Security Awareness Tip of The Day


Welcome to the SANS Tip of the Day site. Each day we post a new tip that focuses on and explains a specific topic and actionable steps people can take to protect themselves, their family and their organization. In addition, each tip is linked to a respective OUCH! newsletter so you can learn more about the topic, in over 20 languages. The Tip of the Day program is distributed under the Creative Commons BY-NC-ND 4.0 license. You are welcome to use these tips within your organization or share with family and friends, the only limitation is you cannot modify them and must reference the source. If you have any suggestions or ideas for new tips, please contact us at SSA-Community@sans.org.

Never Share Your Passwords November 26, 2021

Never share your passwords with others, including your supervisor or coworkers. Your password is a secret; it only works if only you know it. If anyone else knows your password, you may be responsible for their actions.

To learn more, check out this OUCH! newsletter.

Phone Call Attacks November 25, 2021

More and more scams and attacks are happening over the phone. Whenever you get an urgent phone call pressuring you to do something (such as a caller pretending to be the tax department or Microsoft Tech Support), be very suspicious. It's most likely a scammer trying to trick you out of money or pressure you into making a mistake. Protect yourself, simply hang up the phone or tell the person you can't help them. You are not being rude, the person on the other line is trying to take advantage of you.

To learn more, check out this OUCH! newsletter.


Kids and Mobile Devices November 24, 2021

If you have kids with mobile devices, create a central home charging station in your bedroom. Before the kids go to bed at night, have them put their mobile devices there so they are not tempted to play with them when they should be sleeping.

To learn more, check out this OUCH! newsletter.


Never Give Your Password Over the Phone November 23, 2021

Never give your password to someone over the phone. If someone calls you and asks for your password while saying they are from the Help Desk or Tech Support team, it is most likely an attacker attempting to gain access to your account.

To learn more, check out this OUCH! newsletter.


Search Yourself Online November 22, 2021

Ever wonder just how much information is publicly available about you? Ever wonder how cyber criminals harvest information and customize attacks for their victims? The technique is called Open Source Intelligence (OSINT) and it is far simpler and more powerful than you think.

To learn more, check out this OUCH! newsletter.

Tip of the Day Team

The Tip of the Day program is developed through a rigorous process involving numerous volunteers. These tips would not be possible without the hard work of the people below.

Advisory Board

  • Allison Hickman
  • Andrew Richter
  • Janet Roberts
  • Karen McDowell
  • Mariano M. Del Rio
  • Rhonda Kelly
  • Michael Sands
  • Ed Yuwono
  • Stephanye Schuyler
  • Mark Ryan del Mroal Talabis
  • Thomas McMahon
  • Vaman Amarjeet