Don’t Make it Easy for Them: National Cybersecurity Awareness Month

October is National Cybersecurity Awareness Month, and at the University of Arizona, this year’s message is simple: Don’t Make It Easy for Them.

The University Information Security Office (ISO) is marking the 22nd anniversary of Cybersecurity Awareness Month by putting a face, or, in some cases, a name, to the threats people encounter online. This year’s campaign introduces four real-world cybercriminals and groups and, more importantly, the everyday habits that can make their work much harder.

The good news is that protecting yourself doesn’t require being a cybersecurity expert. Some of the most effective defenses are also some of the simplest.

Start with your passwords. Cybercriminals have access to tools capable of testing thousands of password combinations every second, making short, predictable or reused passwords particularly vulnerable. ISO recommends using a unique password of at least 16 characters for every account and considering a password manager to keep track of them.

Then, add another layer of protection with multifactor authentication (MFA). Stolen passwords are frequently bought, sold and reused by cybercriminals. Enabling MFA means a password alone is not enough to access your account. Whenever possible, use an authenticator app or biometrics such as Face ID, and never approve an unexpected authentication request.

Those software update reminders matter, too. Cybercriminals actively look for devices running outdated software with known vulnerabilities. Turn on automatic updates when possible, keep operating systems, browsers and applications current, and restart your device when an update requires it. A few minutes spent updating can close an opening an attacker might otherwise exploit.

Finally, give yourself a few seconds before responding to an unexpected message. Phishing and other scams often rely on urgency or emotion to get you to act before you have time to think. Be cautious of messages that pressure you to click a link, provide information, send money or respond immediately. You don’t have to click or reply just because a message demands your attention.

Cybersecurity is a shared responsibility, and small habits across our university community can make a meaningful difference. Lock your device when you step away, protect University information, use the university VPN when appropriate and report suspicious messages rather than engaging with them.

Throughout October, take a few minutes to explore the Information Security Office’s Cybersecurity Awareness Month resources, including information about passwords, MFA, software updates, phishing and other ways to protect yourself and university information.