CISA’s 2026 Cybersecurity Awareness Month materials tell people to verify an unexpected call through a phone number they already have. At a help desk, that advice becomes a callback, and CISA’s own advisory on Scattered Spider shows how a callback can reach the attacker. The post Cybersecurity Awareness Month Says Verify the Caller.