October is Cybersecurity Awareness Month, and the conversation has changed. The biggest risks to most businesses don’t come from advanced hacking. They come from ordinary moments: a quick reply, a shared login, a setting nobody got round to switching on.
This month we’re looking at where those moments happen and what you can do about them.
When “Looks Legit” Isn’t Enough
We used to tell people to look out for spelling mistakes and strange email addresses. That advice doesn’t go very far anymore.
AI now lets scammers write messages that sound exactly like your supplier, your finance team or your MD. They can mention real projects, copy the way people write, and send it all at the moment you’re most likely to be rushing.
The scams also don’t stay in your inbox. They now come by text, phone call, and even as QR codes on posters or deliveries.
Our advice: don’t go by how a message looks. Go by what it’s asking for. If it wants money, passwords or urgent action, confirm it another way. Pick up the phone or message the person directly. A 30-second check can stop a very expensive mistake.
The Risk at the Next Desk
Most security incidents don’t involve a villain. They involve good people taking shortcuts:
- A colleague shares a password to “save time”
- Someone pastes client data into a free AI tool to tidy up a report
- An old contractor’s account is still active months after they’ve left
- A work file ends up on a personal laptop
None of these feel risky at the time, and that’s exactly why they’re dangerous.
Our advice: give people access to what they need and nothing more. Review permissions every few months, and agree clear rules on which AI tools are approved for work.
Your Five-Minute Security Check
You don’t need a big budget to make a real difference. Ask your team these questions this week:
- Is MFA on everywhere it should be? Email, banking, payroll and cloud storage come first.
- Who still has access, and should they? Close any accounts you no longer need.
- How many people have admin rights? It’s probably more than you think.
- Are updates automatic? Out-of-date software is one of the easiest ways in for attackers.
- When did you last test a backup? A backup you’ve never restored from is just a hope.
If any answer makes you pause, that’s where to start.
Culture Beats Technology
The best security tools can’t help much if people are afraid to say “I think I clicked something.” Businesses that recover quickly are the ones where reporting a mistake is encouraged, not punished. Make it easy for people to speak up, and celebrate it when they do.
Want a second pair of eyes on your setup?
The EVAD team can walk you through a quick review of your security, access and backups. Just reply to this email or get in touch to book a chat.
