Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
What is a Purple Teamer?
A purple teamer is a cybersecurity professional who works to bridge the gap between red teams (offensive security) and blue teams (defensive security). Their role involves fostering collaboration and ensuring that both teams’ efforts align to enhance an organization’s security posture. Here are some key aspects of what a purple teamer does: By combining the…
-
What is a Red Teamer?
A red teamer is a cybersecurity professional who simulates real-world attacks on an organization’s systems, networks, and applications to identify vulnerabilities and weaknesses. The primary goal of a red teamer is to think and act like a malicious hacker to test and improve an organization’s security posture. Key Aspects of What a Red Teamer Does …
-
Why Reporting Phishing Emails Benefits UT
Reporting phishing emails seems like a small thing, but it can have a large impact on security and UT. Reporting phishing emails is crucial for UT to maintain a strong security posture. In our most recent phishing test, about thirty-five percent of the people in the test simply deleted the email. Around thirteen percent forwarded…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Safeguarding Against QR Code Fishing
In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. Understanding QR Code Fishing: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code within emails, on…
-
Safeguarding Against QR Code Fishing
In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. UNDERSTANDING QR CODE FISHING: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code. These codes can…
-
.zip Domains
Recently, .zip top-level domains have become available for public purchase. A top-level domain is the final section of a domain name. So, in utk[dot]edu, “.edu” is the top-level domain. Unsurprisingly, cybercriminals have begun purchasing and using .zip domains for their own malicious purposes. In the coming months, we expect to see an influx of cybercriminals…
-
Phishing with Images
Cybercriminals use images in phishing emails to impersonate real organizations. By using images like official logos (i.e., UT, UPS, FedEx, etc.) and promotional materials, cybercriminals hope to trick you into thinking the email is legitimate. In one recent incident, cybercriminals spoofed Delta Airlines to try to steal sensitive information. The body of the email consists…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Agentic AI Browsers and Associated Risks
Unlike traditional browsers, which rely on user clicks and keystrokes, Agentic AI browsers integrate autonomous agents into the browsing experience. These tools interpret natural language commands and are capable of executing multi-step tasks across websites. Popular AI Browser examples include: These browsers aim to boost productivity by automating tasks like booking appointments, comparing products, or…
-
Compelling Reason to Lock Your Screen
It only takes a few seconds for someone to access your computer, and that’s all it takes to compromise sensitive data, send unauthorized emails, or install malicious software. Whether you’re in a shared office, classroom, or public space, locking your screen when stepping away is one of the simplest ways to protect your device and…
-
5 Cybersecurity Habits for a Safer Campus
Cybersecurity is a shared responsibility. Whether you’re a student, faculty, or staff member, your daily digital habits play a critical role in protecting the University of Tennessee’s systems and data. Here are five simple habits that can make a big difference: 1. Use Strong, Unique Passwords or a Password Manager Reusing passwords across accounts is…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
MFA + Strong Passwords: Your Best Defense Against Account Attacks
Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…
-
Digital Privacy—What is a Data Broker?
In today’s digital age, personal information has become a valuable commodity. Data brokers have emerged as key players in this data-driven economy. Data brokers operate behind the scenes, gathering vast amounts of personal information from various sources. They compile detailed profiles on individuals and sell this data to businesses, marketers, and even government agencies. Understanding…
-
Getting Into the Mindset of a Hacker
Have you ever wondered how a hacker looks at systems and finds unexpected ways around controls meant to keep them out? Is this a special mindset or a thought process that is learned? The mindset of a hacker can vary widely, but generally, it involves a few key traits and perspectives: While the term “hacker”…