October is Cybersecurity Awareness Month, but Be Cybers-Aware Everytime You Log In

Oct 2, 2020 | Security

By Craig Cooper, COO, Gurucul, Inc.

Circuit and Lock

It seems there’s a month for everything.  Black History Month (important!) in February, which is also National Bird Feeding (not so important) Month.  American Cheese Month in May.  Jazz Appreciation Month in April.  Etc.  There are literally dozens of specialty months, which leads to a bunch of overlap on the calendar and most people only knowing, or caring about, the more famous ones.  While, sadly, we know of no National Coffee Appreciation Month (but why not?!), there is Cybersecurity Awareness Month in October.  Which also happens to be National Pizza Month.

This is a topic that deserves a lot more attention than it gets.  Cybersecurity belongs to everyone and needs to be “in mind” more than just one month out of the year.  Honestly, it’s something that IS top of mind for anyone in the industry and should be higher up the priority list for everyone else.  This year’s theme is: “Do Your Part. #BeCyberSmart.”  Which is timely, given the arc 2020’s been on so far in so many contexts.

Cybersecurity Awareness Month is broken down into four specific areas of cybersecurity awareness, starting the first week with “If you connect it, protect it.”  The focus here is on the interconnectedness of our lives from the perspective of our lives online and off.  Cybersecurity starts with us, which means being aware of what we put on the internet and learning how to take responsibility for our own kit.

Week two shifts the focus even closer to home.  With the current “new normal” of so many people working from home, we need to be aware of, and understand, how our home and business environments are interconnected.  This blending of work and home environments has opened up new vulnerabilities, and the second week focuses on things users and organizations can do to address the issues.

The third week goes into the importance of securing internet connected medical devices in Healthcare.  The Medical community has started to rely more and more on internet connected devices and solutions to raise the bar on patient care.  The introduction of telemedicine, digitized health records, wellness applications, and interconnected medical devices, has brought a range of improvements to efficiency and effectiveness.  But it’s also brought a range of new challenges and vulnerabilities that malicious actors are actively trying to exploit.  So, for the third week of Cybersecurity Awareness month, the focus is on what organizations and individuals can do to protect their own parts of this interconnected world.

The final week looks at the future of connected and interconnected devices.  It’s more than just the Internet of Things (IOT) that’s becoming more and more prevalent.  It looks at emerging technologies like 5G and how they will impact users and businesses experiences.  The increasing speed and bandwidth combined with more capability in smaller and smaller devices is already changing how people interact with the world and the infrastructure it runs on.  It’ll only continue to evolve, and the fourth week focuses on how we can all do our parts no matter what the future may hold.

Cybersecurity Awareness is something we all need to embrace.  For those of us in the cybersecurity world, the message is one we know well.  The more you know, the safer you are, and knowing is half the battle.  Having a month dedicated to cybersecurity might be just the ticket to helping our colleagues and friends in the real world come up to speed on the things they should know.  It’s a chance to make them part of the solution, rather than part of the attack surface.

It’ll take more than a month and a slogan.  But it’s a step in the right direction!

Craig Cooper, Chief Operating Officer, Gurucul, Inc.

Craig Cooper has served in several information security and risk management roles including CISO for a Fortune 500 Financial Services organization. While in this role, Craig defined and implemented an ISO standards-based Information Security program. Craig has led, developed, and delivered multiple Identity and Access Management Strategies and Roadmaps for several organizations. Craig has written for several trade magazines and has been a speaker with Burton Catalyst, Gartner, and ISSA.

 

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more
Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

September 4, 2026 | ITBriefcase.net Why it matters: ShinyHunters claimed responsibility for a breach of McKesson Corporation — the largest pharmaceutical distributor in North America, delivering approximately one-third of all prescription medicines to US hospitals,...

read more
Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

August 28, 2026 | ITBriefcase.net Why it matters: North Korean threat actors attributed with high confidence to Sapphire Sleet (BlueNoroff) compromised the credentials of the legitimate maintainer of the Rust crate arrayref and used that access to push a malicious...

read more