Tag

Cybersecurity Awareness Month

posts

Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

October Comes and Goes — Breaches Don't Every October, organizations dust off the same tired PowerPoint decks, send a few reminder emails about password hygiene, and pat themselves on the back for "participating" in Cybersecurity Awareness Month. Then November arrives, an employee clicks a credential-harvesting link, and

Carl B. Johnson May 07, 2026 5 min read
Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

October Ends. The Phishing Emails Don't. Every October, organizations plaster break rooms with cybersecurity posters, blast out a few reminder emails, and call it a win. Then November rolls around, and the same employees click the same malicious links. I've watched this cycle repeat for over

Carl B. Johnson Feb 28, 2024 7 min read
Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

Last October, while organizations across the country were hanging "Think Before You Click" posters in their break rooms, the FBI's Internet Crime Complaint Center was logging over 847,000 complaints representing nearly $7 billion in losses for 2021. That's roughly a 7% increase in

Carl B. Johnson Mar 21, 2022 7 min read
Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

One Month Won't Save You — But It Can Start Something That Does In October 2020, during Cybersecurity Awareness Month, a major hospital chain — Universal Health Services — was fighting off one of the largest ransomware attacks in U.S. healthcare history. The Ryuk ransomware hit over 400 facilities. Staff

Carl B. Johnson Apr 02, 2021 6 min read
Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

Every October, Organizations Pretend to Care About Security Last October, a mid-sized healthcare company ran a poster campaign for Cybersecurity Awareness Month. Inspirational quotes about passwords. A lunch-and-learn nobody attended. Two weeks later, a threat actor walked through their defenses using a single phishing email that an accounts payable clerk

Carl B. Johnson Dec 14, 2019 6 min read