Navigating the 2026 cyber threat landscape

As technology continues to shape how we learn, work and communicate, cybercriminals are finding new ways to exploit our reliance on digital tools. Today’s threats are more sophisticated than ever, from artificial intelligence-generated deepfakes that mimic voices and images to phishing scams designed to appear legitimate, attackers are focused on exploiting trust and human behavior to steal information and gain unauthorized access. 

“Cybercriminals increasingly rely on exploiting trust rather than technology,” said Heather Roszkowski, assistant vice president of Cyber Defense and chief information security officer at Augusta University. “Taking a moment to verify an email, a request, or a link remains one of the most effective ways every Jaguar can help protect our university community.”

Cybersecurity starts with you 

At Augusta University, cybersecurity is everyone’s responsibility. In 2026, every email, QR code, password and social media post can expose the university to risks. The good news is that awareness remains one of the most effective defenses. By staying informed and thinking critically before clicking, sharing or responding, you help create a safer digital environment for everyone. 

Ready to learn more? Here are five cybersecurity threats that have had the greatest impact in 2026.

AI Wants You to Click

Phishing remains one of the most common cybersecurity threats, but AI has made these attacks far more convincing. Cybercriminals can now create highly personalized, professional-looking emails that appear to come from trusted organizations, coworkers, professors or supervisors.  

These messages often create a false sense of urgency and encourage recipients to click a link, open an attachment, or provide sensitive information. You can now review the latest cybercrime attacks on Augusta University by visiting the Phish Bowl. 

How to stay protected 

• Verify unexpected requests before responding 
• Hover over links to inspect where they lead before clicking 
• Report suspicious emails immediately

Don’t always believe what you see 

Artificial intelligence can now generate deepfakes using realistic voice recordings and videos that convincingly imitate trusted individuals. 

A voicemail that sounds like a supervisor or a video message that appears to come from a familiar contact may actually be a scam designed to steal your credentials, request payments or gift cards or gain access to sensitive personal information.

How to stay protected

• Verify unusual requests through a separate communication channel
• Follow established security procedures, even when a request appears legitimate
• Pause and confirm before taking action

Password pitfalls

Compromised usernames and passwords remain one of the leading causes of account breaches.  

When passwords are reused across multiple sites, a single data breach can provide cybercriminals access to several accounts. Attackers frequently use automated tools to test stolen credentials against popular online services. 

How to stay protected

• Use a unique password or passphrase for every account
• Enable multifactor authentication (MFA)
• Consider using a password manager to securely store credentials

Scan at your own risk

QR codes have become a convenient part of everyday life, appearing on event registrations, payment systems and other advertisements. Unfortunately, they have also become a popular tool for cybercriminals. 

In a scam known as “quishing,” attackers create malicious QR codes that direct users to fraudulent websites designed to steal login credentials or install harmful software. They can appear in emails, text messages, flyers, parking meters or restaurant menus. 

How to stay protected 

• Scan QR codes only from trusted sources
• Review website addresses carefully before entering any information
• Be cautious when scanning QR codes posted in public places

“Cybercriminals increasingly rely on exploiting trust rather than technology. Taking a moment to verify an email, a request, or a link remains one of the most effective ways every Jaguar can help protect our university community.” 

– Heather Roszkowski, assistant VP, Cyber Defense and chief information security officer

Online overshare 

Cybercriminals often use publicly available information from social media profiles to create convincing scams, a tactic known as “social engineering.”

Simple posts about your job responsibilities, department, campus involvement, travel plans or professional connections can help attackers craft messages that appear legitimate and personalized. Once trust is built, it becomes easier for criminals to convince a victim to do things they would normally second-guess.

How to stay protected

• Review your privacy settings regularly
• Limit the amount of personal information you share publicly
• Be cautious when interacting with unknown contacts online

With cybersecurity threats continuing to evolve, one thing remains constant: You are the first line of defense. Understanding the warning signs can help protect both you and Augusta University from cybercriminals. That’s why AU and the University System of Georgia mandate bi-annual Cybersecurity Awareness Training to give every Jaguar the tools to recognize potential threats, make informed decisions and protect sensitive data and information. 

Learn more about Cybersecurity Awareness Month. 

If you see any potential cybersecurity threats, immediately report to 72CYBER or 706-722-9237 or forward malicious emails to 72CYBER@augusta.edu.