Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
News Related Scams
Last week, news stories announced that Queen Elizabeth II, known for having the longest reign of any British monarch, passed away at 96. When an influential figure such as the queen passes away, people worldwide will be interested in reading more about their life and death. Cybercriminals take advantage of high-profile news stories to catch…
-
Zelle Fraud Alert
Zelle is a popular mobile payment application that allows users to send payments to one another. Like most financial institutions, Zelle alerts users of possible fraud to stop suspicious account activity from happening. However, not all fraud alerts are legitimate, and cybercriminals can impersonate Zelle and send fake fraud alerts to scam you. In a…
-
How Do Cybercriminals Make an Email Sound so Authentic?
Email or phone call scams are not new; cybercriminals have been attempting to fool people for years. Older scams like “You Won the Lottery” or the infamous “Nigerian Prince” are created as generic messages sent out to millions of people. The non-specific nature of these messages makes them easier to spot. More recently, personalized scams…
-
Security Topic of the Week
Is your workstation or laptop running slow? Does it take forever for an application to start? Do you return to your desk following short breaks and often find that your computer has restarted and is displaying some sort of cryptic message about a problem? These are all signs that your machine may be compromised or infected. Security incidents…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Tips for Securing macOS
It’s no surprise that macOS is the second-biggest operating system worldwide. Apple has a well-regulated array of computers available for consumers that merge many strengths of the whole Apple ecosystem. However, this doesn’t mean that you should not take any steps to help secure your macOS computer. Securing your Apple computer involves several steps to…
-
MFA + Strong Passwords: Your Best Defense Against Account Attacks
Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…
-
Find Out If Your Data Was Exposed in a Breach
Data breaches continue to affect major organizations, and recent reporting has linked the ShinyHunters extortion group to incidents involving Charter Communications, a company with services branded as Spectrum. A simple way to check whether your email address appears in a known breach data is to use Have I Been Pwned at haveibeenpwned.com. This site lets you search your…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
I’ve been hacked!
Determining whether or not your computer or mobile device has been hacked can be difficult. Nonetheless, there are a few common issues that will indicate your computer has been hacked. If your browser’s homepage has unexpectedly changed or is taking you to websites you have never visited, this could be an indication. Also, if your…
-
Phishing Ourselves
In September of 2021, the UTK Administration asked that OIT develop and carry out a phishing campaign. The phishing will continue until the clicks improve, and they ARE improving! A couple of Frequently Asked Questions (FAQs) about the phishing campaign: OIT conducted a baseline phishing exercise in September 2021 used to compare all following campaigns.…