A Decade of GSX: A New Milestone for Safeguards Consulting

For over 13 years, our team has attended the Global Security Exchange (GSX) Conference by ASIS International. This conference brings together security professionals, manufacturers, and integrators to build connections across the industry. It also features a large exhibition hall showcasing emerging technology, educational sessions, and networking events. For the first time, Safeguards Consulting was honored to sponsor the GSX Conference for its 2026 gathering. Our President and Principal Consultant, Mark Schreiber, also had the honor of speaking during his pre-conference session as well as a session during the conference, and our team had the largest attendance at GSX in our firm’s history.  

For many members of our team, participating in GSX has been a longstanding tradition. For others, the experience was just beginning. To provide an inside perspective on the conference from our first-time team members, we asked them to share some thoughts about their experience. 

Our Team's Introduction to ASIS International, GSX, and The Security Industry 

We began the first day with “Building Your Future in Security: GSX Student Welcome & Networking Experience.”  

During the event, our younger team members were introduced to members of ASIS International and had the opportunity to begin building connections within the industry. They also received valuable advice and insights about networking, professional development, and how to make the most of their GSX experience as students and first-time conference attendees.  

One of our first-time team members, Reyna, remarked that, “It was a great time to meet other students who were also just beginning their careers and taking their first steps in the industry. We also had the unique opportunity to meet some of the leadership team at ASIS International, which was especially exciting.”  

For team members who were experiencing a professional conference for the first time, this session provided an important introduction to the value of engaging with industry professionals and stepping outside of the familiar environments of college and the workplace.  

 Exploring the Exhibit Hall: Connecting New Technologies to Our Firm's Role 

Following the student networking experience, our team participated in a tour of the GSX exhibit hall alongside our consultants.  

Throughout the tour, our consultants introduced our younger team members to various industry connections while also allowing them to explore the wide range of security technologies represented throughout the exhibit hall. Rather than simply walking through the exhibits, our consultants used the experience as an opportunity to explain the technologies our team encountered and provide context about how different products and systems can be applied within the security industry.  

Our team also had the opportunity to participate in several demonstrations, allowing our younger professionals to see firsthand how different technologies operate and how they may be incorporated into real-world security environments.  

One of our part-time employees stated this walking into the Exhibit Hall for the first time, "Personally, I feel that the most helpful thing I learned was the connection to the companies and what products they offer/sell and how they connect to Safeguards. I think that being able to see all the different types of security products helped me understand the service our company provides!” 

For our interns and newer employees, this part of the conference provided a hands-on introduction to an industry that they are only beginning to explore professionally.  

A Quick Detour of The Peach State: Beyond the Conference Floor 

After completing our exhibit hall tour, the team took some time away from the conference floor for lunch and team bonding at Ted's Montana Grill, followed by a brief walk through Centennial Olympic Park.  

While these moments were not directly related to the educational programming at GSX, they were an important part of the overall experience. Conferences provide opportunities not only to learn and network, but also to strengthen relationships among the people we work alongside every day.  

Investing in Our Future Security Operations and Marketing Industry Leaders  

Once we returned to the conference, our team split into different groups based on their roles and objectives for the remainder of the day.  

Our marketing staff continued exploring the exhibit hall, visiting various booths and learning more about the products and organizations represented at GSX. The team also explored opportunities for branded content and began brainstorming and filming material for post-conference content creation.  

Meanwhile, our operations team members continued through the exhibit hall on a more in-depth tour, spending additional time learning about the technologies and solutions relevant to their areas of work.  

This allowed each member of our team to experience GSX in a way that was relevant to their individual role while still participating in the broader Safeguards Consulting experience.  

A First GSX Through a Mentor’s Perspective 

In the words of our Marketing Operations Lead, Parker Stalvey, "This week’s conference marked a significant milestone not only for our firm, but also for our team members individually. We were proud to provide our team with the opportunity to attend the Global Security Exchange (GSX) Conference, particularly because it represented a first for many of our employees. 

For several of our younger team members, GSX served as an introduction to professional networking, industry conferences, and the broader security profession. As many of them are college students and early-career professionals beginning to explore and establish themselves within their respective fields, the experience provided a valuable opportunity to step outside of their typical work and academic environments, connect with industry professionals, and begin developing the professional skills and confidence that will support them throughout their careers. 

As a mentor and the team’s Marketing Operations Lead, it was especially rewarding for me to watch my peers experience so many firsts throughout the conference. Seeing them engage with professionals, participate in conference activities, ask questions, and gain a better understanding of the security industry was a proud moment. These experiences are an important part of professional development, and I am grateful that I was able to witness and support their growth firsthand. 

The experience was also personally meaningful for me, as GSX was my first security industry conference. While I was able to experience many of these firsts alongside our team, I also gained a deeper understanding of the industry, expanded my own professional network, and learned more about the role we play as a firm within the security profession. 

Overall, I am incredibly proud of our team and everything we accomplished during this year’s GSX Conference. I am especially excited to continue witnessing the growth and development of our employees, our marketing team, and Safeguards Consulting as a whole. I look forward to seeing how the experiences and connections we gained this week continue to shape our team and contribute to our firm’s continued growth." 

More Than Attendees: Serving GSX and Our Team Through Mentorship and Volunteerism 

We were also proud to be active participants in this year’s conference. Several members of our team served as volunteers directing traffic flow within the building and assisting with registration and questions. Overall, our team served in numerous mentorship and volunteer roles throughout this year's conference; both internally and externally. 

Signing Off with a Sweet Finish in the Peach State 

For Safeguards Consulting, GSX 2026 was about more than attending another industry conference. It was an opportunity to learn, build relationships, explore new technologies, contribute to the broader security community, and provide our team with experiences that will continue to shape their professional development. 

For our first-time attendees, the conference offered an introduction to an industry that many are just beginning to explore. For our more experienced team members, it provided another opportunity to strengthen existing relationships, expand their knowledge, and share their experience with the next generation of professionals. 

As we reflect on this year’s conference, we are proud of the role our team played at GSX and grateful for the opportunity to experience it together. From the exhibit hall and educational sessions to networking opportunities, volunteer roles, and time spent together as a team, each experience contributed to a memorable week in Atlanta. 

We are excited to carry the connections, knowledge, and experiences from GSX 2026 forward as we continue serving our clients, supporting our industry, and investing in the growth of our team. 

From Peaches to Oranges: We Look Forward to Seeing You in Orlando, FL, in 2027   

As we trade the peach state, Georgia, for the orange state, Florida, we look forward to continuing our GSX experience in Orlando, Florida next year!  

To learn more about the GSX Conference, visit: 

gsx.org

To learn more about our involvement with ASIS and GSX, visit our GSX webpage: 

gsx.sgc.tech

The Top Peer-to-Peer Advantages of Chief Executive’s CSO Peer Network Group

Safeguards Consulting is proud to highlight the many peer-to-peer networking, leadership, and professional development advantages available through the Chief Executive Group (CEG), including the Chief Executive Network (CEN) and the Chief Security Officer (CSO) Peer Network. 

In January 2026, our President and Principal Consultant, Mark Schreiber, was appointed Chair of the Chief Security Officer (CSO) Peer Network, a distinguished leadership position within the Chief Executive Group and its expansive executive network. Through this role, Schreiber collaborates with senior security leaders from across a wide range of industries, fostering meaningful discussions on emerging risks, industry trends, strategic leadership, and best practices. 

This affiliation has created exciting opportunities for knowledge-sharing, professional growth, and access to valuable resources that benefit both CSO Peer Network members and the broader Chief Executive Network. By connecting executives with accomplished peers facing similar challenges, the network promotes collaborative problem-solving, strategic insight, and the exchange of innovative ideas that help organizations strengthen their leadership and security programs. 

How Is the Chief Executive Network (CEN) Structured? 

The Chief Executive Network (CEN) is an elite, high-commitment professional organization dedicated to enhancing executive performance and leadership effectiveness. It brings together leaders from diverse industries, cultures, and professional backgrounds to foster continuous learning, collaboration, and professional growth. 

The Chief Security Officer (CSO) Peer Network is a subgroup that operates under the broader Chief Executive Network (CEN), which serves as the central platform for executive engagement and peer collaboration. The Chief Executive Group (CEG) functions as the overarching organization, encompassing all affiliated networks and leadership communities. 

To learn more about the different groups, view our latest CEN blog:

https://www.safeguardsconsulting.com/knowledge/the-top-benefits-of-the-chief-executives-chief-security-officer-cso-group  

 Why Are Peer-to-Peer Advantages Crucial for Executives? 

Strategy can often be an isolating responsibility at the highest levels of leadership, particularly when executives are navigating highly specific or complex organizational challenges where conventional research tools or search-based solutions are insufficient. It is in this context that the Chief Executive Network provides meaningful value. 

Chief Security Directors are not required to operate in isolation or within the confines of internal perspectives alone. When decision-making is limited to internal data streams and organizational viewpoints, leaders risk missing external context, broader industry perspective, and objective peer validation. 

The purpose of peer-to-peer engagement within the Chief Executive Network is to reduce this isolation by connecting executives with a trusted circle of experienced peers. Through structured peer networks, leaders gain access to real-world insights that are often not available through traditional research or consulting channels. These perspectives come from individuals who are actively navigating similar challenges and operating within comparable environments. 

In addition to practical problem-solving, this model provides a deeper level of professional support, offering shared understanding, contextual perspective, and relational insight. By leveraging collective executive experience, leaders are better equipped to test assumptions, validate strategic direction, and refine high-stakes decisions in a more informed and balanced manner. 

Ultimately, peer collaboration enables executives to supplement internal analysis with external wisdom, strengthening both the quality and confidence of strategic decision-making in complex organizational environments. 

What Are the Top 10 Peer-to-Peer Advantages Offered by the CSO Peer Network? 

The Chief Security Officer (CSO) Group provides a structured peer-to-peer environment designed to strengthen executive decision-making, leadership effectiveness, and organizational resilience. The top advantages include: 

  1. Accelerated Collaborative Problem-Solving 
    Enables executives to rapidly address complex challenges through shared experience and collective insight. 

  2. Trusted, Non-Judgmental Environment 
    Provides a confidential and supportive setting where leaders can speak openly without concern for external evaluation. 

  3. Unbiased Feedback and Strategic Insight 
    Offers objective perspectives from peers outside of the executive’s organization, reducing internal bias. 

  4. Blind Spot Identification 
    Helps leaders recognize overlooked risks, assumptions, or gaps in strategy and execution. 

  5. Bottleneck Prevention and Resolution 
    Supports early identification and mitigation of operational or strategic constraints. 

  6. Reduction of Leadership Isolation 
    Connects senior executives with peers facing similar pressures, reducing the sense of decision-making isolation at the top. 

  7. Accountability Partnerships 
    Encourages follow-through on strategic initiatives through peer-driven accountability and shared expectations. 

  8. Cross-Industry and Cross-Cultural Exposure 
    Expands executive perspective through engagement with leaders across diverse industries and global contexts. 

  9. Just-in-Time Learning vs. Just-in-Case Knowledge 
    Provides timely, relevant insights tailored to immediate challenges rather than theoretical or generalized learning. 

  10. Empathy, Support, and Burnout Mitigation 
    Fosters emotional resilience and leadership sustainability through shared understanding and peer support. 

Collectively, these advantages create a high-value ecosystem where senior leaders can refine decision-making, validate strategy, and strengthen leadership performance through trusted peer engagement. 

Are You Interested in Learning More? 

If you would like to inquire about more information on the CSO Peer Network, please contact us at: 

Contact — Safeguards Consulting, Inc. 

To learn more about each group, visit:    
Chief Executive Group (CEG): Chief Executive Group  
Senior Executive Network (SEN): Senior Executive Network  
CSO Peer Group (CSO): CSO Peer Network | Senior Executive Network  

To learn more about our team’s involvement, visit:   

Introducing the Chief Executive Network’s Exclusive CSO Group — Safeguards Consulting, Inc. 

Safeguarding The New Year: Security Assessments Should Be the Top New Year’s Resolution

As we enter a new year brimming with opportunities, many of us commit to resolutions aimed at bettering different areas of our lives, including our career operations. Yet, amidst these goals, one vital resolution is frequently overlooked: analyzing the security of your facility. At Safeguards Consulting, we are convinced that including a security assessment in your New Year’s resolutions could be the most valuable choice you make for your organization in 2026. 

Why Prioritize a Security Assessment? 

Every facility, whether it is a data center, utility, hospital, university, or even a commercial office, faces unique security challenges. As threats evolve, from physical intrusions and theft to unauthorized entry and safety risks, it is critical to remain vigilant. A thorough physical security risk assessment analyzes your existing systems, identifies potential flaws, and provides customized improvement strategies to improve your protection. 

What are The Benefits of a Security Assessment as a New Year’s Resolution?  

1. Identify Vulnerabilities Early: A physical security risk assessment can reveal gaps and flaws in your systems, processes, or physical environment before they are exploited by criminals or other perpetrators.  

2. Reduce the Risk of Breaches: By identifying and addressing security vulnerabilities, you reduce the opportunity for security incidents including violence, theft, damage, or other impacts that could disrupt your business or staff’s lives.  

3. Increase Peace of Mind: Having your team and staff know that your security measures are current and effective allows you to focus on your goals for the year without worrying about potential threats. 

4. Stay Compliant: Many industries have regulations that require specific security measures and operations. Regular assessments ensure that you stay compliant and avoid penalties.  

5. Optimize Security Investments: Understanding your security posture allows you to allocate resources wisely, investing in the tools and training that provide the best protection. 
 
Make 2026 the Year You Take Control of Your Security 

Avoid waiting for a security breach or incident to reveal weaknesses in your defenses. By scheduling a professional physical security risk assessment today, you are proactive in ensuring your facility's long-term safety and success. Our skilled team of security experts is ready to assist you in identifying risks and implementing effective strategies to protect what is most important. 

Secure Your New Year Today  

Begin your New Year's resolutions with a commitment that matters. Contact our team today to set up a security assessment and begin 2026 with confidence and peace of mind.  

Protecting and Securing Facilities During the Holiday Travel Season

The holiday season is a time for celebration, but for organizations, it also brings heightened security challenges. With many employees traveling or working remotely, facilities often operate with reduced staffing, creating opportunities for bad actors to exploit vulnerabilities. Proactive planning is essential to safeguard assets and maintain operational continuity during this period. 

When fewer employees are on-site, response times slow, and empty offices become attractive targets. Property crimes spike during the holidays: U.S. data shows property crimes increase by 10–15% in December compared to other months. Opportunistic theft, vandalism, and unauthorized access are common issues. Cyber threats also surge, as attackers exploit distracted teams and unattended systems. In fact, more than half of ransomware attacks occur during holidays or weekends, making this season particularly risky for organizations that rely on remote connectivity. 

Physical security gaps are one of the most pressing concerns. Reduced staff presence makes it easier for bad actors to tailgate or force entry. FBI data shows property crimes peaked in December 2024 with 66,676 incidents - a 10.8% jump from November. Retail theft alone rises by 14% during holiday months, and similar trends affect office spaces and warehouses. Cybersecurity vulnerabilities also escalate during this time. Holiday-themed phishing and account takeover attacks spike sharply; researchers tracked a 92% increase in malicious configurations targeting retail and a 400% increase against hospitality sectors ahead of the holiday season. Environmental hazards, such as winter storms, can further complicate matters by causing outages or damage if not properly monitored. 

To mitigate these risks, organizations should strengthen access control by updating credentials, deactivating unused badges, and restricting access to non-essential areas. Surveillance and monitoring systems should be tested to ensure cameras and alarms are fully operational, and remote monitoring or third-party security services can provide continuous oversight. Cybersecurity measures are equally critical, such as implementing multi-factor authentication for remote access, patching systems before staff leave, and communicating clear guidelines for secure remote work practices. Emergency preparedness is another key step: distribute updated contact lists and escalation procedures, and conduct quick refresher drills to ensure readiness. Finally, visitor and delivery management should be tightened by using digital systems to track entries and limiting non-essential traffic during low-staff periods. 

The holiday season should be a time of celebration, not concern. By taking proactive steps, strengthening physical security, reinforcing cybersecurity, and preparing for emergencies, organizations can minimize risks and maintain a safe, secure environment. A layered approach ensures that even when staffing is reduced, your facility remains protected.  

Author: Harris Rowe, Marketing and Design Operations Specialist at Safeguards Consulting, Inc.

References 

2024 ransomware holiday risk report. (2025, November 18). Semperis. https://www.semperis.com/resources/2024-ransomware-holiday-risk-report/ 

Crime trends in U.S. cities: Year-end 2024 update - Council on criminal justice. (2025, January 28). My WordPress. https://counciloncj.org/crime-trends-in-u-s-cities-year-end-2024-update/ 

FBI Releases 2024 Reported Crimes in the Nation Statistics. (n.d.). FBI News. https://www.fbi.gov/news/press-releases/fbi-releases-2024-reported-crimes-in-the-nation-statistics 

Karen Dooley. (2025, November 25). As holiday shopping season nears, UF experts warn retail theft is growing more sophisticated. News | University of Florida. https://news.ufl.edu/2025/11/uf-lprc-warns-of-growing-retail-theft/ 

Detecting Fake Account Recovery Emails

Account Recovery Phishing is a type of attack used by scammers to gain unauthorized access to user accounts. Attackers send emails or text messages claiming that you need to reset your password or provide personal information to verify your account. These account recovery messages and websites often appear to come from genuine companies, but if you look closely, they are fake.  

Kasada, a cybersecurity company specializing in account-takeover attacks, observed in its 2025 report, “a 250% increase in account takeover attacks […] resulted in over 6 million compromised accounts, affecting large brands across several industries, including retail, hospitality, travel, entertainment, and food and beverage.” While not all these attacks involved Account Recovery Phishing, this highlights the growing risk of account compromise, including threats that exploit password reset flows. The FBI reported in a recent Security Alert that account takeover fraud has already caused losses exceeding US$262 million in 2025.  

Why Is This Relevant?  

The holiday season creates prime opportunities for cybercriminals to launch phishing attacks. During this time, people’s attention and online activity change significantly. Many spend more time shopping online, logging in to banking apps, delivery services, and social media, making each login a potential target. 

Additionally, holiday activities such as shopping, travel, and family gatherings make people busier and more stressed, increasing the likelihood of overlooking warning signs in emails.  

Common Signs of an Account Recovery Phishing Attempt 

Phishing emails are designed to look like official communications from trusted sources, but there are usually clues that reveal they are fake. These are some of the most common signs of a phishing attempt that targets your password: 

1. Receiving unsolicited password recovery requests by email or text asking you to reset your password without initiating it yourself is the main warning sign. These messages may also claim your account has been compromised or that your password will expire soon. 

2. Account recovery emails that use generic greetings such as “Dear User” or “Dear Customer” instead of your name are suspicious. Legitimate companies typically have your contact details and will address you by your name for more personal communication. 

3. The use of urgent or threatening language can create panic and push you to act quickly without carefully verifying the message. Legitimate companies will not demand urgent action on this type of message. If you feel rushed or pressured, stop and evaluate the situation carefully. 

4. Account recovery emails that include suspicious attachments are a clear sign that something is not right. Legitimate password reset notifications typically do not include attachments, so any email with them should be treated with caution, as it may contain malware. 

5. The sender’s email address does not match the company domain, which is typically an indicator that the message is fake. Password reset messages are only sent from verified company domains. 

6. Misaligned logos, incorrect brand colors, low‑resolution images, or anything that looks unfamiliar are signs of fraudulent emails or websites. 

How to Protect Yourself  

A password reset request is a critical security measure and should not be taken lightly or ignored. If a security-related communication is received, it should be reviewed carefully. The following are tips to verify the authenticity of this type of notification, and additional advice to be better protected. 

1. Verify The Email Domain. 

When receiving a password request notification, pause and review that the sender’s email address is authentic and comes from the expected source. For example, Microsoft will not send emails from a Gmail account. Also, watch for subtle changes in the domain or intentional misspellings. For example, support@google.com is not the same as support@googIe.com where the lowercase “l” is replaced by an uppercase “i”.  Adding hyphens and dots is also common to trick the user.  

2. Look Closely at The Link. 

Cybercriminals often hide malicious links behind buttons or text. Hover over links without clicking to reveal the actual URL and inspect it closely to see where it really leads. Another tactic to hide links is the use of URL shorteners. Genuine companies typically do not use shortened URLs for password reset links, so be cautious. 

Even better is to avoid clicking the link directly and instead go to the website or the service’s application. Request a new password through the official “Forgotten password” feature.  

3. Use a Unique Password. 

Do not reuse passwords across multiple sites and services. Create a unique password for each account. This way, if one service is compromised, your other accounts remain secure. It is also highly recommended to use a password manager to store and manage your passwords. 

4. Use Multi-Factor Authentication. 

Review your accounts and enable Multi-Factor Authentication (MFA). Although attackers can sometimes bypass MFA during Account Recovery Phishing attacks by tricking users into providing their verification code, it still adds an additional layer of protection for your accounts. 

5. Protect Your Sensitive Information. 

Never provide sensitive information such as passwords, verification codes, or your Social Security Number, via email or text message. Reputable companies will not ask you to provide sensitive information over insecure channels. 

What to Do if You Think Your Account Has Been Compromised? 

In case your account has been compromised, the first step is to try to recover it through the official password reset process. If you are unable to regain access, contact customer support and notify them about the incident. This is especially important for financial institutions or e-commerce platforms, where they can freeze any activity, restore access, review transactions, and monitor the account for further abuse. 

Review purchase history, messages, login logs, account changes, and connected services. Document anything suspicious with screenshots and timestamps. Even if you cannot access the compromised account, you may still review email notifications, transaction and login attempt alerts, and messages from the service provider.  

Finally, it is highly recommended to submit a report through the Internet Crime Complaint Center (IC3), especially if the compromised account involves financial transactions or the exposure of sensitive information. 

Although this type of phishing is not new, it continues to be highly effective. Always verify any account recovery requests and practice strong security habits. 

Author: The Safeguards Consulting, Inc. Cybersecurity Team

Safeguarding Yourself from The Surprising Dangers Lurking Behind QR Codes

Malicious QR Codes are Hidden Everywhere  

QR codes have become a common part of everyday life. They can be found in restaurants, parking lots, social events, product packaging, and even in unexpected places, like on modern gravestones. It is understandable, after all, that they are easy to use and very practical. We are so used to seeing them everywhere that it is easy to overlook the risks they can carry. According to the Anti-Phishing Working Group (APWG) in its Q1 2025 report, over 1.7 million unique malicious QR codes were detected by cybersecurity researchers, along with “an average of 2.7 million emails with QR codes attached daily”.


How Does a Malicious QR Code Function?  

QR codes work by encoding information into a square pattern that can be read by a scanner or camera. This information can include a URL, text, or contact details. QR codes are fast, reliable, and capable of storing much more data than traditional barcodes. However, because the content is encoded within the pattern, attackers can exploit this to hide malicious links or actions. Some devices and apps show a preview before opening a link, but not all do, and users often do not inspect the preview carefully, making QR codes a useful tool for phishing and other malicious attacks. 

QR codes Can Be Exploited in Various Different Ways 

1. Phishing Campaigns (Quishing) 

Attackers can embed URLs in QR codes that redirect users to phishing sites designed to steal personal information, login credentials, or financial details. Since users often do not see or carefully check the URL before opening it, they may not realize they are being directed to a fraudulent website. This tactic is widely used because of its high effectiveness. 

2. Malware Distribution 

QR codes can also direct users to websites that prompt users to download malicious software onto their smartphones or computers. If users proceed with the installation, the software can infect their devices with malware. Although most devices require user permission to complete the installation, attackers often rely on social engineering tactics to overcome users’ caution. 

3. Fake Payment Requests 

Scammers can create fake QR codes or replace legitimate ones in public places (known as QR code tampering), to redirect payments to their own accounts. This method is commonly used in situations like parking meters, charity donations, or sending them via email or chat, tricking victims into unknowingly sending money to cybercriminals. 

5 Quick and Easy Steps to Take in Order to Safely Scan and Verify QR Codes 

There are 5 steps that one can easily and quickly take to better safeguard themselves and their data against Malicious QR codes.  

1. Inspect The QR Code Source 

Before scanning a QR code, make sure it comes from a trusted source. Be cautious of codes found in public places that look out of place, are poorly printed, or appear to be stickers placed over original codes. Watch out for posters or messages with QR codes that try to grab your attention or offer something that seems too good to be true. 

2. Verify the URL Before Clicking  

Most modern smartphone cameras display a preview of the link or information encoded before opening it, allowing users to review what type of content is behind the QR code. Before clicking any links, always take a moment to verify the URL is legitimate and a trusted website and not an imitation with misspellings or suspicious characters. Be cautious with shortened or unclear links, as attackers may use link obfuscation to hide malicious destinations. If anything looks off, it is safer to type the known URL manually into your browser.  

 In case your device does not display a preview of the QR code, consider installing a camera or scanner app that allows you to view the content before opening it. Always use trusted QR code scanning apps from reputable sources to ensure your security. 

 3. Avoid Entering Sensitive Information 

Never enter sensitive information on websites accessed through QR codes unless you are certain the site is legitimate and secure. Cybercriminals can create fake websites to steal personal identifiable information, login credentials, credit card numbers, or other confidential data. If scanning a QR code opens a form asking for personal details, especially in a public space, consider it a red flag and think twice before entering anything. Always verify that the site uses a secure HTTPS connection and that the domain name is correct and trusted. You can also search for the site online for verification. 

4. Do Not Download Files from QR Codes 

QR codes can take you to websites asking you to download files, especially software or apps. While this might seem convenient, it is a common method used by cybercriminals to install malware. Unless you trust the source, avoid downloading anything it points to. Instead, use official app stores or trusted websites when downloading or installing software. 

 5. Keep Devices Updated and Use Anti-Malware Software 

It is important to make sure that your device and apps stay updated. Those updates often fix security vulnerabilities that cybercriminals could exploit. Additionally, installing anti-malware software adds another layer of security and can help detect and block potential threats before they cause harm. 

Stay Safe and Stay Aware  

Using QR codes to deliver attacks remains a common and growing threat in 2025. This technology has become a part of everyday life, and most people use it without a second thought. That convenience also makes QR codes an easy target for cybercriminals. As technology advances, so do the tactics used to exploit it. That is why staying alert matters. Taking a moment to check a link can help you avoid much bigger problems. 

Author: The Safeguards Consulting, Inc. Cybersecurity Team