WEBVTT 00:00:02.179 --> 00:00:04.280 Welcome back to the show. I'm your host, Mr. 00:00:04.400 --> 00:00:07.019 Jason. Today, we're talking about a topic that 00:00:07.019 --> 00:00:09.519 impacts every single one of us the moment we 00:00:09.519 --> 00:00:13.199 pick up a phone or log into a computer. Cybersecurity 00:00:13.199 --> 00:00:16.500 basics that every student or person needs to 00:00:16.500 --> 00:00:19.399 master. Joining me today are Junior and Rini. 00:00:19.539 --> 00:00:22.300 Welcome to the studio, guys. Thanks, Mr. Jason. 00:00:22.420 --> 00:00:24.500 Honestly, whenever people talk about cybersecurity, 00:00:24.660 --> 00:00:26.719 it sounds like something that came straight out 00:00:26.719 --> 00:00:28.600 of the Matrix. Something that I wouldn't even 00:00:28.600 --> 00:00:31.219 know where to begin. And the more I look at my 00:00:31.219 --> 00:00:33.219 own habits, the more I realize how much we rely 00:00:33.219 --> 00:00:36.719 on the internet. Same here. Most of us just want 00:00:36.719 --> 00:00:39.280 to jump onto our social apps, open our school 00:00:39.280 --> 00:00:41.939 assignments, or log into games as fast as possible. 00:00:42.560 --> 00:00:44.859 Pausing to think about account security usually 00:00:44.859 --> 00:00:47.640 feels like an unnecessary delay, but I know we 00:00:47.640 --> 00:00:50.090 need to take it more seriously. All right. To 00:00:50.090 --> 00:00:52.369 set the tone for our discussion, our quote of 00:00:52.369 --> 00:00:54.850 the day comes from security analyst discussions 00:00:54.850 --> 00:00:58.189 highlighted in recent credential security research 00:00:58.189 --> 00:01:02.229 on Bright Defense. The quote says, your password 00:01:02.229 --> 00:01:05.750 isn't inconvenient security. It's the only thing 00:01:05.750 --> 00:01:09.109 standing between your data and a stranger. Huh. 00:01:09.310 --> 00:01:11.269 That quote makes total sense when you think about 00:01:11.269 --> 00:01:13.810 it. I think we have all been frustrated when... 00:01:14.040 --> 00:01:16.359 app ask us to change a password or request a 00:01:16.359 --> 00:01:18.560 login code, but that simple friction is there 00:01:18.560 --> 00:01:21.540 to protect you from strangers. It really changes 00:01:21.540 --> 00:01:24.420 how you look at protection. When you view a password 00:01:24.420 --> 00:01:26.859 as a shield rather than a barrier, you start 00:01:26.859 --> 00:01:30.420 to see why weak choices put us at risk. Exactly, 00:01:30.420 --> 00:01:33.680 and to show how widespread this issue is, let's 00:01:33.680 --> 00:01:36.500 look at the numbers. According to this landmark 00:01:36.500 --> 00:01:40.120 study analyzing 19 billion leaked passwords, 00:01:40.920 --> 00:01:43.620 compiled by CyberNews and published by Bright 00:01:43.620 --> 00:01:48.000 Defense, 94 % of analyzed passwords were reused 00:01:48.000 --> 00:01:51.319 or duplicated across multiple accounts. On top 00:01:51.319 --> 00:01:54.620 of that, the 2026 Cleaver CyberSecure report 00:01:54.620 --> 00:01:57.879 found that 52 % of United States school districts 00:01:57.879 --> 00:02:01.420 experienced a cybersecurity incident in 2025. 00:02:02.439 --> 00:02:06.739 94 % reuse is ridiculous. That means almost everyone 00:02:06.739 --> 00:02:09.099 is using the exact same password for their email, 00:02:09.259 --> 00:02:11.560 their school portal, and random shopping apps. 00:02:11.819 --> 00:02:14.659 So let's explore that, Junior. Why do you think 00:02:14.659 --> 00:02:17.060 so many students fall into the trap of using 00:02:17.060 --> 00:02:20.180 one single password for every service they sign 00:02:20.180 --> 00:02:22.699 up for? Convenience is the main reason. Between 00:02:22.699 --> 00:02:25.240 school accounts, personal emails, streaming platforms, 00:02:25.520 --> 00:02:27.939 and gaming profiles, the average student has 00:02:27.939 --> 00:02:31.240 dozens of logins to track. Remembering 30 unique 00:02:31.240 --> 00:02:33.780 passwords is impractical without a reliable system. 00:02:33.979 --> 00:02:36.400 So people pick one phrase they memorized in middle 00:02:36.400 --> 00:02:39.189 school and keep it for life. What makes that 00:02:39.189 --> 00:02:41.930 habit so dangerous is credential stuffing. When 00:02:41.930 --> 00:02:44.610 a minor website suffers a data breach, hackers 00:02:44.610 --> 00:02:47.169 take those compromised email and password combinations 00:02:47.169 --> 00:02:50.330 and run automated software against high -value 00:02:50.330 --> 00:02:53.250 targets like school portals, personal bank apps, 00:02:53.430 --> 00:02:56.210 and cloud drives. If you use the same password, 00:02:56.370 --> 00:02:58.930 that minor site breach gives them access to your 00:02:58.930 --> 00:03:01.930 entire identity. Yeah, that brings up another 00:03:01.930 --> 00:03:04.990 important question for us to examine. Rini, when 00:03:04.990 --> 00:03:08.300 you consider how attackers operate today, What 00:03:08.300 --> 00:03:11.099 makes long passphrases so much more effective 00:03:11.099 --> 00:03:14.800 than short, complex passwords? It comes down 00:03:14.800 --> 00:03:18.520 to basic math and computational power. A short 00:03:18.520 --> 00:03:24.000 password like capital P at SS1 might look secure 00:03:24.000 --> 00:03:26.819 because it uses special characters, but automated 00:03:26.819 --> 00:03:29.120 cracking tools can cycle through short character 00:03:29.120 --> 00:03:32.879 combinations in seconds. A passphrase made of 00:03:32.879 --> 00:03:35.669 four random words like purple turtle jumps high, 00:03:35.830 --> 00:03:38.849 exclamation mark, creates an exponential number 00:03:38.849 --> 00:03:41.870 of possible combinations. It gives you incredible 00:03:41.870 --> 00:03:46.810 length, which is what actually stops cracking 00:03:46.810 --> 00:03:49.569 software while remaining easy for a human to 00:03:49.569 --> 00:03:52.349 remember. Yeah, that's a great point. What are 00:03:52.349 --> 00:03:55.009 some of the other core habits that can stop the 00:03:55.009 --> 00:03:57.409 vast majority of cyber attacks before they ever 00:03:57.409 --> 00:04:00.849 gain traction? Enabling multi -factor authentication, 00:04:01.009 --> 00:04:04.789 or MFA, whenever it is available. Even if a stranger 00:04:04.789 --> 00:04:07.789 gets a hold of your password, MFA uses a second 00:04:07.789 --> 00:04:09.590 verification step through your mobile device 00:04:09.590 --> 00:04:12.270 or through an authenticator app. That single 00:04:12.270 --> 00:04:14.430 setting can be the only thing that prevents hackers 00:04:14.430 --> 00:04:18.449 from accessing your personal info. Another essential 00:04:18.449 --> 00:04:21.410 habit is keeping your operating systems and applications 00:04:21.410 --> 00:04:24.810 updated promptly. Security patches fix known 00:04:24.810 --> 00:04:27.350 software vulnerabilities that attackers actively 00:04:27.350 --> 00:04:30.310 exploit. Postponing an update for weeks leaves 00:04:30.310 --> 00:04:32.930 a known front door wide open on your device. 00:04:33.610 --> 00:04:36.029 So how do you think our daily online choices 00:04:36.029 --> 00:04:39.170 change once we realize that our personal data 00:04:39.170 --> 00:04:42.670 and school accounts are interconnected? You start 00:04:42.670 --> 00:04:44.529 to notice how much information you broadcast 00:04:44.529 --> 00:04:47.290 without thinking. You become far more cautious 00:04:47.290 --> 00:04:49.490 about where you log in and what permissions you 00:04:49.490 --> 00:04:52.529 hand over to third -party applications. You also 00:04:52.529 --> 00:04:55.750 start treating your devices with more care. Walking 00:04:55.750 --> 00:04:57.569 your screen when you walk away in the library 00:04:57.569 --> 00:05:00.529 or avoiding sketchy download links becomes automatic 00:05:00.529 --> 00:05:03.230 once you understand what is at stake. Yeah, I 00:05:03.230 --> 00:05:05.370 like that. That's a solid foundation for part 00:05:05.370 --> 00:05:07.670 one. We need to take a quick break, and then 00:05:07.670 --> 00:05:09.470 when we come back, we'll keep our discussion 00:05:09.470 --> 00:05:12.670 going and present you with the top 10 cybersecurity 00:05:12.670 --> 00:05:21.149 mistakes almost everyone makes. Attention, everybody. 00:05:21.430 --> 00:05:24.269 Are you still using simple passwords or reusing 00:05:24.269 --> 00:05:26.470 the same login phrase across your personal and 00:05:26.470 --> 00:05:29.189 professional accounts? It's time for a security 00:05:29.189 --> 00:05:32.100 refresh. we need to be reminded that strong cybersecurity 00:05:32.100 --> 00:05:35.379 starts with you. Always use unique passphrases 00:05:35.379 --> 00:05:37.420 for your accounts, never share your credentials 00:05:37.420 --> 00:05:39.540 with other people, and make sure multi -factor 00:05:39.540 --> 00:05:42.399 authentication is active on your logins. If you 00:05:42.399 --> 00:05:44.459 suspect an email in your inbox is a phishing 00:05:44.459 --> 00:05:46.560 attempt, or if you need help setting up a secure 00:05:46.560 --> 00:05:49.139 password manager, Google it. There's a lot of 00:05:49.139 --> 00:05:51.199 good information out there. Keep your accounts 00:05:51.199 --> 00:05:53.079 locked down and protect your digital identity 00:05:53.079 --> 00:05:59.189 today. Welcome back. In part one, we covered 00:05:59.189 --> 00:06:02.430 foundational habits like passphrases and multi 00:06:02.430 --> 00:06:05.509 -factor authentication. Now, before we dive into 00:06:05.509 --> 00:06:07.850 our top 10 list of common security mistakes, 00:06:08.129 --> 00:06:10.709 let's talk about the digital footprint most students 00:06:10.709 --> 00:06:13.949 carry around without realizing it. Rini, when 00:06:13.949 --> 00:06:16.050 you consider how many accounts students sign 00:06:16.050 --> 00:06:18.910 up for over their school years, what happens 00:06:18.910 --> 00:06:21.689 to all those old profiles and services we stop 00:06:21.689 --> 00:06:24.800 using? That is a huge blind spot for a lot of 00:06:24.800 --> 00:06:27.240 people because most of us just abandon them. 00:06:27.540 --> 00:06:30.480 Think about all the random tools, gaming forums, 00:06:30.720 --> 00:06:33.240 or educational apps you signed up for years ago. 00:06:33.480 --> 00:06:36.480 You stop using the app, but your data, username, 00:06:36.819 --> 00:06:39.339 and old password remain stored on their servers 00:06:39.339 --> 00:06:42.360 indefinitely. If one of those forgotten websites 00:06:42.360 --> 00:06:45.180 suffers a breach years later, your old information 00:06:45.180 --> 00:06:48.529 is still exposed. That's a good point. That legacy 00:06:48.529 --> 00:06:51.850 data is a real risk. Junior, how do app permissions 00:06:51.850 --> 00:06:55.370 factor into this when students download new software 00:06:55.370 --> 00:06:58.610 onto their phones or tablets? Most people tap 00:06:58.610 --> 00:07:01.709 accept on every permission pop -up just to open 00:07:01.709 --> 00:07:04.990 the app as fast as possible. I know I have. But 00:07:04.990 --> 00:07:06.990 that means when you end up with a simple mobile 00:07:06.990 --> 00:07:09.509 game or some random apps running in the background 00:07:09.509 --> 00:07:12.389 with access to your location, photos, or contact 00:07:12.389 --> 00:07:15.189 lists when they do not actually need them. Managing 00:07:15.189 --> 00:07:17.689 app permissions? Updating software and deleting 00:07:17.689 --> 00:07:20.629 software you no longer use is a simple way to 00:07:20.629 --> 00:07:23.490 protect your privacy. Exactly. Keeping your digital 00:07:23.490 --> 00:07:27.089 space organized reduces your overall risk. Now 00:07:27.089 --> 00:07:29.389 let's walk through our curated list of the top 00:07:29.389 --> 00:07:32.410 10 cybersecurity mistakes almost everyone makes. 00:07:32.629 --> 00:07:35.430 We'll rotate through these 10 points together 00:07:35.430 --> 00:07:38.550 so our listeners know exactly what red flags 00:07:38.550 --> 00:07:42.290 to avoid. All right, item number one, reusing 00:07:42.290 --> 00:07:45.189 the same password across multiple websites and 00:07:45.189 --> 00:07:48.550 applications. Item number two, clicking on links 00:07:48.550 --> 00:07:50.649 or downloading attachments inside unexpected 00:07:50.649 --> 00:07:54.410 emails, text messages, or direct messages. Item 00:07:54.410 --> 00:07:57.480 number three. Repeatedly ignoring or postponing 00:07:57.480 --> 00:08:00.120 operating system updates and application security 00:08:00.120 --> 00:08:03.639 patches. Item number four, connecting to open, 00:08:03.779 --> 00:08:07.079 unencrypted public Wi -Fi networks without using 00:08:07.079 --> 00:08:11.199 a virtual private network or VPN. Item number 00:08:11.199 --> 00:08:14.240 five, writing down passwords in unencrypted notes 00:08:14.240 --> 00:08:17.199 apps, text files, or sticky notes attached to 00:08:17.199 --> 00:08:20.519 your desk. Item number six, leaving social media 00:08:20.519 --> 00:08:24.040 account profiles set to completely public, exposing 00:08:24.040 --> 00:08:27.279 personal details to anyone on the web. Item number 00:08:27.279 --> 00:08:29.939 seven, disabling multi -factor authentication 00:08:29.939 --> 00:08:33.000 options simply because the extra verification 00:08:33.000 --> 00:08:37.080 step feels inconvenient. Item number eight, downloading 00:08:37.080 --> 00:08:40.440 third -party apps, game mods, or browser extensions 00:08:40.440 --> 00:08:44.179 from unverified or unofficial sources. Item number 00:08:44.179 --> 00:08:47.710 nine. Answering casual social media survey prompts 00:08:47.710 --> 00:08:50.370 that ask for personal details like your first 00:08:50.370 --> 00:08:53.350 pet's name, childhood street, or favorite sports 00:08:53.350 --> 00:08:57.149 team. And finally, item number ten, failing to 00:08:57.149 --> 00:08:59.870 log out of shared computers in classrooms, computer 00:08:59.870 --> 00:09:02.850 labs, or public libraries when you finish your 00:09:02.850 --> 00:09:05.789 work. That list hits close to home. Item number 00:09:05.789 --> 00:09:08.750 nine is one that people overlook all the time. 00:09:08.850 --> 00:09:11.610 Those viral social media graphics asking people 00:09:11.610 --> 00:09:14.769 for their... favorite childhood teacher or street 00:09:14.769 --> 00:09:17.909 name are often designed specifically to gather 00:09:17.909 --> 00:09:20.970 answers to standard account recovery questions. 00:09:21.289 --> 00:09:24.110 Yeah, looking at this entire list, Rini, why 00:09:24.110 --> 00:09:26.789 do you think these small individual oversights 00:09:26.789 --> 00:09:29.909 tend to compound into major security issues over 00:09:29.909 --> 00:09:33.350 time? Because cyber attackers rarely rely on 00:09:33.350 --> 00:09:35.750 advanced matrix -style hacking to gain entry. 00:09:35.970 --> 00:09:38.409 They look for the easiest entry point available. 00:09:39.100 --> 00:09:42.000 If you combine an unpatched phone operating system 00:09:42.000 --> 00:09:44.700 with open public Wi -Fi and a reused password, 00:09:44.919 --> 00:09:48.220 you make an attacker's job effortless. Small 00:09:48.220 --> 00:09:50.639 oversights eliminate the defensive layers meant 00:09:50.639 --> 00:09:53.399 to protect you. That's a really good point. That 00:09:53.399 --> 00:09:56.159 brings us to an actionable question for everyone 00:09:56.159 --> 00:09:59.279 listening. Junior, what steps can a student take 00:09:59.279 --> 00:10:02.139 today to make these protective habits feel like 00:10:02.139 --> 00:10:05.649 second nature rather than a massive chore? Start 00:10:05.649 --> 00:10:08.190 small so you don't get overwhelmed. Pick your 00:10:08.190 --> 00:10:11.149 most critical account today, which is usually 00:10:11.149 --> 00:10:14.590 your primary email address or your school portal 00:10:14.590 --> 00:10:17.350 login. Update that one account with a strong 00:10:17.350 --> 00:10:20.909 multi -word passphrase and turn on two -factor 00:10:20.909 --> 00:10:23.950 authentication. Once that is locked down, download 00:10:23.950 --> 00:10:26.690 an encrypted password manager to help you generate 00:10:26.690 --> 00:10:29.289 and store unique passwords for your other accounts 00:10:29.289 --> 00:10:32.009 over time. You can also treat digital hygiene 00:10:32.009 --> 00:10:35.000 like a physical routine. Just as you lock your 00:10:35.000 --> 00:10:37.019 front door when you leave your house, make it 00:10:37.019 --> 00:10:39.080 a habit to press the lock key on your laptop 00:10:39.080 --> 00:10:41.139 whenever you step away from your library table. 00:10:41.639 --> 00:10:44.120 Small daily actions build long -term safety. 00:10:44.500 --> 00:10:46.899 Oh, those are fantastic insights. Thank you so 00:10:46.899 --> 00:10:50.159 much. Building good digital habits takes a little 00:10:50.159 --> 00:10:53.059 effort up front, but it saves you from massive 00:10:53.059 --> 00:10:55.519 headaches down the road. All right, now it's 00:10:55.519 --> 00:11:02.970 time for our headline news. Our first headline 00:11:02.970 --> 00:11:06.389 news comes from Clever's 2026 Cybersecurity Report 00:11:06.389 --> 00:11:09.690 titled, Cybersecurity Breaches Are the New Normal 00:11:09.690 --> 00:11:12.769 for K -12. According to survey findings across 00:11:12.769 --> 00:11:16.149 national school systems, 52 % of United States 00:11:16.149 --> 00:11:18.450 school districts experienced a major cybersecurity 00:11:18.450 --> 00:11:22.409 incident during the 2025 academic year. The report 00:11:22.409 --> 00:11:24.490 highlights that vendor -related breaches rose 00:11:24.490 --> 00:11:27.690 sharply to 32 % of incidents. This demonstrates 00:11:27.690 --> 00:11:30.230 how a security weakness in a single -used learning 00:11:30.230 --> 00:11:33.049 software platform can disrupt classroom operations 00:11:33.049 --> 00:11:35.389 and compromise student records across hundreds 00:11:35.389 --> 00:11:38.330 of districts at the same time. Our second headline 00:11:38.330 --> 00:11:41.570 news comes from ReSecurity, and it's titled, 00:11:41.870 --> 00:11:45.990 Cybercriminals Are Targeting EdTech. Data Breaches 00:11:45.990 --> 00:11:49.799 and Ransomware Attacks Are on the Rise. Shiny 00:11:49.799 --> 00:11:52.000 Hunters, a hacking group known for their cyber 00:11:52.000 --> 00:11:54.320 attacks on e -commerce and healthcare platforms, 00:11:54.580 --> 00:11:58.059 has reportedly stolen millions of user records 00:11:58.059 --> 00:12:01.620 containing student names, addresses, email IDs, 00:12:01.879 --> 00:12:04.539 and other personally identifiable information, 00:12:04.899 --> 00:12:09.539 or PII. In one case, they exposed the PII of 00:12:09.539 --> 00:12:12.340 over 4 million students and teachers on dark 00:12:12.340 --> 00:12:15.419 web marketplaces, putting millions at risk of 00:12:15.419 --> 00:12:19.389 identity theft and phishing attacks. EdTech companies 00:12:19.389 --> 00:12:22.389 have become a profitable target for cyber criminals 00:12:22.389 --> 00:12:25.590 due to significant amounts of sensitive data 00:12:25.590 --> 00:12:29.289 stored, including student records, faculty data, 00:12:29.409 --> 00:12:32.870 and payment information. In another incident, 00:12:33.129 --> 00:12:35.950 cyber extortion group FulcrumSec has claimed 00:12:35.950 --> 00:12:38.850 responsibility for a massive data theft from 00:12:38.850 --> 00:12:41.409 the Global Schools Foundation, an international 00:12:41.409 --> 00:12:44.669 network of educational institutions headquartered 00:12:44.669 --> 00:12:48.379 in Singapore. The stolen data includes many sensitive 00:12:48.379 --> 00:12:52.220 details. For example, more than 33 ,000 passport 00:12:52.220 --> 00:12:55.539 numbers of parents and children across 62 countries, 00:12:55.759 --> 00:12:59.539 more than 107 ,000 transport users with home 00:12:59.539 --> 00:13:03.919 addresses and GPS coordinates, and over 600 ,000 00:13:03.919 --> 00:13:06.539 email files including medical records, identity 00:13:06.539 --> 00:13:09.960 documents, and report cards. Fulcrum Sec has 00:13:09.960 --> 00:13:12.200 threatened to release the data on their leaked 00:13:12.200 --> 00:13:15.740 site if the ransom is not paid. This demonstrates 00:13:15.740 --> 00:13:19.600 a double extortion tactic that has become increasingly 00:13:19.600 --> 00:13:22.840 common among cyber criminals. Our third headline 00:13:22.840 --> 00:13:25.860 comes from National University, titled Cybersecurity 00:13:25.860 --> 00:13:29.139 2026, Key Threats and Skills to Counter Them. 00:13:29.320 --> 00:13:31.659 Criminals are using AI and machine learning to 00:13:31.659 --> 00:13:34.220 enhance the speed, scale, and sophistication 00:13:34.220 --> 00:13:37.120 of cyber threats. The latest AI fraud tactics 00:13:37.120 --> 00:13:39.620 are challenging to detect because they seek to 00:13:39.620 --> 00:13:42.220 exploit technological vulnerabilities and human 00:13:42.220 --> 00:13:45.759 judgment. For instance, Deepfakes are AI -generated, 00:13:45.779 --> 00:13:48.639 highly realistic audio, video, or images designed 00:13:48.639 --> 00:13:51.240 to impersonate individuals and manipulate trust. 00:13:51.519 --> 00:13:54.340 Synthetic identities combine real and fabricated 00:13:54.340 --> 00:13:56.860 personal data and can bypass identity verification 00:13:56.860 --> 00:14:00.000 systems and commit financial fraud. Additionally, 00:14:00.360 --> 00:14:02.740 credential fraud involves stealing or buying 00:14:02.740 --> 00:14:05.080 personal login information to access accounts 00:14:05.080 --> 00:14:07.559 and can enable unauthorized transactions and 00:14:07.559 --> 00:14:10.100 data theft. Training for security awareness and 00:14:10.100 --> 00:14:12.580 identity protection can help employees recognize 00:14:12.580 --> 00:14:15.919 and verify unusual requests. Multi -factor authentication, 00:14:16.559 --> 00:14:19.440 least privileged access, and behavioral monitoring 00:14:19.440 --> 00:14:22.980 reduces the risk of unauthorized access. And 00:14:22.980 --> 00:14:24.700 that ends our headline news for this episode. 00:14:28.179 --> 00:14:32.139 Did you connect with today's topic? If so, share 00:14:32.139 --> 00:14:35.200 it with a friend or tag us on social media. We'd 00:14:35.200 --> 00:14:37.659 love to hear your thoughts. And we're signing 00:14:37.659 --> 00:14:40.639 off until next time. We are Students Incorporated 00:14:40.639 --> 00:14:42.000 because your voice matters.