---
title: "Cyber Security Awareness Month: Why Attackers Still Target the Basics"
description: Learn key cyber security practices for your organisation during Cyber Security Awareness Month. Protect against basic vulnerabilities with expert tips.
image: https://blog.grantmcgregor.co.uk/hubfs/Cyber-Security-Awareness-Month.png
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Cyber Security
# Cyber Security Awareness Month: Why Attackers Still Target the Basics
Grant McGregor Team
2 October 2026 • 4 min read
Cyber threats never stand still. AI is now helping attackers move faster, target more businesses and make their attempts more convincing. But the gaps they rely on are often the same: weak passwords, missed updates, unnecessary access and unsecured devices.
For Cyber Security Awareness Month, we're turning the focus back to the security basics that are easy to overlook.
Here are six areas worth checking across your organisation, now and throughout the year.
### **1. The account without enough protection**
A password may be long and difficult to guess, but it can still be stolen through phishing or exposed in a data breach. If you use the same password across several accounts, one stolen password could put all of them at risk.
That's why multi-factor authentication (MFA) is so important. Even if someone has your password, they still need another form of verification to sign in.
Never approve an MFA request you weren't expecting. It could mean someone already has your password and is trying to access the account.
Quick check: Does every account that supports MFA have it enabled, and does every account have a unique password?
### **2. When software falls behind**
Software updates do more than add new features. They also fix security weaknesses that attackers could use.
Keep the laptops, phones, browsers and applications your team uses up to date. If technology is no longer supported, it stops receiving security fixes and should be upgraded or replaced.
Quick check: Are updates being installed and is any unsupported technology still in use?
### **3. Who still has access?**
When someone joins your organisation, they are given access to the files, systems and cloud services needed for their role. If they change roles or leave, their access needs to change too.
Otherwise, they may keep access to information or systems they no longer need. If their account is compromised, that gives an attacker more opportunities to reach your organisation's information.
Quick check: Does everyone's access still match their current role?
### **4. When an urgent request cannot wait**
A junior member of your team receives an email that looks as though it has come from a senior colleague. It asks for a payment to be made that day, mentions a supplier your organisation works with, and fits with work already underway.
The pressure to act quickly is deliberate. Pausing gives you time to question the request and verify it through another route.
AI can make the deception more convincing by drawing on familiar names, natural language and information available online.
Security Awareness Training helps your team recognise these tactics, pause before acting and know how to respond.
Quick check: Would your team recognise the warning signs and feel confident questioning an urgent request?
### **5. Are your work devices properly managed?**
Personal phones, tablets and laptops are often used to access work emails, files and cloud services. If these devices haven't been approved or properly secured, company information could be exposed.
Make sure every device used for work has the right security settings and can be locked or wiped remotely if it is lost or stolen.
Quick check: Do you know which devices are being used to access your company information?
### **Your Cyber Security Awareness Month checklist**
Cyber attackers will continue to change their tactics, but the security basics still make a real difference. Reviewing these areas regularly can help you find gaps early and reduce the opportunities attackers have to get in.
How well are the basics covered across your organisation? Start with this checklist:
- Use unique passwords and MFA across important accounts
- Keep devices and applications updated
- Identify and replace unsupported technology
- Make sure access still reflects each person's current role
- Encourage your team to question unusual or urgent requests
- Check that work devices can be locked or wiped remotely
### **Build stronger security foundations with Cyber Essentials**
Cyber Essentials is the UK Government's recommended minimum standard for cyber security.
It brings together five protective measures covering your internet connection, devices, software, user access and malware protection.
Working through the certification helps you find and address security gaps across your organisation.
It also shows customers and suppliers that important protections are in place and that you take cyber security seriously.
With a certified Cyber Advisor and a team of Cyber Essentials Assessors, we can help you understand the requirements and prepare for certification or renewal.
### Ready to get started? Talk to our Cyber Essentials team.
Call us: 0131 603 7910
Message us: [https://www.grantmcgregor.co.uk/contact-us](https://www.grantmcgregor.co.uk/contact-us)
[](https://cta-redirect.hubspot.com/cta/redirect/6138324/ee2a578f-e4c7-437c-bcdc-7f04f9d1e161)
Grant McGregor Team
2 October 2026 • 4 min read
## Recent Posts
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2026-10-02T16:05:15.556Z",
"datePublished" : "2026-10-02T16:05:05.000Z",
"headline" : "Cyber Security Awareness Month: Why Attackers Still Target the Basics",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/Cyber-Security-Awareness-Month.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/cyber-security-awareness-month",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor team"
},
"dateModified" : "2026-10-01",
"datePublished" : "2026-10-01",
"headline" : "Cyber Security Awareness Month: Why Attackers Still Target the Basics",
"image" : {
"@type" : "ImageObject",
"height" : 1050,
"url" : "https://info.grantmcgregor.co.uk/hubfs/Cyber%20security%20Awareness%20Month.png",
"width" : 1800
},
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/cyber-security-awareness-month",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://info.grantmcgregor.co.uk/hubfs/GM-logo-399.png"
},
"name" : "Grant McGregor"
},
"url" : "https://blog.grantmcgregor.co.uk/cyber-security-awareness-month"
}
```