Explore
Write
Chat
Call
Information Security
Article Archive #2
Service navigation
Importance of Security
Information security is about addressing and reducing IT RISK. It’s easy to overlook risk as a topic when all you hear is talk about passwords, firewalls, encryption, policies, or two-factor authentication. In this section, you’ll read about how the university is at risk and what you can do to reduce the risk in your group, department, and college.
-
What is a Purple Teamer?
A purple teamer is a cybersecurity professional who works to bridge the gap between red teams (offensive security) and blue teams (defensive security). Their role involves fostering collaboration and ensuring that both teams’ efforts align to enhance an organization’s security posture. Here are some key aspects of what a purple teamer does: By combining the…
-
What is a Red Teamer?
A red teamer is a cybersecurity professional who simulates real-world attacks on an organization’s systems, networks, and applications to identify vulnerabilities and weaknesses. The primary goal of a red teamer is to think and act like a malicious hacker to test and improve an organization’s security posture. Key Aspects of What a Red Teamer Does …
-
Why Reporting Phishing Emails Benefits UT
Reporting phishing emails seems like a small thing, but it can have a large impact on security and UT. Reporting phishing emails is crucial for UT to maintain a strong security posture. In our most recent phishing test, about thirty-five percent of the people in the test simply deleted the email. Around thirteen percent forwarded…
Scam Types
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Safeguarding Against QR Code Fishing
In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. Understanding QR Code Fishing: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code within emails, on…
-
Safeguarding Against QR Code Fishing
In the ever-evolving landscape of cybersecurity threats, one emerging tactic is the use of QR codes in phishing emails. This deceptive technique poses a significant risk to both end users and IT professionals. UNDERSTANDING QR CODE FISHING: QR code phishing involves embedding malicious URLs or content within a seemingly innocuous QR code. These codes can…
-
.zip Domains
Recently, .zip top-level domains have become available for public purchase. A top-level domain is the final section of a domain name. So, in utk[dot]edu, “.edu” is the top-level domain. Unsurprisingly, cybercriminals have begun purchasing and using .zip domains for their own malicious purposes. In the coming months, we expect to see an influx of cybercriminals…
-
Phishing with Images
Cybercriminals use images in phishing emails to impersonate real organizations. By using images like official logos (i.e., UT, UPS, FedEx, etc.) and promotional materials, cybercriminals hope to trick you into thinking the email is legitimate. In one recent incident, cybercriminals spoofed Delta Airlines to try to steal sensitive information. The body of the email consists…
Benefits & Tips for You
In this section, you can learn about all the different tools available to you at UT, such as secure file sharing and monitoring your systems. We will also share best practices for staying secure at school and at home.
-
Don’t Let Cyberthreats Disrupt Your Semester
As the semester begins, information security remains one of the most important responsibilities shared across the university. Cybercriminals continue to target higher‑education institutions, and every email, device, and login we use plays a role in protecting university data. OneIT’s Information Security team provides the tools, training, and guidance needed to keep our campus secure, including…
-
Tips for Securing macOS
It’s no surprise that macOS is the second-biggest operating system worldwide. Apple has a well-regulated array of computers available for consumers that merge many strengths of the whole Apple ecosystem. However, this doesn’t mean that you should not take any steps to help secure your macOS computer. Securing your Apple computer involves several steps to…
-
MFA + Strong Passwords: Your Best Defense Against Account Attacks
Multi-factor authentication (MFA) adds an extra layer of protection to your accounts by requiring more than just a password to sign in. Even if a password is stolen through phishing, malware, or a data breach, MFA can still prevent an attacker from accessing your account. This additional safeguard is especially important because passwords can be…
Protecting University Data
Discover essential articles on cybersecurity practices specifically tailored for the University of Tennessee. Learn effective strategies to safeguard sensitive information, defend against threats, and maintain data integrity. Equip yourself with knowledge to protect your university’s digital ecosystem.
-
Protecting Your Virtual Machines
Many of us use virtual machines (VMs) on our computers these days for various reasons – to run an older operating system, test new software safely, or access work resources remotely. While VMs provide great flexibility, they also introduce potential security risks if not configured properly. Just like with regular software on your main operating…
-
The Importance of Installing Approved Software
As we navigate the ever-evolving landscape of cybersecurity, it’s crucial for each member of our university to play an active role in maintaining a secure computing environment. Today, we’ll shed light on the significance of only installing approved software on university-owned machines and the impact it has on our collective digital safety. 1. Protecting Sensitive…
-
Enhancing Cybersecurity: A Guide to Browser Extensions
Browser extensions are a great way to enhance your browsing experience but can pose a significant security risk. Cybercriminals frequently use browser extensions to gain access to your personal information, such as login credentials, browsing history, and other sensitive data. In fact, according to a report by Kaspersky, more than 1.3 million users were affected by…