Highlighted wordsare glossary terms — tap one for a plain-language definition.
Universities are open by design, and that openness gets exploited. If you handle research, IP, or restricted data, treat it like a high-value target.
Know the threats
Foreign entities and competitors look for shortcuts: stealing technical data, skipping R&D costs, recruiting insiders, and abusing visiting-scholar or visa programs to access labs.
- Treat unsolicited collaboration offers with skepticism.
- Verify the identity of visitors before granting lab or data access.
- Report unusual recruitment approaches to your security office.
Recognize exploitation methods
Common tactics include computer intrusions, PhishingWhat it means: A deceptive email or message designed to make you click, share information, send money, or give account access.Example: An “unpaid delivery fee” text with a link to a page that looks like the post office.What to do: Don't tap links in unexpected messages — open the company's app or type its address yourself.Important: Real companies never ask for your password or a login code by message.What does this mean? emails dressed as conference invites, and 'spotting' — quietly identifying students or faculty to recruit later for espionage.
- Be cautious with unsolicited emails and invitations.
- Don't share unpublished research over personal channels.
- Separate lab systems from general-purpose browsing and email.
Brought to you by NorthBridge
Unfamiliar term? Open the Digital Safety Glossary