MEPX
Chapter 1 of 10All chapters
  1. 1Who is actually after you
  2. 2Passwords
  3. 3Two factor authentication
  4. 4Phishing and social engineering
  5. 5Updates and patching
  6. 6Encryption
  7. 7Networks and public wifi
  8. 8Malware and ransomware
  9. 9Access and least privilege
  10. 10When something goes wrong

Chapter 1 of 10

Who is actually after you

Opportunists first, experts rarely.

The realistic threats

Almost nobody is individually targeted. The common attacks are automated: credential stuffing with leaked passwords, mass phishing, and scanning for machines missing a patch.

  • Being unremarkable is not protection, because the attacks are indiscriminate.
  • Ask what you are protecting and from whom before buying anything.

Cost of a compromise

Email is the crown jewel, because every password reset flows through it. Securing that one account is worth more than securing all the others.