October is Cybersecurity Awareness Month
As technology continues to advance, so do the methods used to compromise personal, community and organizational security. From AI‑enhanced phishing messages to convincing deepfakes, and from discreet drones to subtle social engineering tactics, today’s threats rely on sophistication, timing and human behavior.
During Cybersecurity Awareness Month, it’s important to recognize how these techniques work. Knowing what to look for helps strengthen awareness and reduces the risk of accidental exposure. The following overview highlights several key areas shaping today’s cybersecurity landscape and offers practical steps everyone can take to stay protected.
Phishing and quishing in the era of artificial intelligence
Cybercriminals are increasingly using artificial intelligence (AI) to refine phishing and quishing attempts, resulting in fraudulent communications that look more polished and convincing than ever. Phishing messages that once stood out because of spelling errors now appear legitimate and highly personalized, often making them difficult to distinguish from real correspondence. Quishing — the use of malicious QR codes — is also becoming more sophisticated. Bad actors place these codes in locations where scanning feels routine, such as menus, posters or public information boards. When people are busy or on the move, they may not stop to question whether a QR code belongs where they found it.
What to pay attention to
- Unsolicited emails or messages that appear legitimate
- QR codes displayed without clear purpose or branding
- Links that don’t match the message’s stated intent
- Language designed to provoke urgency or quick action
How to protect yourself
- Hover over links before clicking to verify their destination
- Verify QR codes before scanning
- Pause to consider whether a message aligns with expectations
- Report suspicious or unusual communications
Deepfakes: The growing challenge of digital deception
Deepfake technology is rapidly advancing, allowing AI to generate realistic audio and video imitations of real individuals. These digital forgeries can appear in moments where trust is assumed, such as a familiar voice message or a video that seems routine.
Because deepfakes rely on subtle imitation rather than dramatic distortion, they often go unnoticed unless the viewer takes a moment to examine them closely. Building awareness of how deepfakes work can help individuals navigate unfamiliar or unexpected content more confidently.
What to pay attention to
- Messages or media delivered through channels the sender rarely uses
- Irregularities in lip-syncing, timing or voice cadence
- Requests that seem out of character or unusually urgent
- Instructions that fall outside established processes
How to protect yourself
- Confirm unexpected requests using a trusted communication method
- Slow down when urgency and confidentiality appear together
- Follow existing verification steps before acting on sensitive instructions
- Report any communication that feels inconsistent or suspicious
Drones introduce new considerations for physical security
As drones become more common for recreation, commercial work and photography, they also introduce new considerations for physical and information security. Their aerial perspective can capture details people may not realize are visible, such as screens, badges or wireless activity. While most drone activity is harmless, understanding their visibility reduces the chance of unintentional exposure and supports better day-to-day security habits.
What to pay attention to
- Unfamiliar drones operating near offices or restricted facilities
- Screens, whiteboards or credentials visible through windows
- Unexpected wireless signals or devices detected nearby
How to protect yourself
- Report unusual drone activity
- Keep ID badges and sensitive materials out of direct view
- Position computer screens away from windows whenever possible
Understanding the techniques that make social engineering effective
Social engineering remains one of the most effective methods used by bad actors because it targets people rather than technology. By using tone, familiarity or urgency, they may influence individuals to share information or perform actions outside normal procedures. These tactics can appear through phone calls, text messages, emails or unannounced visitors. Since bad actors often take time to understand a person or organization, their messages may look routine when they arrive.
What to pay attention to
- Requests that bypass normal procedures
- Messages that emphasize secrecy or immediate action
- Visitors who cannot provide proper identification
- Sudden changes to financial or account details
How to protect yourself
- Verify unexpected requests using known, trusted contact information
- Treat pressure or secrecy as a red flag
- Confirm payment instructions or account changes by phone
- Follow identification and access protocols consistently
- Report suspicious communication or interactions immediately
Responsible use of artificial intelligence
AI has become a powerful tool across industries, offering efficiencies in writing, summarizing and analyzing information. With these advantages, it is important to use AI responsibly and thoughtfully. Public AI platforms are not suitable for sensitive or regulated information, as data entered into them may be stored or reused. AI tools require human oversight, as generated content can contain errors or misinterpretations.
Guidelines for responsible use
Never enter confidential or sensitive information into AI tools
Review and verify all AI-generated content before relying on it
Ensure final decisions are made and owned by people, not algorithms
Maintain strong cyber hygiene across all devices and accounts
Staying informed is one of the most effective ways to strengthen cybersecurity. As technology evolves, so do the methods used to exploit it. Awareness, thoughtful habits and consistent verification can make a meaningful difference in reducing risk. By taking proactive steps to recognize emerging threats, each of us contributes to a safer and more secure digital environment for ourselves, our workplaces and our communities.