Skip to content Skip to main navigation Report an accessibility issue
Information Security

Article Archive #2


Service navigation


Security Learning Icon One

Importance of Security

Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.

  • Agentic AI Browsers and Associated Risks

    Unlike traditional browsers, which rely on user clicks and keystrokes, Agentic AI browsers integrate autonomous agents into the browsing experience. These tools interpret natural language commands and are capable of executing multi-step tasks across websites. Popular AI Browser examples include: These browsers aim to boost productivity by automating tasks like booking appointments, comparing products, or…

    Read article…

  • Don’t Delete That Suspicious Email

    Phishing emails are among the most common threats facing universities today. These messages appear legitimate, enticing you to click on malicious links, download harmful attachments, or give away sensitive information. At UT, we rely on your help to identify and stop these threats. That’s why reporting suspicious emails is essential—not just deleting them. What Happens…

    Read article…

  • Understanding Passwordless Authentication

    Passwordless authentication is a modern security practice that eliminates the need for traditional passwords to verify a user’s identity. Instead, it relies on alternative methods such as biometrics, physical security keys, or cryptographic keys stored on a device to grant access. This approach reduces security risks such as reused passwords, stolen credentials, and weak authentication…

    Read article…


Scam Types

Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.

  • When Bad News Travels, Attackers Are Listening 

    Malicious actors monitor news outlets and social media for signs of confirmed or suspected security events that they can exploit to their advantage. A campus outage that generates public discussion is, to them, an opportunity with a shelf life. The psychology is simple: during a disruption, people expect to hear from IT, so a call…

    Read article…

  • ClickFix: Don’t Be Tricked by a Fake “Fix”

    Cybercriminals are using a tactic called ClickFix to trick people into compromising their own devices. These scams use fake error messages, security warnings, or fake CAPTCHA verification prompts that tell users to take steps to “fix” a problem. One common trick is instructing users to press Windows + R to open the Run box, then press Ctrl + V to paste…

    Read article…

  • Triggers Hackers Use to Trick You: Urgency, Authority, and Curiosity

    Hackers don’t rely on technology alone—they rely on human psychology. Most attacks rely on three simple triggers to get people to act quickly without thinking. The first trigger is a sense of urgency, with messages like “act now or lose access” or “your account will be locked,” creating pressure that pushes users to respond immediately…

    Read article…

  • Understanding QR Code Phishing

    In the dynamic world of cybersecurity, threat actors continue to innovate using methods like QR code phishing. This technique, which seemed emergent just a few years ago, has now become more refined and widespread. QR code phishing, also known as “Quishing,” remains a threat as these codes are now ubiquitously used for convenience in many…

    Read article…


Benefits & Tips for You

In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.

  • Agentic AI Browsers and Associated Risks

    Unlike traditional browsers, which rely on user clicks and keystrokes, Agentic AI browsers integrate autonomous agents into the browsing experience. These tools interpret natural language commands and are capable of executing multi-step tasks across websites. Popular AI Browser examples include: These browsers aim to boost productivity by automating tasks like booking appointments, comparing products, or…

    Read article…

  • Compelling Reason to Lock Your Screen

    It only takes a few seconds for someone to access your computer, and that’s all it takes to compromise sensitive data, send unauthorized emails, or install malicious software. Whether you’re in a shared office, classroom, or public space, locking your screen when stepping away is one of the simplest ways to protect your device and…

    Read article…

  • 5 Cybersecurity Habits for a Safer Campus

    Cybersecurity is a shared responsibility. Whether you’re a student, faculty, or staff member, your daily digital habits play a critical role in protecting the University of Tennessee’s systems and data. Here are five simple habits that can make a big difference: 1. Use Strong, Unique Passwords or a Password Manager Reusing passwords across accounts is…

    Read article…


Protecting University Data

Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.

  • Look, No Hands—Let OIT Continuously Monitor Your Systems

    One of the responsibilities of every user of UT’s IT resources is to continuously monitor their UT Owned workstations, laptops, and servers. What does that even mean? HOW? WHO? Who does ANYTHING continuously? These two words, continuous monitoring,” would imply that you (or somebody) should be looking at a computer(s) 24 hours a day, 365 days per year. Thankfully, this…

    Read article…

  • Plans and Programs and Controls, Oh My!

    Information security conversations often include words like “IT security plans,” “systems,” and “program plans.” What do these terms mean in the context of cyber security, and why should we care? Three reasons WHY we are talking about cyber security: Human Resource (HR) or Fiscal (FI) policies provide a governance structure for conducting university business, the…

    Read article…

  • File Sharing Options for Sensitive Information

    We regularly receive questions about sharing or storing sensitive information.  While we have several recommendations, first, let’s talk about why you should be concerned about how you share or store sensitive information. ALL users are responsible for ensuring that their use of sensitive information services complies with laws, regulations, and policies where applicable; it is EVERYONE’s responsibility.…

    Read article…