Learn
Your TV has a side hustle, and you're paying for it
Free apps on smart TVs can turn your set into a relay for someone else's web scraping. Using your connection and your IP. Here's how to tell, and how to stop it.
Security
Breaches, patches, passwords and the practical steps that keep your accounts and devices out of trouble.
News
The World Cup Fraud Economy
Thousands of fake FIFA sites are already live before the June 11 kickoff. Here's how the World Cup scam machine works, and the simple habits that keep you out of it.
Learn
Why the robocalls about your Google listing won't stop
Put your business on Google and the robocalls never stop? Here's why it happens, why blocking fails, and what actually works.
Learn
Leaked Email
Your email address is in a data breach, probably several. What that actually means for you, how to check which leaks you are in, and the short list of steps that genuinely help.
Learn
Why MFA annoyance is worth it
Those two-factor codes show up because somebody already has your password. Which kind of MFA to use, which kind to avoid, and why a strong password is not the answer by itself.
Learn
What a VPN actually does
VPN ads sell a coffee-shop hacker problem the web mostly engineered away years ago. What a VPN really protects, what it never did, and the few times one is genuinely useful.
Learn
How to spot a phishing email in 2026
The old advice about typos and bad grammar stopped working. The current signs of a scam email, where to look before you click a link, and the habits that catch the rest.
News
Patching is the new password
Verizon's 2026 breach report found unpatched software passed stolen passwords as the top way attackers get in. Why installing updates now matters as much as your login does.
News
A WordPress privacy plugin opened 115,000 sites to takeover
Burst Statistics, installed on about 200,000 WordPress sites, had a flaw letting attackers sign in as administrator. How to check your version, and what to do if you run one.
News
CISA contractor posted admin keys to public GitHub
A federal contractor left AWS GovCloud admin credentials and a file of plaintext passwords in a public repository for six months. How it happened, and the habit that prevents it.
News
Meta dropped Instagram DM encryption. Why?
Meta turned off end-to-end encryption for Instagram direct messages, so new DMs are readable again. What changed, what happened to old conversations, and what to use instead.
Learn
What the heck is a Passkey?
A passkey signs you into a site with your face, fingerprint, or PIN instead of a password. How it works, why a scammer cannot phish one, and what happens if you lose your phone.