Cybersecurity Awareness Month is a global initiative reminding us that protecting our digital lives is a shared responsibility. Throughout October, University of Houston System will promote simple, practical steps that help faculty, staff and students stay safe online and protect university information from cyber threats.

 This year’s UHS Information Security Cybersecurity Awareness Month theme,  Small Habits. Big Results. Build Your Cyber Defense., highlights how everyday actions can strengthen our collective security. Research shows that habits form when simple, repeatable actions become part of our daily routines. The key is to start small, focus on one behavior, and practice it until it becomes second nature.

Throughout October, UHS Information Security will highlight five cyber habits to help protect against online threats:

1:  Phishing    Habit: Think before you click
 
2:  AI Safety and Deepfakes    Habit: Verify before you believe
 
3:  Data Security    Habit: Protect what’s personal.
 
4:  Incident Reporting    Habit: Beat the Breach. Report it. 
 
5:  Cyber Trick or Treat.   Habit: Spot the trick. Find the treat.

Spot subtle red flags, recognize social engineering tactics, and verify who is really sending a message.

Cybercriminals like to phish, but don’t take the bait.

Phishing is when cybercriminals use urgent or unexpected messages and social engineering tactics to manipulate our emotions and behavior. Their goal is to trick us into sharing sensitive information, clicking malicious links, or opening harmful attachments.

Recognize

Phishing signs can be subtle but knowing what to look for can help you avoid falling for an attack. Before replying to an email, clicking a link, or downloading an attachment, take a moment to make sure the message is legitimate.

Look for these common signs of phishing:

• Does it use urgent or alarming language?
• Does it request personal or financial information?
• Does it contain an offer that seems too good to be true?
• Does the sender’s email address match the company?
Watch for small misspellings, such as pavpal.com or anazon.com.

Small Habits Can Help Protect You

Hover First: Move your mouse over a link to preview the actual destination URL.
Go Direct: Instead of clicking a link in an alert email, open your browser and navigate to the official website yourself.

If something feels off, trust your instincts. Think before you click.
For more information visit - UHS Phishing

Outsmarting AI-powered impersonation, voice cloning, and generative scams. 

AI Is Making Phishing Harder to Detect

AI is changing the face of phishing, helping cybercriminals create more convincing, personalized scams that can be difficult to spot. 86% of phishing attacks were AI-driven.

Personalized Attacks

AI can analyze information from social media and other online sources to create highly targeted phishing messages that appear to be written just for you.

Better Writing

AI can generate polished, error-free messages that make phishing emails look more legitimate.

Voice and Video Tricks

AI can clone voices and create convincing videos to impersonate people you know. A call from a friend or family member asking for money may not be what it seems.

Small Habits Can Help Protect You

• Look for unusual phrasing, abrupt changes or inconsistent personal details.
• Enable multi-factor authentication (MFA) on your accounts.
• Use a password manager to create and store strong, unique passwords.
• Be cautious with links and attachments, even when they appear to come from someone you know.
• Verify requests for sensitive information through a separate, trusted channel.

AI can make scams look and sound real. Take a moment to pause, question and verify before you believe.
For more information visit - UHS Deepfake

Protecting data privacy, handling sensitive information safely, and using AI responsibly.

Keep It Safe. Keep It Secure.

Sensitive data in the wrong hands can put you and UHS at risk. Make it a habit to protect information—whether it’s digital, printed, or shared verbally.

Small Habits Can Help Protect You

Protect Your Passwords

Passwords help protect sensitive accounts and information. Keep them secure.
•  Never share your passwords with others.
•  Don’t reuse passwords across multiple accounts.
•  Use a password manager to create and securely store strong, unique passwords.

Know Who You’re Sharing With

Cybercriminals may simply ask for sensitive information while pretending to be someone you know.
•  Be cautious of unexpected requests for sensitive information.
•  Verify a person’s identity before sharing information.
•  When in doubt, stop and contact the person through a trusted method.

Handle Sensitive Data with Care

A single careless action can put you or UHS at risk.
•  Don’t discuss sensitive information where others can hear.
•  Don’t leave sensitive information unattended.
•  Lock your computer whenever you step away.

Know Your Data

Some information is meant to be shared, while other information requires greater protection. UHS uses data classifications to help determine how information should be handled and protected. Learn more about Level 1 data: UHS Level 1 Data

Sensitive data can end up in the wrong hands. Take a moment protect what’s personal.

Identify, escalate, and reporting suspicious activity without fear or blame. 

Reporting Phish Protects You and the UHS Community.

The   phish alert button in Outlook is one of our most valuable tools for protecting the UHS community. If you receive a suspicious email, don’t click links or open attachments. Report it using the phish alert button. The UHS Information Security team will analyze the message and take appropriate action, including removing similar threats and alerting the community when needed.

Small Habits Can Help Protect You

• When in doubt, report it. Even if you’re only slightly suspicious, use the phish alert button.

After analysis, UHS Information Security will send you an email explaining whether the message was malicious, spam, or safe, along with any actions taken or recommended. The email will also include the original message as an attachment.

Remember: Quick reporting can stop a small problem from becoming a big one.
Beat the breach. Report it.
Visit UHS Phishing

Staying alert to holiday shopping scams, verifying deals, using secure payment methods, and protecting your financial information.

Cyber Trick or Treat - Stay Alert to Shopping Scams

Holiday shopping brings plenty of great deals—and plenty of scams. Cybercriminals use fake discounts, fraudulent websites and other tricks to steal your money and financial information.

Fake Deals

Scammers create convincing emails, ads and websites offering deals that may be too good to be true. Verify the offer by visiting the retailer's official website directly.

Secure Payments

Use secure payment methods, such as credit cards or trusted services like PayPal, that offer buyer protection. Avoid wire transfers and prepaid gift cards.

Watch Your Accounts

Regularly check your bank and credit card statements for unauthorized or suspicious transactions, especially after making online purchases.

Small Habits Can Help Protect You

• Verify deals by going directly to the retailer's official website.
• Use secure payment methods that offer buyer protection.
• Avoid wire transfers and prepaid gift cards when making purchases.
• Check your bank and credit card statements for suspicious activity.
• Be cautious of unexpected shopping emails, ads and links.

Holiday shopping is ramping up. Shop smart, spot the trick and find the treat—while protecting your money and financial information.

For more information visit  - UHS Online Shopping

Whether you pause before clicking, verify before you believe, protect what’s personal, or report something suspicious, small actions can make a big difference. Start with one habit, make it part of your routine, and help build a stronger cyber defense for yourself and the University of Houston System.