Day 25: Check Before Scanning QR Codes “Scan with care, don’t feed scammers 👀” QR codes make everyday tasks easier, from viewing menus to paying for parking. But cybercriminals can replace legitimate codes with malicious ones that lead to fake websites designed to steal your personal or financial information. Imagine this: You park your car and scan a QR code on a parking sign to pay. The website looks convincing, but the code has been replaced with a fake one designed to steal your card details. You could end up paying a scammer instead of the parking operator. Quick tip: Preview the web address before opening it. Check that the domain matches the official site. Look for signs of tampering, and verify payment instructions through an official website or app if anything seems suspicious. What steps can help verify whether a QR code leads to a legitimate website?

Day 24: Encrypt Sensitive Data on Your Devices “Encryption is the secret ingredient to protecting your data 👀” Locking your device is important, but what happens if it’s lost or stolen? Sensitive documents, financial records and personal files could be at risk if someone finds a way to access your device storage. Imagine this: Your laptop is stolen from your bag. It has a login password, but that alone may not protect its stored data from every attempt to access it. Full-disk encryption helps keep your files unreadable without the appropriate key. Quick tip: Check your device security settings and enable supported encryption features, such as BitLocker on Windows or FileVault on Mac. Keep your recovery key somewhere secure and back up important data. Is a strong password enough to protect your files?

Day 23: Respond Quickly to Account Compromise “A quick response is a healthy Cybersecurity habit 👀” Unusual login alerts, unexpected password resets or changes to your account settings could be warning signs that someone has gained unauthorised access. Ignoring them could give an attacker more time to take control. Imagine this: You receive a notification that your account’s recovery phone number has been changed, but you ignore it. Later, you discover you can no longer sign in because someone has changed your password. Quick tip: If you notice unfamiliar logins or unexpected account changes, access the official website or app, change your password from a trusted device, review recovery details, sign out unfamiliar sessions and enable MFA. What unusual account activity would make you suspect someone else had gained access?

Day 22: Disable Automatic File Downloads in Messaging Apps “Don’t let unknown files land on your plate automatically 👀” Every day, we receive pictures, videos, documents, and other files through messaging applications. While many of these files are harmless, some may contain malicious content or come from untrusted sources. When automatic downloads are enabled, certain files may be saved to your device without you deliberately choosing to download them Imagine receiving an unexpected attachment in a messaging group, labelled as an important document. Although you don't recognise the sender, the file downloads automatically because of your app settings. While downloading a file does not necessarily mean your device is infected, opening malicious attachments can create security risks. Quick Tip: Disable automatic file downloads where supported, verify unfamiliar senders, and avoid opening unexpected files. What other steps can help reduce the risks of automatic file downloads in messaging apps?

Day 21: Close Accounts You No Longer Use “Time to clear out those digital leftovers 👀” Forgotten online accounts can still hold personal information, saved payment details and outdated passwords, creating opportunities for cybercriminals if they're compromised. Imagine this: You signed up for a food delivery service while travelling but never used it again. Your account still contains sensitive information. If someone gains access, that information could be misused. Quick tip: Review your online accounts regularly and close those you no longer need. Save any important information first, use the official deletion process, and check whether the account is linked to other services. Question: How can closing unused accounts help reduce an individual's digital risk?

Day 20: Enable Remote Find, Lock, and Wipe Features “Lost your device? Don’t let your data become someone else’s meal 👀” What happens when your phone or laptop goes missing? A lost or stolen device can put your personal information, work files and saved accounts at risk. Imagine this: You realise your laptop is missing after an event. It contains sensitive documents and private information. If remote security features were enabled beforehand, you may be able to locate or lock it remotely, and, if necessary, erase the data. Quick tip: Enable your device’s built-in finding and remote-locking features in advance. Know how to use them, keep important data backed up, and check whether remote erasure is available. What steps can be taken to secure sensitive information on a lost or stolen device?

Day 19: Verify Suspicious Videos Before Sharing “Keep fake content off the menu 👀” Videos can spread across social media in seconds, but not everything you see is genuine. Edited footage, misleading clips and AI-generated deepfakes can deceive viewers and help cybercriminals spread scams. Imagine receiving a video that appears to show your boss instructing you to urgently transfer money from the company's account to a particular bank account. The video looks convincing, and the voice sounds exactly like your boss. However, it could be an AI-generated deepfake designed to trick you into making an unauthorised transaction. Quick Tip: Check the original source, look for confirmation from trusted sources, and independently verify urgent requests through a separate, trusted communication channel. What signs might make you question the authenticity of a video?

Day 17: Download Software only from trusted sources “Check the ingredients before you install 👀” Downloading software is part of everyday life, whether it's an app, a work tool or a system update. A program that looks legitimate isn't always safe. Cybercriminals can disguise malicious software as genuine applications to steal information, spy on activity or damage your device. Imagine this: You search online for a useful application and click a download link that looks genuine. Unknown to you, the installer contains malware that could compromise your device and personal information. Quick tip: Download software from official developer websites or reputable app stores. Check the publisher, review requested permissions, and avoid cracked software or unfamiliar download links. Never ignore security warnings just to complete an installation. How can you tell whether a software download is legitimate?

Day 16: Secure Access to Your Devices “Lock your device before someone takes a bite of your data 👀” Your phone and laptop hold a lot of valuable information, from private messages and banking apps to emails and sensitive documents. What if someone gained access without your permission? Imagine this: You leave your laptop unattended without locking the screen. Someone could access your emails, private files or confidential information. Quick tip: Use a strong password, enable additional authentication where available, and set your device to lock automatically after a short period of inactivity. Always lock your screen before stepping away. Remember: A few seconds to lock your device can help protect a lot of valuable information. What are the potential consequences of inadequate device access controls?

Behind every opportunity that changes a life, there are people who give their time, energy, and commitment to make it possible ❤️ Today, I want to spotlight the amazing team that supported this year’s mentorship application and selection process. From planning and coordination to application reviews, interviews, and final selections, each of you played a valuable role in supporting this process. I’m grateful for your dedication, patience, and willingness to go the extra mile. Because of your contribution, another cohort of aspiring cybersecurity professionals now have an opportunity to learn, grow, build confidence, and take meaningful steps towards their goals. Today, this spotlight is for YOU @AyobamiTo @NaphisaYakubu @lady_sheraz @An_gelos_07 @Ololademiasake_ @adow_bea ✨ “Alone we can do so little, together we can do so much” 💪

Day 15: Keep Sensitive Information Away From Prying Eyes “Don’t serve your sensitive information on a silver platter 👀” Not every security threat happens online. Sometimes, someone only needs a quick glance at your screen to see information you would rather keep private. This is known as shoulder surfing, and it can happen in public places such as buses, cafés, offices, or waiting areas. Imagine entering your password while standing in a queue, unaware that someone behind you can see your screen. A few seconds of exposure could reveal sensitive information. Always pay attention to your surroundings, shield your screen when entering passwords or PINs, and avoid viewing confidential information where others can easily see it. Quick tip: Use a privacy screen. Consider a privacy filter to limit what people beside you can see. What steps can people take to keep sensitive information private when working in public places?

Day 14: Keep Account Recovery Information Secure and Up to Date “Stale recovery details? That’s a recipe for account trouble 👀” Securing your online accounts goes beyond creating strong passwords and enabling multi-factor authentication. Your account recovery information also deserves attention because it helps you regain access when something goes wrong. If those details are outdated or compromised, recovering your account could become more difficult. Think about an old email address you no longer use but still have linked to several important accounts. If someone else gains access to that email, they may be able to intercept password reset messages. Review your recovery email addresses and phone numbers regularly, remove details you no longer control, and store your backup recovery codes securely. Quick Tip: Keep it fresh. Regularly check that your recovery email address and phone number are current and still under your control. What are some common mistakes people make when setting up their account recovery options?

Day 13: Verify Websites Before You Trust Them “Spot the fake before it’s on your plate 👀” Not every website is what it claims to be. Cybercriminals can create fake websites that look legitimate to trick people into sharing passwords, payment details, or other sensitive information. Just because a website looks professional doesn't mean it is safe to trust. Imagine coming across a website offering an opportunity that seems too good to miss. The design looks professional, the reviews seem convincing, and nothing appears suspicious. Before you sign up or provide any personal information, take a moment to check the website address, research the organisation, and verify its legitimacy through trusted sources. Quick Tip: A convincing appearance doesn't always mean a website is trustworthy. What red flags should people look out for when visiting websites?

Hello Cyber friends, Your password is your first line of defence online✨ Make it long, unique, and hard to guess. Avoid personal details, never reuse passwords across accounts, and consider using a password manager to keep them secure. Remember: One account, one unique password 💪

Day 12: Protect Your Personal Information Online “Think before you share, don’t put your personal data on the menu 👀” Social media makes sharing easy, but details like your home address, phone number and travel plans can help cybercriminals impersonate you or create scams. Imagine this: You post a picture of your boarding pass before a holiday, without hiding the barcode or booking details. Cybercriminals could use this information to access your personal information or tamper with your itinerary. Quick tip: Never post your personal information online. Anything posted in the public domain is for public consumption. You cannot determine how it will be used. Question: What security risks are associated with oversharing personal information online?

Hello, Cyber friends ❤️ If you didn’t receive a love letter from me yesterday, please don’t question your abilities or doubt your potential. I don’t have the capacity to mentor so many people at once. There are many ways to grow in cybersecurity. Join cybersecurity communities, connect with like-minded people, learn from others, and build meaningful professional relationships. While my mentorship is great, it’s not the only path to a successful cybersecurity career. There are other structured learning opportunities, communities, and resources that can help you grow and thrive in this field. Your growth is not limited by one person’s capacity to mentor you. If there are other ways I can support, you can reach out to me. Rooting for your success ✨

Day 11 – Check Before Autofilling Sensitive Information “Don't let convenience become a cyber calorie overload 👀” Autofill is convenient. It saves you from repeatedly typing passwords, addresses, and payment details. But convenience shouldn't come at the expense of security. Some malicious websites can exploit browser autofill behaviour to collect information entered into hidden or deceptive form fields. If sensitive details are filled in without your awareness, you could expose more information than you intended. Imagine visiting a website that looks legitimate. You allow your browser to autofill your details, unaware that the page contains hidden fields designed to collect information. A simple click could expose data you never meant to share. So, before letting your browser do the work, check the website, review what gets filled in, and think before submitting. Quick tip: Review your autofill settings, disable automatic filling of sensitive information where appropriate, and use a trusted password manager that helps prevent credentials from being filled into the wrong website. What types of personal information should you be most careful about autofilling?

Day 10: Verify the Caller, Not Just the Voice “Trust is healthy. Blind trust is junk food for Cybercriminals 👀” Would you question a phone call if the person speaking sounded exactly like someone you know? Many people might not, and that's what makes AI voice-cloning scams particularly concerning. Technology can now be used to create convincing imitations of real voices, making it harder to distinguish genuine callers from impersonators. Imagine receiving a call from someone who sounds exactly like your sibling, asking you to send money urgently because of an emergency. Everything sounds convincing, but the voice alone doesn't prove their identity. Before responding, hang up and call the person using a number you already trust. You can also confirm the situation through other reliable channels. How confident are you that you could recognise an AI-cloned voice?