt nytt passord etter 2. april 2022 om \u00e5 bytte passord<\/strong>.<\/p>\n\n\n\n UiB avdekket i forrige uke at nye passord blir logget i Sikt sine systemer hver gang brukere bytter passord. Sikt som leverer l\u00f8sningen for passordbytte til UiB, opplyser at feilen n\u00e5 er rettet og at alle passord er slettet fra loggene deres. Vi vurderer det som lite sannsynlig at passord er kommet p\u00e5 avveie, men det kan ikke utelukkes. Derfor anbefaler vi alle som har f\u00e5tt nye passord etter 2. april 2022 om \u00e5 bytte passord.<\/p>\n\n\n\n Kontoene p\u00e5 UiB er i tillegg sikret med to-faktor og vi har gode varslingssystemer for \u00e5 oppdage mistenkelige fors\u00f8k p\u00e5 p\u00e5logging. Derfor er det lav risiko for at uvedkommende f\u00e5r tilgang til kontoer p\u00e5 UiB. Samtidig vet vi at det er en tendens til at brukere benytter samme passord i ulike tjenester, selv om man frar\u00e5der dette.<\/p>\n\n\n\n Passord endres p\u00e5 passord.uib.no. For informasjon se i hjelp.uib.no.<\/p>\n\n\n\n Vi beklager ulempen dette medf\u00f8rer, men ber om forst\u00e5else.<\/p>\n\n\n\n Med vennlig hilsen Due to a severe security flaw at Sikt (Norwegian Agency for Shared Services in Education and Research), we recommend all users who have changed their password since 2nd April 2022, change their password again.<\/p>\n\n\n\n UiB discovered last week that since 2nd April 2022 whenever a password was changed, the plaintext password was logged in a Sikt system. Sikt have now fixed this flaw and no longer write passwords to the log file. The passwords that were logged have now been deleted from all known locations.<\/p>\n\n\n\n While it is unlikely that the logged passwords have been the subject of a security breach it is impossible to confirm this one way or the other. Therefore, anyone who has changed their password between 2nd April 2022 and 12th June 2024 should now set a new password.<\/p>\n\n\n\n Many services at UiB are secured with two factor authentication. We have systems in place to discover suspicious logins. We continue to use these processes to discover security breaches. Due to this, we think there is a low risk of unauthorised access to UiB systems from this security flaw.<\/p>\n\n\n\n We also know that many people re-use passwords across many services including services outside UiB. If this is the case for you, you should change your password wherever you have used the same one you have set at UiB since 2nd April 2022.<\/p>\n\n\n\n Your password can be changed by visiting password.uib.no. If you need assistance, or for further information, please visit help.uib.no.<\/p>\n\n\n\n We apologize for the inconvenience caused by this situation and ask for your action and understanding while you change your password.<\/p>\n\n\n\n Vennlig hilsen\/Best regards [English below] Grunnet et alvorlig sikkerhetsavvik hos v\u00e5r leverand\u00f8r Sikt – Kunnskapssektorens tjenesteleverand\u00f8r (tidligere UNINETT), vil vi anbefale alle v\u00e5re brukere som har f\u00e5tt nytt passord etter 2. april 2022 om \u00e5 bytte passord. UiB avdekket i forrige uke at…<\/p>\n
Tore Burheim<\/p>\n\n\n\n
\n\n\n\nInformation regarding new passwords<\/h4>\n\n\n\n
Tore Burheim<\/p>\n","protected":false},"excerpt":{"rendered":"