A support alert is not permission to control your computer
Close fake support prompts, contact the real provider independently and treat any granted remote access as a separate incident.
Microsoft — Avoid and report support scams
LA24X / Cybersecurity
Practical ways to protect your accounts and data Page 2
Recognize online traps, review account access and improve everyday security with practical defensive guidance.
Search this section ↗Topics & guides
76 topics in this section.
Set up a passkey without losing your recovery route
Understand device-bound and synced passkeys, create one on a trusted device and test sign-in before removing older methods.
pages.nist.gov
Choose an MFA method you can use and recover safely
Compare passkeys, security keys, authenticator codes and SMS, then secure recovery before depending on the second factor.
CISA — Turn on MFA
Check a suspicious message without following its sign-in link
Separate the message’s claim from its link, verify through the official service and respond according to what you actually exposed.
FTC — Recognize and avoid phishing
Inspect an email link on a phone or PC without trusting its label
Read the actual hostname, treat shortened links as incomplete evidence and verify the request outside the email.
cisa.gov
Finish browser security updates, including the restart
Check the installed browser version, apply its official update and restart so a downloaded security fix actually takes effect.
Google — Update Chrome
Keep the operating system supported, not just the update switch on
Check update status, restart requirements and support lifecycle, then fix blocked updates using the platform’s official tools.
Microsoft — Windows Update FAQ
Make a backup plan that survives deletion and a lost computer
Choose what to protect, keep an independent copy and test a restore instead of counting synchronized folders as backups.
CISA — Ransomware Guide
Suspected ransomware: isolate first and preserve recovery options
Disconnect an affected device, protect untouched backups and get help without spreading the infection or destroying evidence.
CISA — Ransomware Response Guide
Start using a password manager without locking yourself out
Secure the vault, migrate a few important accounts, test recovery and handle plain-text exports carefully.
NIST — Digital identity guidelines
A breach notice arrived: secure the account that was actually exposed
Confirm the notice independently, identify exposed data and review passwords, sessions and recovery settings in the right order.
Google — Secure a compromised account
Secure home Wi-Fi: separate the network password from router access
Check wireless encryption, router administration, updates and guest access without disconnecting every device through blind changes.
FTC — Secure a home Wi-Fi network
Public Wi-Fi and VPNs: protect the connection without trusting every site
Understand what HTTPS already protects, what a VPN changes and which account and device risks remain.
FTC — Public Wi-Fi safety
DNS filtering: block known risky domains without calling it antivirus
Choose a filtering resolver, set it in the appropriate device configuration and understand encrypted DNS and bypass limits.
Cloudflare — DNS setup and filtering
Revoke third-party account access without assuming it deletes their data
Review Google account connections, distinguish sign-in from data permissions and remove access you no longer intend to grant.
Google — Manage third-party connections
A frontend environment variable is not a secret API key
Check the browser bundle and network requests, move privileged calls to a server and rotate a key if it has already shipped.
docs.github.com
Handle a GitHub secret-scanning alert as a credential incident
Confirm the detected credential, revoke it at its issuer and review use before closing the repository alert.
docs.github.com
Review a dependency security update instead of clicking merge blindly
Trace a vulnerable package through the lockfile, understand the advisory and test the affected behaviour before deployment.
docs.github.com