Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
Think Before You Share: What the Claude Search Exposure Teaches Us About AI Privacy
Recent reporting found that some Claude chats and Artifacts shared by public links appeared in Google search results. Reported examples included internal documents, health-related information, contact details, and API keys. This does not appear to mean that all private Claude chats were exposed, but it is an important reminder that a shared AI link may be far more…
-
Two-Factor Authentication (2FA) Prompt Bombing
Two-factor authentication (also known as, “Multi-factor Authentication (MFA)”) provides an extra layer of security for your accounts, but it’s important to think before you click. Cybercriminals can use an attack method called 2FA prompt bombing to bypass 2FA protections and overwhelm you with prompts via the Push feature of Duo. For example, cybercriminals may try to log…
-
When ‘Too Good to Be True’ Comes from Someone You Know
For years, cybercriminals have used social media to post fake sales listings for popular items such as furniture or electronics. As these scams have gained in popularity, most of us have learned to use caution when buying items online from strangers. Now, cybercriminals are impersonating people you trust to lure you into their fake listing…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Keep IT Private and Separate
“YOU” exist in digital form all over the Internet. It is thus important to ensure that the “digital YOU” matches what you intend to share. It is also critical to guard your privacy — not only to avoid embarrassment but also to protect your identity and finances! The following are specific steps you can take…
-
IT or Cybercriminal?
Coinbase, a cryptocurrency platform, is the latest victim of a social engineering attack. Social engineering occurs when cybercriminals manipulate you to try to steal your sensitive information. In this Coinbase attack, a cybercriminal sent smishing (SMS phishing) messages to their employees containing a link directing them to log in to their company accounts. Shortly after…
-
There was PHISHING. Then, there was SMISHING!
A single sign-on (SSO) service allows you to log in to multiple accounts using one login credential, such as your NETID and the Central Authentication Service (CAS). Unfortunately, you aren’t the only one who benefits from this service. Cybercriminals are taking advantage of SSO services in a recent smishing (SMS phishing) scam. A SMISHING scam…
-
Beware of Scams Related to Recent Earthquakes!
Last week, two earthquakes occurred in Turkey and Syria. Unfortunately, cybercriminals often use crises to get your attention and manipulate your emotions. Cybercriminals have already begun exploiting this event to scam you and steal your sensitive information. You should not be surprised to see an influx of phishing attacks referencing this recent event. Cybercriminals may…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Safeguarding Your Data in the Cloud: A Guide to Cloud Security
In today’s digital age, cloud computing has become an integral part of how we store, access, and share data. Whether you’re an end user or an IT professional, understanding cloud security is crucial for safeguarding sensitive information. Let’s explore some essential tips to help you navigate the world of cloud security. Remember, cloud security is…
-
Safeguarding Your Online Presence: A Guide to Secure Social Media Use
In today’s interconnected world, social media has become integral to our daily lives. It’s a great way to stay in touch with friends, share experiences, and network professionally. However, it’s crucial to remember that the information we share online can have significant implications for our privacy and security. Here are some tips on how to…
-
Compromised Workstations & Laptops
An early nineteenth-century Prussian General stated, “No plan survives contact with the enemy.” President Eisenhower said, “…plans are useless, but planning is indispensable.” Ransomware, the type of attack where the bad guys take your data and render it useless, is recent. The methods to prevent it or lessen its impact are not. It’s your IT Professionals’ age-old, sage advice: “Patch it, back it up, and above all, don’t click…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
MFA + Strong Passwords: Your Best Defense Against Account Attacks
Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…
-
Digital Privacy—What is a Data Broker?
In today’s digital age, personal information has become a valuable commodity. Data brokers have emerged as key players in this data-driven economy. Data brokers operate behind the scenes, gathering vast amounts of personal information from various sources. They compile detailed profiles on individuals and sell this data to businesses, marketers, and even government agencies. Understanding…
-
Getting Into the Mindset of a Hacker
Have you ever wondered how a hacker looks at systems and finds unexpected ways around controls meant to keep them out? Is this a special mindset or a thought process that is learned? The mindset of a hacker can vary widely, but generally, it involves a few key traits and perspectives: While the term “hacker”…