---
title: What are the lessons of Cybersecurity Awareness Month?
description: This year's Cybersecurity Awareness Month theme, “Don’t make it easy for them,” asks us to look beyond today’s cyber risks by building good habits into our everyday routines. Practicing those habits consistently can make life harder for cybercriminals.
canonical_url: https://www.acronis.com/en/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/
locale: en
last_updated: 2026-10-27
---

[Acronis Blog](https://www.acronis.com/en/blog/)
# What are the lessons of Cybersecurity Awareness Month?

This year's Cybersecurity Awareness Month theme, “Don’t make it easy for them,” asks us to look beyond today’s cyber risks by building good habits into our everyday routines. Practicing those habits consistently can make life harder for cybercriminals.

[Try Now](https://www.acronis.com/en/products/cloud/trial/)

[![Image 2: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png)](https://www.acronis.com/en/blog/authors/lee-pender/ "Lee Pender")

[Lee Pender,](https://www.acronis.com/en/blog/authors/lee-pender/)Senior Content Marketing Manager

4 min read

Last updated 20 October 2026

Other languages available:[Español](https://www.acronis.com/es/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/)  
[Français](https://www.acronis.com/fr/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/)  
[日本語](https://www.acronis.com/ja/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/)

This year's National Cybersecurity Alliance[Cybersecurity Awareness Month theme](https://www.staysafeonline.org/cybersecurity-awareness-month), “Don’t make it easy for them,” asks us to look beyond today’s cyber risks by building good habits into our everyday routines. Practicing those habits consistently can make life harder for cybercriminals.

While technology continues to transform how we work and communicate, one thing remains unchanged: S trong cybersecurity starts with people. The theme is also a reminder that cybersecurity is not just about responding to today's attacks. It's about building preventive habits, awareness and resilience that can stand the test of time.

## Has Cybersecurity Awareness Month actually done any good?

For more than 20 years, Cybersecurity Awareness Month has aimed to do exactly that by educating individuals and organizations on how to recognize threats and reduce risk. But as cybercriminals adopt new tactics, technologies and increasingly AI-powered attacks, an important question remains: Has all of this awareness actually changed behavior and improved security outcomes?

## Progress in cybersecurity awareness

BBC news [featured a quote from Sam Altman](https://www.bbc.com/news/articles/cqx2zpj4y525o), CEO of OpenAI in the fall of 2026 that summed up the questionable value of awareness in the age of AI saying,"It doesn't take as much imagination as it used to for [us] to imagine how this could go wrong.” He added, “I think the world is right to be afraid of this."

Those concerns are understandable. As AI makes phishing, impersonation and social engineering attacks more convincing and scalable, it can seem as though cybercriminals have gained the upper hand. But before concluding that awareness efforts have lost their value, it's worth examining whether users are actually better prepared than they were in the past.

In terms of knowledge, users are more aware than before. The [Acronis Data Privacy Report 2025](https://www.acronis.com/en/resource-center/resource/data-privacy-in-2025-survey/) found that two-thirds of consumers (68%) say they use strong, unique passwords, and 46% have adopted two-factor authentication (2FA). That’s a notable improvement compared to 2019, when Pew Research found that only about a quarter of adults in the U.S.[could even identify an example of 2FA](https://www.pewresearch.org/internet/2019/10/09/americans-and-digital-knowledge/?utm_source=chatgpt.com).

![Image 3: What are the lessons of Cybersecurity Awareness Month?](https://staticfiles.acronis.com/images/content/c78accca6493ca460b96950378eccf34.png)

Meanwhile, managed service providers (MSPs) remain a major target. According to the [Acronis Cyberthreats Report H2 2025](https://www.acronis.com/en/resource-center/resource/acronis-cyberthreats-report-h2-2025/), phishing was the leading entry point for attacks on MSPs, accounting for 52% of incidents. Email-based attacks also increased year over year by 16% per organization and 20% per user.

Attackers are also expanding beyond email. Advanced attacks on collaboration platforms rose from 12% in 2024 to 31% in 2025, signaling a shift toward high-impact secondary channels. At the same time, cybercriminals are using AI to scale proven tactics such as phishing, social engineering and ransomware rather than invent entirely new attack methods.

## But bad habits remain

Still, both cybersecurity awarenes s and cybersecurity behavior have a long way to go.

For example, the Acronis survey on data privacy found that 30% of consumers still find security tools too hard to use, and 35% don’t back up data regularl y. Users under 35, despite being digitally savvy, reported more data breaches than those aged 55–64.

Pass words also remain a sticking point. According to an information security researcher at [Cybernews](https://cybernews.com/security/password-leak-study-unveils-2025-trends-reused-and-lazy/), only 6% of pass words are unique, leaving users with non-unique pass words vulnerable to dictionary attacks(pass word cracking). Security hangs in the balance of two-factor authentication —and only if its enabled. R euse the same few passwords everywhere and t hose shortcuts undo much of the progress made in awareness.

## From awareness to culture

The 2026 theme, "Don't make it easy for them" is a reminder that the habits we build today will shape the world's digital resilience for generations. That makes password shortcuts more than a personal risk and they undermine much of the progress made through cybersecurity awareness efforts. People may understand that passwords should be long, unique and difficult to guess, but when they reuse short or familiar passwords for convenience, they leave accounts exposed to credential stuffing, dictionary attacks and password cracking. If cybersecurity awareness is meant to help protect the businesses, communities and critical infrastructure we will rely on for years to come, then strong password habits cannot remain optional. Awareness only strengthens security when it becomes consistent behavior.

## Staying safe in 2026

Findings from the Acronis Cyberthreats Report H2 2025 and Acronis Data Privacy Report 2025 show that security awareness remains imperative as cyberthreats evolve and risky behaviors persist. Cybersecurity Awareness Month and this year's theme “Don't make it easy for them” initiative reinforce the critical role that informed, security-conscious people play in defending the businesses, communities and critical infrastructure the world will rely on for generations.

[Acronis Security Awareness Training](https://www.acronis.com/en/products/cloud/cyber-protect/security-awareness-training/) helps organizations turn that need into action through engaging, bite-sized lessons and realistic phishing simulations focused on modern threats, including AI-powered phishing and social engineering. By making training practical, current and easier to manage, organizations can reduce security fatigue and build the everyday habits CISA recommends, such as recognizing phishing, using strong passwords, enabling multifactor authentication and keeping software updated.

The [Acronis Cyber Platform](https://www.acronis.com/) supports service providers and businesses in keeping with the "Don't make it easy for them" theme. Pre paring people to make safer decisions today helps organizations protect the businesses, communities and critical infrastructure in the future. Combined with effective security technology and a culture that reinforces safe behavior, continuous training can turn awareness into long-term cyber resilience.

[Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/)  
[Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/)  
[MSP cybersecurity](https://www.acronis.com/en/blog/tags/msp-cybersecurity/)

## Written by

![Image 4: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png)

Lee Pender

Senior Content Marketing Manager

Lee was a journalist in the technology industry for 15 years, writing for and managing publications that served both IT and partner audiences. His experience as a corporate content creator includes tenures with an MSP and a provider of tax-compliance services. He writes about a variety of topics for Acronis, including cybersecurity trends, MSP management, emerging technologies and product updates.

[Previous post](https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/)  
[Microsoft AI Security for SMBs: Purview Coverage Explained](https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/)

[Next post](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-cloud-earns-maximum-score-in-av-test-advanced-threat-protection-test/)  
[Acronis Cyber Platform earns maximum score in AV-TEST Advanced Threat Protection test](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-cloud-earns-maximum-score-in-av-test-advanced-threat-protection-test/)

About Acronis

Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland.

[Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com)

## Related stories

Want to learn more? Read the latest stories featuring this solution on our blog.

[Acronis Blog](https://www.acronis.com/en/blog/)

![Image 5: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png)

[stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/)

We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain.

**October 26, 2026**3 min read

![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png)

[Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/)

Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity.

**October 13, 2026**6 min read

![Image 7: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png)

[Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/)

Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform.

**October 05, 2026**4 min read