As the typhoon affects many areas, be cautious of calamity loan scams offering quick financial aid through fake links or messages. Always confirm loan offers directly with your bank or government agency before giving personal details. Remember, legitimate institutions never ask for passwords, OTPs, or fees via text or social media.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Only download software or apps that have been approved by your IT department. Unapproved programs may contain malicious software or security weaknesses that put company data at risk. Always check with IT before installing anything new on your device. Staying cautious helps keep our systems and information secure. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Cybersecurity experts at Tenable have found seven security flaws in OpenAI’s GPT-4o and GPT-5 models that could let attackers steal users’ personal data or chat histories. OpenAI has already fixed some of the issues.

These flaws enable prompt injection attacks, where hackers hide malicious instructions that trick ChatGPT into revealing information or performing unintended actions. Examples include:

• Hidden commands inside websites or web comments.
• Dangerous links disguised as Bing ads or search results.
• “One-click” or “zero-click” links that automatically trigger harmful prompts.
• Bugs that let attackers hide code or corrupt ChatGPT’s memory.

Similar attacks have been reported in other AI tools like Claude, GitHub Copilot, and Microsoft 365 Copilot, showing how AI systems connected to the web are...

Use strong, unique passwords for every account to keep your personal and financial information safe from hackers. Avoid simple or reused passwords, and mix letters, numbers, and symbols to make them harder to guess. Consider using a password manager to securely store and generate complex passwords, adding an extra layer of protection.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Unexpected offers promising free prizes or big discounts are often scams. Scammers use excitement or pressure to rush you. If anyone asks for personal info or money upfront, pause and verify before responding.

What to Do:

• Think before responding to unexpected offers
• Verify by contacting the company directly
• Ask for official confirmation
• Trust your instincts—if it feels off, it probably is

"Stay sharp, check twice—don’t pay the price for a nice surprise!"

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Always keep your devices physically secure to prevent unauthorized access. Never leave your laptop or other devices unattended in public places, even for a short time. At home, store them in a safe spot when not in use to avoid theft or tampering. Remember, physical security is just as important as digital security. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Never share your passwords or login credentials with anyone, even trusted friends or family members, as it can compromise your accounts and company security. Allowing others to use your work device can expose sensitive information or introduce malicious software that puts your organization at risk. Always keep your credentials private and your company devices for your use only to maintain data security and compliance.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Always update your saved logins when prompted. Outdated credentials can leave your accounts exposed to unauthorized access. Regularly refreshing passwords ensures your information stays secure and aligned with current security standards. Taking a few seconds to update your logins can prevent major security breaches later. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Be cautious of unexpected phone calls or text messages asking for personal or financial information. Scammers often use vishing (voice phishing) and smishing (SMS phishing) to impersonate trusted organizations and create a sense of urgency to trick you into sharing sensitive data or clicking malicious links. Always verify requests through official contact channels and never provide information or click links from unknown or suspicious sources.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Protect your data by never assuming trust—even inside your organization. Zero Trust means always verifying every person and device.

Avoid:
× Trusting internal messages automatically
× Weak or repeated passwords
× Skipping multi-factor authentication
× Using personal/public devices for sensitive data
× Clicking suspicious links or attachments
× Ignoring security alerts

Zero Trust isn’t fear—it’s staying one step ahead.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.