Cybersecurity is often associated with firewalls, software updates, and technical controls. While those remain important, today's cyber threats increasingly target something much more difficult to defend: trust.
Artificial intelligence is accelerating both innovation and deception. Criminals can now generate convincing phishing emails in seconds, clone voices, create realistic deepfake videos, and impersonate trusted individuals with remarkable accuracy. At the same time, fraudsters continue to exploit human emotions through scams designed to create urgency, fear, curiosity, or excitement.
The reality is simple: anyone can become a target.
That is why Cybersecurity Awareness Month is not just an IT initiative. It is an opportunity for all of us to better understand the risks we face and the role each of us plays in protecting our community.
Throughout October, we will explore some of the most relevant cybersecurity challenges facing individuals and organizations today. We will examine how artificial intelligence is changing the threat landscape through deepfakes, voice cloning, impersonation scams, and increasingly sophisticated phishing attacks. We will look at the growing prevalence of social engineering, from online marketplace scams and fraudulent job offers to QR code and text message scams that exploit trust rather than technology. We will also share practical guidance to strengthen personal cybersecurity, including password hygiene,
multi-factor authentication, privacy protection, social media security, and safer digital habits.
Finally, we will discuss what to do when something doesn't seem right, including how to report suspicious activity, what happens after a report is made, and why timely reporting remains one of the most effective defences against cyber threats. Throughout the month, additional resources, stories, tips, and discussions will be shared through University of Ottawa Information Technology channels and LinkedIn.
Cybersecurity is often viewed as a technology problem, but in reality, it's powered by human decisions. While attackers continue to evolve their tools and techniques, they ultimately rely on a familiar tactic: convincing someone to trust what should not be trusted. Whether it is an email, a text message, a phone call, a social media post, or even a video that appears authentic, the ability to pause, think critically, and verify information remains one of the most effective defences available to us.
Technology will continue to evolve. So will the threats we face.
What must remain constant is our commitment to fostering a culture where cybersecurity is understood, discussed, and practised by everyone. Security is not solely the responsibility of a cybersecurity team; it is a collective effort that helps protect our teaching, research, community, and reputation.
As cybersecurity professionals, we often talk about technology, controls, and risk. But cybersecurity is ultimately about people. Every member of our community plays a role in protecting our university, whether that means questioning an unusual request, reporting suspicious activity, or adopting secure habits in daily life. My hope is that Cybersecurity Awareness Month helps demystify cybersecurity, encourages meaningful conversations, and provides practical knowledge that people can apply both at the University of Ottawa and at home.
Cybersecurity is not about fear. It is about resilience, informed decision-making, and working together to protect what matters most.
- Sylvain Hupé, Chief Information Security Officer