Being Cyber Safe in 2025

January 1, 2025 FS-ISAC

Being Cyber Safe in 2025
5:16
FS-ISAC logo for December Newsletter on Being Cyber Safe in 2025

Security is everyone’s responsibility, but that doesn’t mean you must have several cybersecurity degrees to protect your personal and financial assets. In this issue, we list some easy ways to reduce your risk and be cyber safe in 2025.

Here's What You Can Do:


Turn on Multifactor Authentication. Your accounts are significantly less likely to get hacked if they’re protected with MultiFactor Authentication (MFA). When you enable MFA in your online services (like email), you must provide a combination of two or more authenticators to verify your identity before the service grants you access. For example:

  1. Something you know such as a personal identification number (PIN), or password
  2. Something you have such as an authentication application or a confirmation text on your phone
  3. Something you are such as a fingerprint or facial scan).
This layered approach to securing data and applications prevents unauthorized access to targeted physical spaces, computing devices, networks, or databases.

Update Your Software. Bad actors exploit flaws in computer systems, and while network defenders are working hard to fix them quickly, their work relies on all of us updating our software with their latest fixes. So update the operating system on your mobile phones, tablets, and laptops. And update your applications – especially the web browsers – on all your devices too.  Schedule automatic updates for all devices, applications, and operating systems. You may be too busy to install every update, but your electronic devices won’t be if you activate automatic update settings.

Think Before You Click. Take a little time before you click a link or open an attachment. More than 90% of successful cyber-attacks start with a phishing email. Sadly, we are more likely to fall for phishing than we think — and false urgency and fake link tactics are often the cause.

False urgency. An email from your gas company says your service will be canceled unless you re-enter your card details right now. Or maybe your phone provider says you’ve been hacked and need to contact them ASAP. But should you? Slow down, and don’t be alarmed about that urgent email. Carefully look at the subject line or preview the content of the email. If the email provides the name of the business and asks for a response, locate their contact information elsewhere, such as their website, and use it to see if there is a situation and if it's really that urgent.

Fake links. Have you ever seen a link in a text or email that looks a little … off? Sure, it looks like something you’ve seen before and the sender is familiar – maybe your email service, your boss, your bank, or a friend. But when you click the link, you’re asked to change or enter a password or verify personal information. Don’t. It’s likely a phishing scheme using a link or webpage that looks legitimate but was designed by bad actors to install malware on your machine or to steal your password, social security number, credit card number, or other sensitive information. Once they have that information, they can use it on legitimate sites. If you don't recognize a link, trust your instincts and think before you click. 

Use Strong Passwords. Did you know the most common password is “password”? Followed by “123456”? Your child’s name and birthday aren’t much better. Using an easy password is like locking your door but hanging the key on the doorknob. Anyone can get in. Using strong passwords and, ideally, a password manager is much safer. 

Here are some tips for creating a stronger password:
  • Make it long – at least 16 characters
  • Don’t use the same password on multiple sites
  • Use randomly generated passwords created by a computer or password manager. They’re better than humans at being random. 

You can use a password manager to store all of your passwords, and that way you don’t have to remember them all! If you go this route, make sure the password you use for the password manager is strong and memorable, and secure your account with MFA! 

What to Do If You Are Scammed

  • If you feel that an email contains a scam, don’t respond and block the sender.
  • If it’s a phone call – hang up! 

If you provide your personal information (account, date of birth, online banking user ID, password, etc.) contact your financial institution immediately.

If You're a Victim?

Immediately change any passwords you might have revealed. Consider reporting the attack to IC3.gov and the police and file a report with the Federal Trade Commission.

Getting Help

If you identify suspicious activity involving your financial institution, contact them immediately.


©FS-ISAC, Inc. | All Rights Reserved

Reprinted with permission. The views, information, or opinions expressed in this article are solely those of the author and do not necessarily represent the views of Citizens State Bank and its affiliates, and Citizens State Bank is not responsible for and does not verify the accuracy of any information contained in this article or items hyperlinked within. This is for informational purposes and is no way intended to provide legal advice.

Share This: