Skip to main content
Sanne van Opstal-Brakel
Employee
Employee
October 1, 2026

🎃 October at TOPdesk Community: Cyber Security Awareness Month (and a little Halloween fun)

Cyber Security image, a safe

October is Cyber Security Awareness Month, and this year's theme , set by the National Cybersecurity Alliance, is "Don't Make It Easy for Them."

The theme comes down to four habits, the Core 4: strong passwords, multi-factor authentication, recognizing and reporting scams, and keeping your software up to date. Nothing fancy, just the stuff that actually works.

Don't take my word for it: Verizon's 2026 Data Breach Investigations Report looked at over 22,000 breaches worldwide and found that exploiting unpatched software is now the #1 way attackers get in, even ahead of stolen credentials, which still show up in 39% of breaches. So yeah, worth ten minutes of your month.

Here's what's coming your way this month:

  • A post on each Core 4 habit
  • A running "Horror Stories from the Helpdesk" thread — because we've all got one 😉
  • A Core 4 self-check later this month, just to see where you stand
  • And more...

Let's start easy: how many of the Core 4 habits have you already got covered?

3 replies

NickB
Explorer ⭐⭐⭐⭐⭐
October 1, 2026

Just clocked the CIS Security Standards for MCP Servers have recently been published - hopefully people find them useful

As for the core habits - rolling out phishing resistant passkeys (bye passwords and welcome stronger MFA)

Reporting phishing and suspect email - got it covered by policy; just doing more awareness - https://learn.microsoft.com/en-us/defender-office-365/submissions-outlook-report-messages but dont forget teams too - https://learn.microsoft.com/en-us/defender-office-365/submissions-teams and we roll out training via a 3rd party training tool called metacompliance but like everyone else we still get people clicking ‘that’ link.

As for vulnerability management; its a crazy time with the Ai empowered patch wave sweeping all software across our estate (and the rest of the world). We’ve been packaging and deploying left, right and center and utilising auto updates to give capacity back through native or intune enterprise app catalogs apps.

We’ve also recently passed Cyber Security Essentials Plus for our LATCo (arms length organisation) which was no simple task

Translate
All Round IT Nice Guy + "Guardian of Good Enough"
Sanne van Opstal-Brakel
Employee
Employee
October 2, 2026

Nice thanks for sharing ​@NickB  especially with the MCP coming up. 

We have similar training internally as well and I will say I enjoy it as well as the ‘fake’ scam emails IT sends to test out our knowledge and if we can recognize them… untill now I always can :P 

Translate
Sanne van Opstal-Brakel, your TOPdesk Community Fairy Godmother
NickB
Explorer ⭐⭐⭐⭐⭐
October 2, 2026

were looking to setup a deepfake with our COO (with his permission of course) - that’ll be fun!

Translate
All Round IT Nice Guy + "Guardian of Good Enough"