Never automatically trust files or links from known or familiar contacts. Even familiar names can be used to deliver malicious content. Always verify the source before opening any attachments or clicking on links. Trusted contacts can still be compromised, so always double-check before taking action—and apply a zero-trust mindset, even if the message comes from a known contact. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Always be cautious with unexpected emails—check the sender’s address carefully and avoid clicking on links or opening attachments if anything seems suspicious. If the message is unsolicited, don’t click on any links; instead, confirm its legitimacy through official channels. Watch for common phishing signs like poor grammar, generic greetings, and urgent or threatening language, and never share sensitive information via email.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Biometric data—such as fingerprints, face scans, or voice recognition—is unique and highly sensitive. It should be treated with the same level of caution as a password. Unlike passwords, biometric data cannot be changed or reset if stolen or leaked. Always store and share this information securely to safeguard your identity and privacy. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Enable two-factor authentication (2FA) on all your accounts for enhanced security. 2FA adds an extra layer of protection beyond just using a password. Only approve authentication requests if you initiate them. Be cautious of unexpected prompts, as they may indicate that someone is attempting to access your account without permission. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

The Latrodectus malicious software now uses a trick called ClickFix to spread and run in a computer’s memory, making it hard to detect. It downloads other harmful software like ransomware and was first reported in April 2024. A big cleanup operation in May 2025 shut down many servers linked to it. Recent attacks trick users into running commands that secretly install malicious software without saving files. It often hides inside real apps like NVIDIA installers. Experts suggest turning off the Windows Run tool to help stop it. Hackers are also using TikTok videos, possibly made with AI, to fool users into running dangerous commands by pretending to help activate software like Windows or Spotify. These videos got many views before the accounts were removed. In another scam, fake Ledger Live apps on Macs steal passwords and crypto wallet info by asking users for their recovery phrases. This type of attack has been growing since 2024, and experts warn it will likely...

Avoid using your work email to sign in to non-work sites. This helps keep your work account safe from risks. Mixing work and personal accounts can increase the risk of unauthorized access. Keeping work logins separate lowers the chance of data leaks. Use personal emails for personal accounts to stay safer online. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Disconnecting from screens helps reduce overload, boost well-being, and enhance digital security by lowering cyber risks.

How to Detox:

• Set Screen-Free Hours: Schedule tech-free time.
• Limit Social Media: Use apps to monitor usage.
• Take Daily Breaks: Unplug for at least an hour.
• Go Outside: Recharge in nature.

Cybersecurity Benefits:

• Smaller digital footprint
• Lower risk of cyber threats and scams
• Improved data and identity protection

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Restarting your device regularly is an important security practice. It allows updates and patches to be fully installed. These updates often fix system weaknesses that could be taken advantage of by attackers. Without a restart, some critical updates may not take effect. A simple restart can help keep your device and data safe. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Attackers are increasingly using a tactic called smishing, where they send fake text messages pretending to be from trusted sources like banks or government agencies to trick you into clicking malicious links or sharing personal information. These messages often create urgency to pressure you into acting quickly. When in doubt, don’t click — go to the official website or app to verify the message.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Upgrade your login security by switching from traditional passwords to digital passkeys. Passkeys use biometrics, such as fingerprints or facial recognition, or a PIN stored securely on your device. This form of authentication is more secure because it doesn’t rely on something you have to remember or type. It also significantly reduces the risk of phishing and credential theft. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.