Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Privacy Concerns with Onboard AI: Apple Intelligence
There has been a deluge of advertising for the Apple iPhone 16 and Apple Intelligence from cell phone carriers and providers. Some advertisers even say that they will give the new devices away for free with their new contract for a service and push Apple Intelligence. Is this truly a good deal? Privacy and Security…
-
Understanding the National Public Data Breach: What It Means for You and How to Protect Yourself
What Happened? Recently, National Public Data (NPD), a company that compiles public information for background checks, experienced a significant data breach. This breach exposed the personal information of nearly three billion (yes, that’s with a “b”) individuals. The compromised data includes names, addresses, phone numbers, email addresses, and Social Security numbers. Why Is This Important?…
-
Understanding the Latest Cyber Threats
As our digital landscape evolves, so do the tactics of cyber adversaries. It is crucial to stay informed on the latest threat intelligence to protect our personal and professional information. In this week’s security roundup, we discuss recent trends that affect users at all levels. The Rise of Ransomware 2.0 Ransomware attacks continue to plague…
-
Navigating the CrowdStrike Incident: What You Need to Know
Recently, there was a hiccup in the digital security world. CrowdStrike, the company that keeps virtual doors locked at many organizations around the world, had a bug in one of their updates. Their security tools went on vacation, and chaos followed. But wait, there’s more! Opportunistic cybercriminals exploited the situation by disseminating deceptive emails, masquerading…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Stay Safe Online When Using AI
Continuing with National Cyber Security Awareness Month, a frankly unavoidable tool is AI. AI is becoming more integrated with computing systems and applications. Some of them are relatively recently released to the public while others have been around for a while. If you have a Windows 11 computer, you can probably see Copilot in the lower…
-
Reporting Cybercrime
We all know that we should report any cyber incidents to the OIT HelpDesk and eventually OIT Security. This is the most important thing you can do following a cyber incident with university devices and data. What if, however, it’s your data and your devices? Thankfully it is National Cyber Security Awareness Month and the…
-
Tips for Securing Windows
Many people use Microsoft Windows as their primary operating system for work, school, personal computing, and even gaming. The most recent Windows Operating System is Windows 11, but there are still many people on Windows 10. Fortunately making your operating system more secure is very similar in both versions. Tips to help secure your Windows…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Look, No Hands—Let OIT Continuously Monitor Your Systems
One of the responsibilities of every user of UT’s IT resources is to continuously monitor their UT Owned workstations, laptops, and servers. What does that even mean? HOW? WHO? Who does ANYTHING continuously? These two words, continuous monitoring,” would imply that you (or somebody) should be looking at a computer(s) 24 hours a day, 365 days per year. Thankfully, this…
-
Plans and Programs and Controls, Oh My!
Information security conversations often include words like “IT security plans,” “systems,” and “program plans.” What do these terms mean in the context of cyber security, and why should we care? Three reasons WHY we are talking about cyber security: Human Resource (HR) or Fiscal (FI) policies provide a governance structure for conducting university business, the…
-
File Sharing Options for Sensitive Information
We regularly receive questions about sharing or storing sensitive information. While we have several recommendations, first, let’s talk about why you should be concerned about how you share or store sensitive information. ALL users are responsible for ensuring that their use of sensitive information services complies with laws, regulations, and policies where applicable; it is EVERYONE’s responsibility.…