Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Typosquatting: When a Tiny Typo Leads to Big Trouble
Have you ever mistyped a website address? Maybe you accidentally hit “goggle.com” instead of “google.com”? Well, that seemingly innocent slip-up can lead you down a treacherous path—one paved with cyber traps. What Is Typosquatting? Typosquatting is like a cunning chameleon. It preys on our human tendency to fumble our keystrokes. Here’s how it works: Why…
-
Spotting and Avoiding Phishing Attacks
Phishing is essentially someone trying to get you to do something via email, usually by asking you to volunteer personal information or click a link, which enables them to compromise you, your accounts, or your computer. Other kinds of phishing may require you to open an attachment or a link, which can infect your computer…
-
Obscured, Obfuscated Links
Recently, researchers have discovered another technique cybercriminals use to steal your information. In this technique, cybercriminals use obfuscated links to show IP addresses like XXX.XXX.XXX.XXX, instead of websites. Obfuscated links are URLs that have been modified to hide the real location of a website. In this attack method, cybercriminals send an urgent email that appears to come from a legitimate source and…
-
Phishing and Phishing and Phishing
Cybercriminals know the best strategies for gaining access to the university’s sensitive data – Social Engineering. They simply manipulate your trust by posing as something or someone you trust. According to experts at IBM, human error accounts for 95% of security incidents. Protect your data by familiarizing yourself with the various techniques and telltale signs of…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Agentic AI Browsers and Associated Risks
Unlike traditional browsers, which rely on user clicks and keystrokes, Agentic AI browsers integrate autonomous agents into the browsing experience. These tools interpret natural language commands and are capable of executing multi-step tasks across websites. Popular AI Browser examples include: These browsers aim to boost productivity by automating tasks like booking appointments, comparing products, or…
-
Compelling Reason to Lock Your Screen
It only takes a few seconds for someone to access your computer, and that’s all it takes to compromise sensitive data, send unauthorized emails, or install malicious software. Whether you’re in a shared office, classroom, or public space, locking your screen when stepping away is one of the simplest ways to protect your device and…
-
5 Cybersecurity Habits for a Safer Campus
Cybersecurity is a shared responsibility. Whether you’re a student, faculty, or staff member, your daily digital habits play a critical role in protecting the University of Tennessee’s systems and data. Here are five simple habits that can make a big difference: 1. Use Strong, Unique Passwords or a Password Manager Reusing passwords across accounts is…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Look, No Hands—Let OIT Continuously Monitor Your Systems
One of the responsibilities of every user of UT’s IT resources is to continuously monitor their UT Owned workstations, laptops, and servers. What does that even mean? HOW? WHO? Who does ANYTHING continuously? These two words, continuous monitoring,” would imply that you (or somebody) should be looking at a computer(s) 24 hours a day, 365 days per year. Thankfully, this…
-
Plans and Programs and Controls, Oh My!
Information security conversations often include words like “IT security plans,” “systems,” and “program plans.” What do these terms mean in the context of cyber security, and why should we care? Three reasons WHY we are talking about cyber security: Human Resource (HR) or Fiscal (FI) policies provide a governance structure for conducting university business, the…
-
File Sharing Options for Sensitive Information
We regularly receive questions about sharing or storing sensitive information. While we have several recommendations, first, let’s talk about why you should be concerned about how you share or store sensitive information. ALL users are responsible for ensuring that their use of sensitive information services complies with laws, regulations, and policies where applicable; it is EVERYONE’s responsibility.…