MADISON, Wis. – October is Cybersecurity Awareness Month, and the Wisconsin Department of Administration (DOA), Wisconsin Department of Agriculture, Trade and Consumer Protection (DATCP), and Wisconsin Department of Military Affairs (DMA) are partnering to remind Wisconsin organizations and individual users how they can empower themselves to safely use digital spaces for work, shopping, entertainment, and everyday tasks. In a world that is more connected than ever by the internet and information technology systems, cybersecurity is no longer just a concern for professionals. It is part of most people’s daily lives. And with the rapid advancement of artificial intelligence (A.I.) technology, good digital hygiene and personal cybersecurity practices are more important than ever.
1. Power Up Your Password
Passwords are like a key to a user’s online account. A bad actor who steals that key could gain access to the user’s personal information, finances, and sensitive data. And because many people reuse the same password, if a cybercriminal knows just one account’s password they may try accessing other accounts with the same login details, like an email inbox or online banking portal.
The solution: Users should create long passwords that are easy to remember but hard to guess. Each account should have a unique password. Users may consider a secure, encrypted password manager program to keep track of all their passwords. And, for an extra layer of security, users should enable multi-factor authentication (MFA). With MFA, even if someone does know an account’s password, they still will not be able to log in without approval by the real account owner.
“Strong, unique passwords are a frontline defense,” said Wisconsin’s Adjutant General, Matthew Strub. “Good password discipline, including multi-factor authentication, not only protects personal data, but it also strengthens the cyber readiness of the systems Wisconsinites rely on every day.”
2. Think Before You Link
For many users, seeing an ad on social media, receiving links in texts or emails, or being sent a file attachment are normal parts of internet usage. Cybercriminals take advantage of that normalcy and manipulate users into visiting dangerous websites or opening file downloads. They might pretend to be a reputable company sending marketing products, a friend or family member who needs help, a boss with a work request, or a government agency. Their goal is to steal money, passwords, and other personal information by convincing users they need to take urgent action.
The solution: Avoid clicking ads, links, or attachments in social media feeds, texts, and emails. Instead, pause. Consider if the request is unusual or unexpected, then verify it anyway. Finally, avoid imposter websites by using your ‘favorites’ links for common websites or typing the verified web address directly into the search bar.
“Phishing is one of the most common ways that consumers lose control of their personal information and sensitive data,” said DATCP Secretary Randy Romanski. “Scammers know how to convince us to click, and that is why consumers need to be extra cautious with links and attachments and verify them before opening, even if they seem real.”
3. Don’t Be Late – Update
Update reminders and notifications are there for a reason! All apps, computer programs, and software have vulnerabilities. Programmers do their best to remove them before a software product launches, but sometimes these issues are discovered later and require a “patch” to be fixed. Cybercriminals take advantage of unpatched vulnerabilities to remotely access users’ devices and steal their data.
The solution: Keep all devices, applications, and software up to date by installing updates when prompted. To cut down on repetitive reminder notifications, turn on automatic updates. Time is of the essence when updating a device or software. The longer a vulnerability remains unfixed, the more likely cybercriminals will try to exploit it.
“Updating your computer frequently ensures you have the latest patches and protections in place – which could keep you safe from cybercriminals,” said DOA Secretary Kathy Blumenfeld. “Don’t leave yourself and your devices unprotected – don’t wait when it’s time to update.”
Reduce, Replace, Recover
Organizations have a big part to play in cybersecurity, too. In many cases, individual users are the ones who prevent cyber threats. But for larger scale operations, systems, and networks, a more coordinated effort may be needed. Organization-level cybersecurity helps protect critical infrastructure, large amounts of sensitive data, and confidential information from threats like social engineering, A.I. powered cyberattacks, malware, viruses, data breaches, and more.
Organizations can practice the “3Rs of Cybersecurity” to better protect employees, customers, communities, and essential services:
- Reduce vulnerabilities.
- Replace devices that are outdated and no longer supported by the manufacturer.
- Recover quickly to sustain operations.
Learn more about cybersecurity prevention practices for both individual users and organizations from the Cybersecurity & Infrastructure Security Agency at cisa.gov/cybersecurity-
For more consumer protection resources or to file a complaint, visit DATCP’s Consumer Protection webpage at ConsumerProtection.wi.gov or contact the Consumer Protection Hotline at (800) 422-7128 or DATCPHotline@wisconsin.gov.
Comments