Cybersecurity is for all year — not just October!
Publication date: October 31, 2024
October 2024 is the 21st Cybersecurity Awareness Month, and this year the theme is Secure Our World. EU Code Week takes place during Cybersecurity Awareness Month, and it’s a reminder that cybersecurity aligns perfectly with Code Week’s goals of fostering digital literacy and responsible coding practices.
This year Cybersecurity Awareness Month highlighted critical habits such as multi-factor authentication, strong passwords, timely software updates, and phishing vigilance. This period has been ideal for reflecting on cybersecurity’s integral role in digital projects. However, while October brings a well-needed focus on cybersecurity, maintaining vigilance beyond this month is crucial, as cybersecurity threats become more widespread and sophisticated.
The state of cybersecurity in 2024
The 2024 CrowdStrike Global Threat Report highlights an alarming rise in cyber attacks and the sophistication of adversaries. Over the past year, cloud intrusions have surged by 75%, while “cloud-conscious” cases rose 110%. CrowdStrike tracked 34 newly named adversaries, bringing the total to 232, illustrating the vast network of actors intent on exploiting vulnerabilities).
These threats illustrate the importance of continuous cybersecurity awareness. It’s not good enough to rely on outdated technology or assume that basic protocols will be enough. As the report details, hackers are increasingly using sophisticated, hands-on-keyboard tactics and identity-based attacks that bypass traditional security methods.
These interactive intrusions have reduced average “breakout times” to just 62 minutes, and the fastest recorded breakout time was just two minutes and seven seconds. This trend is proof that we urgently need year-round vigilance rather than just a single month of focus.
Key recent cybersecurity developments
- Cloud intrusion and identity threats: Cloud attacks are skyrocketing, mainly due to eCrime groups. In fact, 84% of cloud-related attacks were launched by these criminals, who often rely on phishing, access brokers, and stolen credentials to get access. They often use legitimate tools to disguise their attacks, so it’s hard for defenders to spot the difference between regular activity and a breach.
- AI-enhanced attacks: With generative AI, cybercriminals have it easier than ever. They’re using AI to supercharge phishing schemes, and even bypass multi-factor authentication, which means even less skilled attackers can launch complex attacks with ease.
- The myth of “good enough” security: As attackers get stealthier with malware-free tactics, organisations are realising that a “good enough” approach to security just doesn’t work anymore. Staying ahead now requires proactive, real-time threat hunting and automated defences.
Code Week’s role in cybersecurity awareness
During this year’s Code Week — and in activities throughout the year — participants gain essential skills for building digital solutions — and also for safeguarding them. It’s a time to incorporate cybersecurity principles from the ground up, helping future coders and developers understand that every line of code and every app feature could be a potential entry point for cyber threats.
A call for year-round cyber vigilance
Cybersecurity is more than just an October initiative — it is a crucial responsibility across all sectors. Whether you’re a student building your first project or a seasoned developer, it’s essential to consider cybersecurity principles in everything you do. Cybersecurity Awareness Month is a powerful reminder, but it’s time to value cybersecurity as an essential, year-long commitment.
