Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
What is a Blue Teamer?
What is a Blue Teamer? A blue teamer is a cybersecurity professional focused on defending an organization’s systems, networks, and applications from potential threats. Their main goal is to protect the organization’s assets by ensuring robust security measures are in place. Key measures implemented by a blue teamer: By focusing on these security measures, blue…
-
Be Careful in the DeepSeek
DeepSeek AI is a Chinese artificial intelligence company that has recently gained significant attention. Founded in July 2023 by Liang Wenfeng, DeepSeek is backed by High-Flyer Capital Management, a Chinese hedge fund that uses AI for trading decisions. The company focuses on developing open-source large language models (LLMs) and has quickly risen to prominence with…
-
What is Open-Source Intelligence?
Open-source intelligence (OSINT) involves gathering information from publicly available sources. There is information available on businesses, organizations, people, and website domains. Here are some techniques that can be used: OSINT techniques can help you gather a wide range of information from publicly available sources. Always remember to use this information ethically and respect privacy laws.…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
When Bad News Travels, Attackers Are Listening
Malicious actors monitor news outlets and social media for signs of confirmed or suspected security events that they can exploit to their advantage. A campus outage that generates public discussion is, to them, an opportunity with a shelf life. The psychology is simple: during a disruption, people expect to hear from IT, so a call…
-
ClickFix: Don’t Be Tricked by a Fake “Fix”
Cybercriminals are using a tactic called ClickFix to trick people into compromising their own devices. These scams use fake error messages, security warnings, or fake CAPTCHA verification prompts that tell users to take steps to “fix” a problem. One common trick is instructing users to press Windows + R to open the Run box, then press Ctrl + V to paste…
-
Triggers Hackers Use to Trick You: Urgency, Authority, and Curiosity
Hackers don’t rely on technology alone—they rely on human psychology. Most attacks rely on three simple triggers to get people to act quickly without thinking. The first trigger is a sense of urgency, with messages like “act now or lose access” or “your account will be locked,” creating pressure that pushes users to respond immediately…
-
Understanding QR Code Phishing
In the dynamic world of cybersecurity, threat actors continue to innovate using methods like QR code phishing. This technique, which seemed emergent just a few years ago, has now become more refined and widespread. QR code phishing, also known as “Quishing,” remains a threat as these codes are now ubiquitously used for convenience in many…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Cyber Security Tips for Traveling
Traveling can be an exciting adventure, but it also comes with its own set of cybersecurity risks. Whether you’re on a business trip or summer vacation, it’s essential to protect your digital life from potential threats. Here are some practical tips to help you stay secure while traveling. Traveling doesn’t have to compromise your cybersecurity…
-
Spotting and Avoiding Phishing Attacks
Phishing is essentially someone trying to get you to do something via email, usually by asking you to volunteer personal information or click a link, which enables them to compromise you, your accounts, or your computer. Other kinds of phishing may require you to open an attachment or a link, which can infect your computer…
-
The Importance of Password Rotation
Password rotation is the periodic changing or resetting of passwords. The goal is to limit a password’s lifespan to reduce the risk of unauthorized access. By doing so, we condense the window of time during which a stolen password remains valid. Why password rotation matters: How Often Should You Rotate Passwords? The frequency of password…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Safeguarding Your Remote Work
Remote work in higher education is now the norm. To keep your online work safe using university-provided tools like OneDrive and Microsoft Teams, follow these straightforward steps: Working remotely in higher education is convenient and secure when you use the university-provided tools while taking these precautionary steps.
-
Privacy Concerns with Onboard AI: Microsoft Copilot
Continuing with privacy concerns with onboard AI, Microsoft Copilot, which uses the hardware on any system with Windows 11 Copilot+ to run the native AI of Copilot, has been seen as a potential issue for user privacy. We’ve highlighted a few privacy concerns associated with Microsoft Copilot: You can opt out of data collection for…
-
Managing Permissions on Mobile Phones
Application permissions are settings that control what an app can access and do on your device. Here are some common types of permissions: These permissions can be needed for the application to function, but sometimes, the application takes more permissions than necessary. In the cybersecurity world, we would call that a violation of “Least Privilege” or…