October is Cybersecurity Awareness Month

Emily Fay

October 17, 2025

The theme for Cybersecurity Awareness Month 2025 is “Building a Cyber Strong America.”

What is cybersecurity? Cybersecurity is the protection of computer systems from attacks by people with bad intent that may result in an information leak, theft of, or damage to hardware, software, or data. Your phone, laptop, game console, TV, Wi-Fi, and so many other technologies are vulnerable to these attacks. Not only are hackers trying to steal your information, but they also hope to interrupt your services, such as water, food, and transportation. When people with bad intent can find their way into these daily services, the effect is fast and harmful. Protecting these services starts with each person’s daily actions online.

What are some ways you can protect yourself and your organization from these threats?

The Cybersecurity and Infrastructure Security Agency (CISA), the leading federal group for this campaign, provides four ways to stay safe online:

Use Strong Passwords and a Password Manager​

• Create a long password
  • At least 16 characters
• Create a unique password
  • NEVER reuse passwords
• Create a random password
  • Use upper- and lower-case letters
  • Use numbers
  • Use special characters (!@#$%)
  • Include spaces
  • Consider using a pass-phrase that can be created using websites like PassphraseGenerator or Keeper.
• Password Manager
  • A password manager is a tool that helps internet users create, save, manage, and use passwords across different online sites.
  • Passwords aren’t always easy to remember so use an app or an external hard drive to store your passwords.
  • Some apps can alert you of duplicate passwords.
  • Some apps can create strong new passwords.
  • Some automatically fill in your login into websites to make sign-in easy.
  • It won’t fall for a phishing website, even if you do!
  • Encryption ensures that password managers never “know” what your passwords are, keeping them safe from cyber-attacks.

Turn on Multifactor Authentication (MFA)

• What is an MFA?
  • A code sent to your phone or email
  • Authenticator Apps
  • A security key, which is a USB flash drive or key fob, must be physically inserted into the computer or phone.
  • Biometrics
    • Fingerprint
    • Facial recognition
• Where should you use an MFA?
  • Email
  • Accounts with financial information
    • Ex: Online stores like Amazon or eBay
  • Accounts with personal information
    • Ex: Social media

Recognize and Report Phishing Attacks​

• Common phrases that could be considered a phishing attempt:
  • A tone that’s urgent or makes you scared.
    • Ex: “Click this link immediately or your account will be closed!”​
  • Sender email address doesn’t match the company it’s coming from.
    • Ex: Amazon.com vs. Amaz0n.com
  • Unexpected communications such as an email you weren’t expecting.
  • Requests to send personal information.
    • Legitimate organizations don’t ask for personal information through email or unexpected calls.
  • Misspelled words, bad grammar​ and odd URLs can still be a sign of phishing.
    • Be aware that Artificial Intelligence (AI) will make spotting these more challenging. Be careful and don’t be afraid to ask others if what you received was a scam.
• What do I do if I spot a Phish attempt?
  • Do NOT:
    • Don’t click any links you don’t trust. Delete the email/text.
    • Don’t click any attachments you were not expecting or recognize.
    • Don’t send personal info online or share over the phone.
  • Do:
    • Verify that the communication is real and contact sender directly through known phone numbers or emails.
    • Report it to your IT department or email/phone provider.
    • Use email filters.
    • Many email services have filters that can help prevent many phishing messages from ever reaching your employees’ mailboxes.
    • DELETE IT.

Update Your Software

• Why?
  • Updates ensure your devices and apps are protected from the latest threats.
  • Don’t click “remind me later,” it could leave you vulnerable to cyber threats.
  • Automatic updates are the easiest way to stay secure.
• Where to find available updates:
  • Check for notifications on your phone or computer.
  • Look in your phone, browser, or app settings.
  • Check the upper corner of your browser for any alerts.

With more sensitive information online than ever before, it’s important that you and others are aware about cybersecurity. Whether that’s at work or at home, we all need to do our part to keep our communities safe. There are no-cost tools and guides available to you and your leadership that can help promote cybersecurity awareness through CISA.

Tips courtesy of CISA.

Article by: Anissa Locha