> Topics
How you get hacked
How a phishing attack is actually built
Most phishing advice describes the symptoms. Here is the construction, from the attacker's side — and the two defences that survive it.
What happens to your password after a breach
Follow one password from a leaked database to somebody else's account being taken over. The mechanics explain why reuse is the only fact that matters.
What an attacker learns about you before touching anything
Before anyone touches a system they read what you already published: certificate logs, job adverts, document metadata. Audit your own the same way.