Phishing and Social Engineering
This type of attack uses fraudulent emails to trick users into revealing sensitive information.
What is phishing?
AI-generated content that imitates a person's voice or appearance.
What is a deepfake?
This security method requires a second form of verification in addition to a password.
What is Multi-Factor Authentication (MFA)?
If you receive a suspicious email
this is the first action you should take.
This cybersecurity awareness month is observed every October to promote online safety.
What is Cybersecurity Awareness Month?
DAILY DOUBLE! Attackers use this technique when they pretend to be a trusted individual, company, or authority figure.
What is impersonation?
This technology can create realistic images videos and audio that never actually existed.
What is generative AI?
This type of password consists of several random words combined together.
What is a passphrase?
This information should be included when reporting a suspected phishing email.
What are the sender details and suspicious message content?
This term describes software designed to damage disrupt or gain unauthorized access to systems.
What is malware?
DAILY DOUBLE! This attack specifically targets high-profile individuals such as executives or senior managers.
What is whaling?
This warning sign may indicate that a video or audio recording has been manipulated using AI.
What are unnatural movements voice inconsistencies or visual artifacts?
This cryptographic process converts readable data into an unreadable format to protect it.
What is encryption?
This principle encourages employees to report security concerns immediately even if they are unsure it is an incident.
What is when in doubt report it?
In cyber defense, this practice follows the idea of granting only the minimum access required for a user to perform their job.
What is the Principle of Least Privilege?
This phishing technique tricks victims into scanning a malicious QR code.
What is quishing?
DAILY DOUBLE! This verification method helps confirm a message or request is legitimate before taking action.
What is out-of-band verification?
This attack uses leaked username and password combinations from previous breaches to access accounts.
What is credential stuffing?
After accidentally clicking a suspicious link employees should immediately do this.
What is report the incident and disconnect if instructed?
This type of attack locks files and demands payment for their release.
What is ransomware?
This form of social engineering uses urgency fear or authority to pressure victims into acting quickly.
What is psychological manipulation?
This emerging threat uses synthetic audio to impersonate executives and request payments or sensitive information.
What is an AI voice cloning scam?
DAILY DOUBLE! This computational attack systematically tries many password combinations until the correct one is found.
What is a brute force attack?
This critical piece of information can help investigators determine the scope and timeline of a security incident.
What is the date and time the activity was observed?
According to security best practices, this is the most valuable asset every employee helps protect.
What is organizational data?