Faculty have significant concerns about Trellix.
On May 5, 2025, UCLA administrators announced that by June 1, all UCLA employees must install “Trellix Endpoint Security” on their devices, even personal ones, to access “select critical UCLA applications.”
Information collected by the Trellix software is not under the user’s control, and there is the danger that it might be given to government authorities. A previous version of Trellix, called “FireEye,” was hacked in 2021 by “a nation with top-tier offensive capabilities.” The Trellix software is also computationally demanding and slows down other computer processes. These and other concerns were raised by a letter by the UC system-wide Academic Senate in June 2024.
The Council of the University of California Faculty Associations (CUCFA) is circulating an open letter for faculty to sign demanding that the UC delay the cybersecurity mandate until Fall 2025.
