Skip to content Skip to main navigation Report an accessibility issue
Information Security

Article Archive #2


Service navigation


Security Learning Icon One

Importance of Security

Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.

  • Cybersecurity…why?

    Passwords, two-factor, encryption, firewalls, phishing campaigns, and awareness training? How do these efforts “make us more secure?” Some may even ask, “Why bother? Won’t the hackers just get the information anyway?” Or even, “Do we REALLY need this level of information security?” Pick one: If you picked “4,” you may quit reading this. If you…

    Read article…

  • Events in Eastern Europe

    With recent events in the news, we know you have questions and concerns. One of those may be about cybersecurity. Am I or is our company more likely to come under attack? Am I at greater risk? We don’t have all the answers, nor do we know what will happen next. But we know from a cybersecurity…

    Read article…

  • Cyber Security 101 – Insider Threat

    OIT receives a lot of questions about cyber security, especially about what users can do to protect themselves. That is why we have an active security awareness program; we want to help users become secure and make the most of technology. Good Cybersecurity practices are actually not that hard; you only have to know and…

    Read article…


Scam Types

Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.

  • Tech Support Scams

    What are tech support scams? Tech support scams are a type of cybercrime that aims to trick users into believing that their computer has a serious problem, such as a virus. The scammers then offer to resolve the issue for a fee, which often involves installing malware on the user’s device or directing them to…

    Read article…

  • The Rising Threat of AI Voice Cloning

    Artificial intelligence continues to reshape the digital landscape, offering powerful tools for innovation but also new avenues for exploitation. One emerging threat is AI voice cloning, a technique that uses machine learning to replicate a person’s voice with startling accuracy. While this technology has legitimate applications in entertainment and accessibility, it has also been weaponized…

    Read article…

  • Social Engineering: Examples and Avoiding Them

    Social engineering is a significant threat that leverages human psychology and trust to deceive individuals into providing sensitive information or performing actions that compromise security for fraudulent purposes. It relies on exploiting human behavior rather than technical vulnerabilities. Understanding what social engineering is, recognizing its various forms, and knowing how to protect oneself from such attacks are crucial for maintaining security in both…

    Read article…

  • Privacy Concerns with Onboard AI: Google Gemini

    Ending the series of privacy concerns with onboard AI, Google Gemini, which uses the hardware on any Android smartphone with Gemini support, has been seen as a potential issue for user privacy.   Privacy Concerns Associated with Google Gemini:  To Opt Out of Google Gemini, Follow These Steps When You Opt Out of Google Gemini, Here…

    Read article…


Benefits & Tips for You

In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.

  • The Need to Replace SMS-Based MFA

    In December 2024, the FBI and CISA advised Americans against using SMS codes for multi-factor/two-factor (MFA/2FA) authentication. CISA’s Mobile Communications Best Practice Guidance bluntly recommended: “Do not use SMS as a second factor for authentication. SMS messages are not encrypted–a threat actor with access to a telecommunication provider’s network who intercepts these messages can read…

    Read article…

  • Safeguarding Your Remote Work

    Remote work in higher education is now the norm. To keep your online work safe using university-provided tools like OneDrive and Microsoft Teams, follow these straightforward steps: Working remotely in higher education is convenient and secure when you use the university-provided tools while taking these precautionary steps.

    Read article…

  • Privacy Concerns with Onboard AI: Microsoft Copilot

    Continuing with privacy concerns with onboard AI, Microsoft Copilot, which uses the hardware on any system with Windows 11 Copilot+ to run the native AI of Copilot, has been seen as a potential issue for user privacy. We’ve highlighted a few privacy concerns associated with Microsoft Copilot: You can opt out of data collection for…

    Read article…


Protecting University Data

Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.

  • MFA + Strong Passwords: Your Best Defense Against Account Attacks

    Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…

    Read article…

  • Digital Privacy—What is a Data Broker?

    In today’s digital age, personal information has become a valuable commodity. Data brokers have emerged as key players in this data-driven economy. Data brokers operate behind the scenes, gathering vast amounts of personal information from various sources. They compile detailed profiles on individuals and sell this data to businesses, marketers, and even government agencies. Understanding…

    Read article…

  • Getting Into the Mindset of a Hacker

    Have you ever wondered how a hacker looks at systems and finds unexpected ways around controls meant to keep them out? Is this a special mindset or a thought process that is learned? The mindset of a hacker can vary widely, but generally, it involves a few key traits and perspectives: While the term “hacker”…

    Read article…