National Cyber Security Month: October

Don't Make It Easy for Them
Cybersecurity Awareness 2026

October is Cybersecurity Awareness Month, a global initiative led by the Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance to promote safer online behavior and strengthen cyber resilience. This year's theme, "Don't Make It Easy for Them," reminds us that cybercriminals often succeed because of simple mistakes, rushed decisions, or overlooked security practices. Taking a few proactive steps can make a significant difference in protecting both personal and organizational information.

Why Cybersecurity Awareness Matters
Cyber threats continue to evolve at a rapid pace. Criminals are increasingly targeting people instead of technology through phishing emails, social engineering, business impersonation scams, and AI-generated attacks. Security experts report that human actions remain a major factor in many security incidents, highlighting the importance of awareness and everyday vigilance.

For housing authorities and public organizations, cybersecurity is about more than protecting systems. It is about safeguarding resident information, financial data, employee records, and maintaining trust within the communities we serve.

Four Simple Ways to Stay Secure
CISA encourages everyone to focus on four core cybersecurity habits:

• Avoid and Report Phishing
  Be cautious of unexpected emails, text messages, or phone calls requesting sensitive information. Verify requests through a trusted channel before responding. Report suspicious communications immediately.
• Use Strong Passwords
  Create unique passwords for each account. Use long passphrases rather than simple words. Avoid reusing passwords across multiple sites.
• Enable Multi-Factor Authentication (MFA)
  MFA adds an additional layer of security beyond passwords. Approve MFA requests only when you initiated the login.
• Keep Software Updated
  Install updates promptly on computers, mobile devices, and applications. Updates often contain critical security fixes that protect against known vulnerabilities.

Emerging Threats to Watch in 2026

• Deepfake Voice Scams
  Artificial intelligence can now create highly convincing voice clones that mimic executives, coworkers, or vendors. Always verify unusual requests involving payments, banking changes, or sensitive information using a second communication method.
  
• AI-Generated Phishing Emails
  Modern phishing messages may appear polished, error-free, and highly personalized. The old advice to "look for spelling mistakes" is no longer enough. Always verify the sender and be cautious of urgency or unexpected requests.
• MFA Fatigue Attacks
  Cybercriminals may repeatedly trigger authentication requests hoping users will approve one by mistake. Never approve an MFA request you did not initiate.

This October, let's commit to one goal: Don't Make It Easy for Them

Quick Security Checklist

• Use a unique password for every account
• Enable MFA wherever available
• Think before clicking links or attachments
• Verify unexpected requests
• Keep devices and software updated
• Report suspicious activity immediately

Got Cyber?

Contact cmorrison@ncharrp.com For Quick Concierge Service to obtain Cyber Insurance Quotes