Topics Related to Cybersecurity Awareness

Scammers are using legitimate hotel booking details to craft targeted phishing attacks and have targeted customers of at least 350 hotels and vacation rentals in 50 countries, WIRED magazine reports.  

This week's focus for Internet Safety Month is strengthening privacy and security by reviewing device settings, limiting data sharing, enabling stronger security features, and keeping devices and apps updated.
Learn more about protecting your personal information

Over the next year, North Carolina will host, support, or be connected to several major sporting, entertainment, civic, and international events. These events bring tremendous opportunity and visibility to our state, but they also increase cybersecurity risk because of the volume of people, transactions, vendors, digital systems, and public attention. 

To stay safe online, you should enable multifactor authentication, create strong, unique passwords and use a password manager.
Join our Secure Your Square Challenge and take simple steps to strengthen your online safety all month long! Each week we'll be highlighting tips from the card on social media, and we invite you to play along with us.

Voice phishing – or vishing – overtook email-based phishing a top initial intrusion vector in 2025, according to a new report from cybersecurity consulting firm Mandiant.

Vishing is live and interactive, giving the attacker more control over the social engineering tactics.

“While email phishing often relies on volume and opportunistic delivery, interactive methods involve a live person steering the conversation in real-time,” Mandiant says.

State employees involved in business continuity are invited to join webinars during Business Continuity Resilience and Awareness Week, hosted online by the global Business Continuity Institute on May 18-22. 

These webinars are designed for anyone with a role in ensuring their organization's ability to continue functioning in the face of potential disruptions, including:

As travel season picks up – whether for personal trips, conferences, or official business – it’s important to follow a few key precautions to protect state systems and the people we serve.

Even brief tasks while you’re away, like checking email or reviewing a document, can introduce risk if you’re not using the right safeguards.

North Carolina has introduced a statewide policy that guides how executive branch employees may use publicly available generative AI tools such as Microsoft Copilot, ChatGPT, Google Gemini, and Anthropic Claude.

The Use of Publicly Available Generative AI Policy provides a safe, consistent framework that helps employees use AI responsibly while protecting sensitive information and maintaining public trust.