Skip to content Skip to main navigation Report an accessibility issue
Information Security

Article Archive #2


Service navigation


Security Learning Icon One

Importance of Security

Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.

  • Can You Identify a Phishing Website?

    A phishing website is a malicious site designed to steal sensitive information such as login credentials, credit card numbers, and other personal data. These websites often mimic legitimate sites to trick users into interacting with the website. Recognizing the signs of a phishing website and knowing how to protect yourself can help prevent identity theft…

    Read article…

  • Can You Identify a Phishing Email?

    Phishing emails are a common tactic used by cybercriminals to steal personal information, such as passwords, credit card numbers, and other sensitive data. Understanding and identifying these malicious emails can help protect you from falling prey to scams and potential security breaches. What is a Phishing Email? A phishing email is a fraudulent message that…

    Read article…

  • Passwords, Passwords Everywhere!

    Did you know that the average person uses the same three to seven passwords to log in to over 170 online accounts? In addition to being reused, these passwords are often weak and easily guessed by cybercriminals. If cybercriminals successfully guess these weak passwords, they can access most of their victims’ online accounts. Even worse,…

    Read article…


Scam Types

Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.

  • Safeguarding Against QR Code Fishing

    In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. Understanding QR Code Fishing: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code within emails, on…

    Read article…

  • Safeguarding Against QR Code Fishing

    In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. UNDERSTANDING QR CODE FISHING: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code. These codes can…

    Read article…

  • .zip Domains 

    Recently, .zip top-level domains have become available for public purchase. A top-level domain is the final section of a domain name. So, in utk[dot]edu, “.edu” is the top-level domain. Unsurprisingly, cybercriminals have begun purchasing and using .zip domains for their own malicious purposes.  In the coming months, we expect to see an influx of cybercriminals…

    Read article…

  • Phishing with Images

    Cybercriminals use images in phishing emails to impersonate real organizations. By using images like official logos (i.e., UT, UPS, FedEx, etc.) and promotional materials, cybercriminals hope to trick you into thinking the email is legitimate.  In one recent incident, cybercriminals spoofed Delta Airlines to try to steal sensitive information. The body of the email consists…

    Read article…


Benefits & Tips for You

In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.

  • Tips for Securing macOS

    It’s no surprise that macOS is the second-biggest operating system worldwide. Apple has a well-regulated array of computers available for consumers that merge many strengths of the whole Apple ecosystem. However, this doesn’t mean that you should not take any steps to help secure your macOS computer. Securing your Apple computer involves several steps to…

    Read article…

  • MFA + Strong Passwords: Your Best Defense Against Account Attacks

    Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…

    Read article…

  • Find Out If Your Data Was Exposed in a Breach

    Data breaches continue to affect major organizations, and recent reporting has linked the ShinyHunters extortion group to incidents involving Charter Communications, a company with services branded as Spectrum. A simple way to check whether your email address appears in a known breach data is to use Have I Been Pwned at haveibeenpwned.com. This site lets you search your…

    Read article…


Protecting University Data

Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.

  • The Importance of Information Security

    Each week, we have a section in OIT Weekly about information security.  We give tips and tricks to help you protect yourself from bad actors.  Given how much information security is in the news, this information can feel boring or redundant.  Recently though, the University of Michigan experienced a significant information security event that had…

    Read article…

  • Security Terms

    As the school year gets underway, it is important to be vigilant when checking your email. There are a couple of techniques that scammers are using to steal your information. SPOOFING is the modification of an email so that the message appears to have originated from someone or somewhere other than the actual source. Spoofing is…

    Read article…

  • Are My Documents Secure in the Cloud? 

    With the increased use of cloud storage (Google Drive, Microsoft OneDrive, Dropbox, Evernote, etc.), individuals should take extra precautions to ensure that both personal data and university data are protected. Cloud storage can reduce the risk involved with physically carrying data around on removable media. Users often have on-demand access to their information anywhere, and…

    Read article…