Top Cyber Security Tips That IT Professionals Should Tell Their Family and Friends

Feb 19, 2021 | Security

Featured article by Russell Emmental, Independent Technology Author

man

Computer hackers have a treasure trove of tools they use to threaten your cybersecurity. While you might be an expert, remember that most people aren’t, especially people who do not use computers regularly.

Unfortunately, there are millions of data breaches every year. These hackers know most people aren’t IT experts and do not have the best anti-virus software, Office Consumer-approved equipment, etc. They target internet users maliciously with scams that compromise their identity and personal information.

If you have loved ones who could use some cybersecurity tips, here’s are five things you know that they probably don’t.

1. How to Debunk Phishing Emails

We send a whole lot of personal emails daily. Usually, people don’t even think twice about it. Spear phishing hackers take advantage of this and sneakily try to get users to share personal information, passwords, and financial information.

A lot of the time, the tactics used by phishing emails are quite sophisticated. Tell your loved ones to look out for unusual or incorrect URLs in embedded email links (hover over a link to see the direct URL address), random requests for money or personal information, and any attachments that seem suspicious.

Tell them that a good rule of thumb is only to open a message if it is from an email account they recognize. A hacker could use your loved one’s name and create a fake email with their picture, so tell your loved one only to respond to emails they can verify.

2. Switch from Passwords to Passphrases

Hackers have programs for systematically testing out millions of possible passwords. It’s as easy as going to sleep and waking up to check on the program that tests one possible password combo after another.

To protect your loved ones against harmful programs like these, tell them to use a passphrase instead of a password. Using a combination of special characters, numbers, and both upper and lowercase letters, they will have a complicated password. Even the most advanced hacking programs will have trouble cracking it.

3. Keep Bluetooth Off

If your loved one is not using your phone’s Bluetooth capabilities, turn it off. People with malicious intent can connect to a person’s phone via a Bluetooth connection and use this link to steal data.

4. Keep Your Browsers Up to Date

Drive-by cyberattacks are increasing exponentially, so tell loved ones to be aware of what their web browser might be doing in the background.

A person could be visiting a perfectly harmless website, and the website owner may not know that malware has compromised their site. Sites running in the background can attack visitors.

To avoid this, show your friend or family member how to keep their internet browsers updated. Many browsers, such as Firefox and Google Chrome, will offer automatic update options that protect against these scams.

5. Use WPA2 for Your Router Encryption

A lot of older routers utilize an encryption type called WEP, which is Wired Equivalent Privacy. WEP is vulnerable to hacking by software programs that anybody can access.

Check your loved one’s router security settings. They should use WPA, but preferably they should have Wi-Fi Protected Access 2, or WPA2. You can check this by clicking on the wireless network icon on your computer screen.

Don’t forget to tell them to set a custom passphrase for their Wi-Fi password, as any decent hacker will know the default router passwords that major companies give out.

Bottom Line

One of the perks of being an IT professional is protecting your loved ones against malicious cyber-attacks. Take this responsibility seriously and ensure your loved ones are using the internet safely. They could be the target of a malicious scam without knowing it, so check out their router settings and passwords at the very least.

 

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more