Cybersecurity’s ‘Black October’ highlights steps to stay safer online

A series of cyberattacks and AI-assisted vulnerability discoveries is putting renewed pressure on technology providers and their customers, according to Cointelegraph’s examination of what it calls cybersecurity’s “Black October.” For ordinary internet users, the practical response centers on protecting accounts and devices rather than trying to anticipate every new threat.

Experts interviewed by the publication describe a widening gap between discovering software weaknesses and repairing them. AI can help identify problems, but providers still must develop fixes, test them and deploy them across affected systems. Faster discovery therefore does not necessarily translate into faster protection.

The report also highlights the consequences of dependence on shared digital infrastructure. A weakness at one provider can affect organizations and customers beyond its immediate systems. Personal precautions can limit exposure, but they cannot substitute for security work by the companies operating those services.

Account protection is one area where users can act directly. Guidance from the US Cybersecurity and Infrastructure Security Agency recommends strong, unique passwords and a password manager, alongside multifactor authentication. Using a different password for every account helps avoid making one stolen credential useful across multiple services.

The type of authentication matters, too. CISA’s guidance on protecting personal accounts identifies physical security keys and passkeys as phishing-resistant options offering the greatest protection. Its broader authentication guidance cautions that some other methods remain vulnerable to phishing and other attacks, so enabling an additional login step should not be treated as a guarantee against compromise.

Suspicious messages require a separate layer of caution. CISA advises users not to follow links in emails, chats or social-media account alerts, but instead to visit the service directly to check whether an alert is legitimate. That approach avoids relying on the appearance of the message as proof that the sender can be trusted.

Keeping operating systems and applications updated is another central recommendation. CISA advises installing fixes promptly and enabling automatic updates, while also keeping devices’ built-in antivirus and anti-malware protections switched on. These measures address known weaknesses on personal hardware even while providers handle problems elsewhere in their systems.

Cointelegraph’s report also recommends reducing unnecessary connections by removing unused applications and reviewing old third-party permissions. For cryptocurrency users, experts interviewed by the publication distinguish funds needed for everyday transactions from longer-term holdings and emphasize examining wallet approvals before signing. Those choices manage exposure rather than eliminate the risks of custody or malicious transactions.

The next challenge is whether providers can turn newly discovered weaknesses into deployed fixes quickly enough. Users can strengthen their own defenses in the meantime, but responsibility remains divided: individuals control their passwords, authentication and devices, while platforms remain responsible for securing the infrastructure customers depend on.