Artificial intelligence can help security teams detect threats faster, but it's also giving attackers new ways to scale familiar tactics like phishing, impersonation and account theft. Here are five cybersecurity trends shaping higher education and the broader technology landscape.
AI-powered scams are getting harder to spot
Generative AI can help attackers create more convincing emails, text messages and other communications, with fewer spelling mistakes and more personalized content. That's making it harder to distinguish legitimate messages from phishing attempts. Watch our former colleague Robby Ballard talk about how AI is changing phishing scams, or read about how Microsoft is tracking these new threats.
AI tools need security, too
As AI assistants and chatbots become more common, we are focusing on how these tools access, use and protect data. Security and privacy are becoming an important part of every AI conversation.
- To learn more about UAB-approved AI tools, check out UAB’s AI web site, which shows you which data is appropriate for which tool.
- You should never put UAB data in the consumer version of an AI tool — only use UAB data in the approved version of tools such as Microsoft Copilot or ChatGPT.
Your account remains a prime target
Many cyberattacks still begin with a compromised account. Multifactor authentication, passkeys and strong passwords remain some of the simplest and most effective ways to protect university systems and personal information.
- UAB requires passwords of 15 characters or more.
- You can also request the UAB-approved Keeper password manager to keep track of all of your passwords.
Cybersecurity extends beyond campus
Universities rely on cloud services, software platforms and technology vendors for everything from learning tools to business operations. Security leaders are paying closer attention to the risks that can arise through those trusted third-party relationships. Learn more about cyber security trends in 2026.
People are still the strongest defense
Despite advances in technology, many attacks still depend on persuading someone to click a link, share information or take action. One of the attacks UAB’s security team sees often is called a “click-fix scam,” which prompts you to follow steps that include copying and pasting text that actually holds hidden code that can download malware onto your device. “Remember that UAB IT will never ask you to hit ‘Windows key and R,’ then paste something and no legitimate website will either,” said Jerry Smith, associate director for information security operations.
Taking a moment to verify requests and report suspicious activity remains one of the most effective ways to reduce risk. Learn more about Cyber Security Awareness Month.