Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Typosquatting: When a Tiny Typo Leads to Big Trouble
Have you ever mistyped a website address? Maybe you accidentally hit “goggle.com” instead of “google.com”? Well, that seemingly innocent slip-up can lead you down a treacherous path—one paved with cyber traps. What Is Typosquatting? Typosquatting is like a cunning chameleon. It preys on our human tendency to fumble our keystrokes. Here’s how it works: Why…
-
Spotting and Avoiding Phishing Attacks
Phishing is essentially someone trying to get you to do something via email, usually by asking you to volunteer personal information or click a link, which enables them to compromise you, your accounts, or your computer. Other kinds of phishing may require you to open an attachment or a link, which can infect your computer…
-
Obscured, Obfuscated Links
Recently, researchers have discovered another technique cybercriminals use to steal your information. In this technique, cybercriminals use obfuscated links to show IP addresses like XXX.XXX.XXX.XXX, instead of websites. Obfuscated links are URLs that have been modified to hide the real location of a website. In this attack method, cybercriminals send an urgent email that appears to come from a legitimate source and…
-
Phishing and Phishing and Phishing
Cybercriminals know the best strategies for gaining access to the university’s sensitive data – Social Engineering. They simply manipulate your trust by posing as something or someone you trust. According to experts at IBM, human error accounts for 95% of security incidents. Protect your data by familiarizing yourself with the various techniques and telltale signs of…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Physical Security Tips While Traveling
Traveling is an exciting experience, but it also comes with risks to your physical security. Whether you’re exploring a new city or attending a business conference, safeguarding your belongings and personal safety is essential. Here are some practical tips to enhance your physical security while traveling. 1. Secure Your Luggage Always use TSA-approved locks for…
-
Can You Identify a Phishing Website?
A phishing website is a malicious site designed to steal sensitive information such as login credentials, credit card numbers, and other personal data. These websites often mimic legitimate sites to trick users into interacting with the website. Recognizing the signs of a phishing website and knowing how to protect yourself can help prevent identity theft…
-
Spring Cleaning Your Digital Life
Spring is often a time when people begin thinking about cleaning up their personal living space and getting rid of old belongings. It is also a good time to tighten your data security. Here are some places you might find some cyber dust bunnies! These are only a few examples of where you may practice…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Tips for Securing Windows
Many people use Microsoft Windows as their primary operating system for work, school, personal computing, and even gaming. The most recent Windows Operating System is Windows 11, but there are still many people on Windows 10. Fortunately making your operating system more secure is very similar in both versions. Tips to help secure your Windows…
-
Secure File Transfer
Vault (UT Secure Courier) is a secure file transfer application that allows users to easily share large files, including executables, quickly and securely. Files are uploaded and downloaded via SSL-encrypted HTTP and stored in an encrypted data store. Using Vault is as easy as sending an email with an attachment, and it can be used…
-
Protecting University-Owned Devices from Infostealers
In recent months, a surge in infostealer malware has been making headlines, posing a significant threat to individuals and organizations alike. Infostealers are a type of malware designed to infiltrate systems and steal sensitive information such as passwords, cookies, and search histories. This stolen data can then be sold on the dark web or used…