How To Reduce Risk This Holiday Season

This advisory warns that the holiday season increases cyber risk—holiday-themed phishing, fake e-cards, shipping and payment scams, vendor-impersonation invoices, and risks from remote work/BYOD and public Wi‑Fi—and provides recommended controls including strong passwords/password managers, mandatory MFA, least-privilege access, centralized patching, advanced endpoint protection, continuous monitoring/SIEM, employee training and phishing simulations, vendor security assessments and segmentation, and tested incident response and backup plans.