A Massive Thank You
I firstly want to give a massive thanks to the 620 people who completed the survey that was sent out across my network about a month ago. The response was much greater than I imagined and produced some fascinating data about the current thoughts on cybersecurity held by people in a personal capacity, not a work capacity.
After that quick note, let’s dive into what we actually learned from the data.
Sources Of Information
Our survey revealed that people get their cybersecurity information from a variety of places: school, friends, the workplace, news sites, and even social media. While it’s good that awareness is growing, the quality of that advice varies greatly. Unfortunately, some sources create confusion or panic while trying to make the next great headline.
Take headlines about devices like the “OMG cable“ as an example – a modified USB tool used by ethical hackers and security professionals in penetration testing. It’s niche, expensive, and not something the average person is ever likely to encounter. Yet stories about such tools can make people fear rare scenarios while ignoring the basics that really matter.
Real Risk vs. Media Hype
Over 60% of survey participants rated their concern about cybersecurity as 6 out of 10 or higher.
However, most reported their actual experience with threats came from phishing attempts — fraudulent messages pretending to be from trusted sources.
This tells us something important:
Most people are worried, and rightly so, but the real threats are more everyday than elite hacking tools.
Phishing, weak passwords, and outdated software remain the biggest risks — and fortunately, simple steps (like strong passwords, regular updates, and MFA) can stop most ordinary attacks.
Cybersecurity shouldn’t feel like a game of whack-a-mole. Just taking small actions can vastly improve your digital hygiene — we’ll look at how next.
What are the solutions then?
The survey results highlight a great base of awareness among participants regarding cybersecurity fundamentals. Many respondents understand the importance of strong passwords, regular software updates, and the use of Multi-Factor Authentication (MFA).
However, there’s a noticeable gap between this awareness and consistent real-world implementation. For example, while a significant number of respondents understand the importance of strong passwords, only a portion regularly update them or use unique passwords for different accounts.
This gap isn’t due to negligence—it’s often because:
- Managing multiple accounts and passwords feels overwhelming
- People assume they need something more high-tech to stay safe
- There’s a misconception that basic security measures are insufficient against sophisticated cyber threats
In reality, it’s these fundamental practices—like using strong, unique passwords and enabling MFA—that offer great protection against common cyberattacks.
It’s important to be realistic: the steps outlined here won’t stop every cyberattack. It’s quite likely that your data has already been part of a breach somewhere online, through no fault of your own. But what these measures do is reduce the damage. They make it harder for attackers to gain access to your accounts—and if they do, they limit how far the damage can spread.
Think of it like the safety features in a car:
Wearing a seatbelt or having airbags doesn’t prevent car accidents from happening, but it does significantly reduce the harm if one occurs.
You probably don’t get into a car or bus worried about the risks, because you trust that the basic protections are in place. According to the survey, a majority of people are concerned about cyber protection. Cybersecurity works much the same way. These aren’t extreme measures; they’re just the digital equivalent of buckling up.
The Basics That Make a The Difference
1. Strengthen Your Passwords
A good number of participants believed strong passwords should include capital letters, numbers, and symbols.
That can help, but the UK’s NCSC recommends using three random words instead.
Example:
RedPantsTree4!is better thanP@$$w0rd1
Avoid using pet names or birthdays.
Despite strong password knowledge, over 71% of respondents reuse passwords — making one hacked account a gateway to many.
2. Implement Multi-Factor Authentication (MFA)
MFA is widely recognised by respondents, but adoption varies.
It adds a second layer of verification, like a code sent to your phone, making it much harder for attackers, even if they guess or steal your password.
3. Keep Your Software Updated
Updates fix known vulnerabilities – delays give cybercriminals a window to exploit them.
Make sure your devices and apps are always up to date.
4. Be Vigilant Against Phishing Attempts
Over 80% of participants reported seeing suspicious or fake-looking emails/messages.
Even if you feel confident spotting them, always:
- Pause before clicking
- Check sender details
- Be wary of urgency
Try tools like the Google Phishing Quiz to test your skills safely.
5. Educate Yourself
67% of respondents said they’d like to learn more about cybersecurity.
This is an evolving field — the more you know, the better you can protect yourself.
Stick to reputable sources like the NCSC for up-to-date, trustworthy advice.
So, Where Do We Go From Here?
This is just the beginning.
We’re planning to launch a monthly cybersecurity newsletter, written for everyday users.
No jargon. Just clear, useful advice for your digital wellbeing.
Our aim?
To reduce the stress and fear around IT, not just educate.
Cybersecurity shouldn’t just be for “IT nerds” — it should be a normal conversation topic. The more we talk about it at home, work, or school, the better we all become at staying safe.
What to Expect Next
Future issues will include:
- Explaining online safety to children
- Understanding public Wi-Fi risks
- Spotting common scams and phishing emails
- Highlighting threats and how to respond
We also want to hear from you: your questions, concerns, and suggestions.
Cybersecurity is a shared responsibility. When you enable MFA or update an old password, you’re protecting your entire digital circle.
Want to hear more? Sign up here.
Final Thoughts
Let’s keep this conversation going.
Let’s normalise cyber safety.
It’s not optional anymore —
But it doesn’t have to be complicated either.
This is your space to learn, engage, and stay secure