Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Security Topic of the Week
Is your workstation or laptop running slow? Does it take forever for an application to start? Do you return to your desk following short breaks and often find that your computer has restarted and is displaying some sort of cryptic message about a problem? These are all signs that your machine may be compromised or infected. Security incidents…
-
What IS Social Engineering?
Social engineering is the art of manipulating people, so they give up confidential information or take an action that could result in giving up confidential or sensitive information. The types of information these criminals are seeking can vary, but when individuals are targeted, the criminals are usually trying to trick you into giving them your…
-
Refuse the Bait!!
Cybercriminals know the best strategies for gaining access to the University’s sensitive data. In most cases, it doesn’t involve them rappelling from the top of Andy Holt Tower and deftly avoiding a laser detection system to hack into your servers; instead, they simply manipulate a community member’s trust by posing as something they trust. According to experts…
-
Ways to Spot a Scam
Have you seen email or text messages that offer you lots of money for little to no work on your part? Messages like these are scams. The old saying “If it sounds too good to be true, it probably is” is a good rule of thumb. If an offer is sent to you that sounds…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Agentic AI Browsers and Associated Risks
Unlike traditional browsers, which rely on user clicks and keystrokes, Agentic AI browsers integrate autonomous agents into the browsing experience. These tools interpret natural language commands and are capable of executing multi-step tasks across websites. Popular AI Browser examples include: These browsers aim to boost productivity by automating tasks like booking appointments, comparing products, or…
-
Compelling Reason to Lock Your Screen
It only takes a few seconds for someone to access your computer, and that’s all it takes to compromise sensitive data, send unauthorized emails, or install malicious software. Whether you’re in a shared office, classroom, or public space, locking your screen when stepping away is one of the simplest ways to protect your device and…
-
5 Cybersecurity Habits for a Safer Campus
Cybersecurity is a shared responsibility. Whether you’re a student, faculty, or staff member, your daily digital habits play a critical role in protecting the University of Tennessee’s systems and data. Here are five simple habits that can make a big difference: 1. Use Strong, Unique Passwords or a Password Manager Reusing passwords across accounts is…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Safeguarding Your Remote Work
Remote work in higher education is now the norm. To keep your online work safe using university-provided tools like OneDrive and Microsoft Teams, follow these straightforward steps: Working remotely in higher education is convenient and secure when you use the university-provided tools while taking these precautionary steps.
-
Privacy Concerns with Onboard AI: Microsoft Copilot
Continuing with privacy concerns with onboard AI, Microsoft Copilot, which uses the hardware on any system with Windows 11 Copilot+ to run the native AI of Copilot, has been seen as a potential issue for user privacy. We’ve highlighted a few privacy concerns associated with Microsoft Copilot: You can opt out of data collection for…
-
Managing Permissions on Mobile Phones
Application permissions are settings that control what an app can access and do on your device. Here are some common types of permissions: These permissions can be needed for the application to function, but sometimes, the application takes more permissions than necessary. In the cybersecurity world, we would call that a violation of “Least Privilege” or…