Breadcrumb
Cybersecurity Awareness Month 2026: Recognize. Pause. Report.
October is Cybersecurity Awareness Month at Cal Poly Humboldt. Throughout the month, Information Technology Services (ITS) will share practical tips, training, events, and activities to help students, faculty, and staff recognize cybersecurity threats and protect their accounts.
Cybersecurity is something everyone can help with. Simple habits, such as pausing before responding to an unexpected message, verifying unusual requests, and quickly reporting suspicious email, can help protect you and the campus community.
What to Watch For
This year’s Cybersecurity Awareness Month focuses on real-world scams and threats affecting higher education, including:
- Phishing and suspicious email
- Social engineering and impersonation
- Gift card and payment scams
- Fake login pages
- Unexpected MFA and Duo prompts
- AI-enabled scams
- Account compromise
Each week in October will focus on practical steps you can take to recognize and respond to these threats.
Cybersecurity Events
Join ITS for in-person activities and demonstrations throughout Cybersecurity Awareness Month.
Monday, October 12, 10:00 a.m.–1:00 p.m.
The J Dining Facility
Stop by for interactive “Spot the Fake” AI challenges and mini cybersecurity trivia. Test your ability to identify suspicious messages, scams, fake content, and other cybersecurity warning signs.
Tuesday, October 13, 11:00 a.m.–2:00 p.m.
Upper Quad, Safety Fair
Visit ITS at the Safety Fair for cybersecurity information and activities focused on protecting yourself and your accounts.
Thursday, October 15, 11:30 a.m.–12:30 p.m.
Library, Room 209
Join ITS for a cybersecurity presentation and live demonstrations exploring common threats and techniques used by scammers.
Weekly Cybersecurity Topics
Week 1: October 1–4
Recognize and Report Phishing
We’re kicking off Cybersecurity Awareness Month by focusing on one of the most important cybersecurity habits: reporting suspicious email.
Learn how to recognize potential phishing messages, how to report them, what happens after you submit a report, and why reporting quickly matters.
During October, the campus will also participate in a simulated phishing activity designed to provide practice recognizing and reporting suspicious messages.
Remember: If an email looks suspicious, reporting it is the right thing to do.
Week 2: October 5–11
Recognize Social Engineering and Scams
Cyberattacks do not always begin with sophisticated technology. Often, scammers simply try to convince someone to do something they normally wouldn't.
Learn to recognize common manipulation tactics involving urgency, authority, secrecy, fear, or an unexpected offer of help.
We'll look at examples such as gift card scams, fake requests from executives or supervisors, and urgent payment requests. When a request seems unusual, pause and verify it through a trusted channel before acting.
Week 3: October 12–18
Protect Your Account and Spot the Fake
This week focuses on protecting your Humboldt account from credential theft and other attempts to gain access to your information.
Fake login pages can look surprisingly convincing. Be cautious about entering your credentials after following an unexpected link, and never approve an MFA or Duo prompt you did not initiate.
We'll also explore how AI can make fake content and scams harder to recognize. Join us at our in-person events to practice spotting warning signs and learn more about protecting your accounts.
Week 4: October 19–25
Put Your Phishing Skills into Practice
Knowing the warning signs is helpful. Recognizing them when a suspicious message arrives in your inbox takes practice.
As part of Cybersecurity Awareness Month, Humboldt will conduct a simulated phishing campaign. The exercise gives the campus community an opportunity to practice recognizing and reporting suspicious email in a safe environment.
If you interact with the simulated message, you'll receive educational information to help you recognize similar warning signs in the future.
The goal isn't to catch people making mistakes. It's to build the habit of recognizing, pausing, and reporting when something doesn't look right.
Week 5: October 26–31
Keep Cybersecurity Going
Cybersecurity Awareness Month may be ending, but good cybersecurity habits matter throughout the year.
Continue to pause when something seems unusual, verify unexpected requests, protect your credentials, and report suspicious messages.
Remember three simple steps:
Recognize. Pause. Report.
Every report can help protect students, faculty, staff, and university systems.
Help Shape Future Cybersecurity Training
During Cybersecurity Awareness Month, Cal Poly Humboldt will also conduct a cybersecurity culture assessment using Qualtrics.
Students, faculty, and staff will have an opportunity to share feedback about cybersecurity awareness and practices. The results will help inform future ZenGuide training, communications, and cybersecurity awareness activities.
Cybersecurity Is a Shared Responsibility
You don't need to be a cybersecurity expert to make a difference. Before responding to an unexpected email, login request, MFA prompt, or other message:
- Pause before you act.
- Look for signs that something may not be legitimate.
- Be cautious with unexpected requests for money, credentials, or personal information.
- Verify unusual requests through a trusted channel.
- Report suspicious messages quickly.
Watch this page throughout October for Cybersecurity Awareness Month activities, training, and updates.