Master Sword and Shield: Cyber 101
This process scrambles data so only someone with the right key can read it, protecting it even if a device is lost or stolen.
What is encryption?
Typos and awkward, clunky wording, often from a translation tool, are this classic phishing red flag.
What are bad grammar and misspellings?
This is the most restrictive subject tag, because the email can’t be sent outside CaseWorthy.
What is “Internal”?
Longer than a password but easier to remember, this string of several words is a stronger way to secure your accounts.
What is a passphrase?
This practice means a person always checks AI-generated output before it's trusted, sent, or acted on.
What is human review (human-in-the-loop)?
This basic attack is named for casting a wide net into the ocean, since the attacker doesn’t know exactly who will bite.
What is phishing?
This is the button you should click if you suspect an email is suspicious or a positive phishing attempt.
What is the Phish Alert Button (PAB)?
These file types pose a severe risk because they can run code on your computer and should rarely be sent as email attachments.
What are Executable files? (.exe, .bat, .cmd, and .msi)
Installing updates for your software, OS, and apps as soon as they arrive is called this, and it fixes holes before attackers use them.
What is patching?
This is referred to as the trail of sensitive information you unintentionally leave behind in the digital cloud.
What is the data shadow?
If an attacker steals these after you’ve logged in, they can skip the password and act as you on the website.
What are session cookies?
This is the stress reaction that cuts blood flow to higher thinking, and is why social engineering attacks work on us.
What is the fight-or-flight response?
This is a verification step you can take to confirm the email you received actually came from the sender address that is marked on the email.
What is out of band communication? (ex: if you received the message as an email reach out to them via text or teams)
Rather than breaking the technology, this approach tricks, pressures, or persuades people into helping the attacker.
What is social engineering?
This is what happens when AI is tricked into generating harmful content, such as phishing templates or malicious code, that it would normally refuse to write.
What is weaponization?
Like a castle wall with guarded gates, this security tool watches network traffic and blocks connections that aren’t allowed.
What is a firewall?
“Dear Valued Customer” from a bank that knows your full name is an example of this phishing red flag.
What is a generic greeting?
This is an email authentication method that uses public-key cryptography to verify that an email message was sent by an authorized owner of a domain, and was not altered in transit.
What is Domain Keys Identified Mail (DKIM)?
Pressing Windows + L does this, and should be done every time you leave your desk, even briefly.
What is locking your computer?
This is what happens when AI invents facts, citations, or legal precedents.
What are hallucinations?
DAILY DOUBLE!
DAILY DOUBLE!
Even without proof, this is the single best action to take when something about a message or request feels off.
What is reporting it to Cybersecurity?
A banner reading this word warns you that an email came from outside the company, so you should take a closer look.
What is “External”?
When you’re traveling and aren’t sure a Wi-Fi network is safe, connect through this from your own phone instead.
What is a cellular (mobile) hotspot?
Threat actors use AI to create these fake voice and video impersonations, which can copy a person’s tone, accent, and emotion. Sometimes it results in multiple extra fingers!
What are Deepfakes?