Your network is a target for hackers

“That would never happen to me.” That’s probably what these people thought.

  • There’s the couple who woke up to a stranger talking dirty to their infant son in the middle of the night through his baby cam and monitor.
  • Then, there’s the family targeted by a hacker who cranked up their smart thermostat to unbearably high temperatures.

And don’t forget the countless other stories of home security cameras being hacked.

Get this: The average home and all its internet-connected devices experience about 10 attacks every 24 hours. Everything from your smart light bulbs to your smart thermostat is a way in. The answer isn’t to throw your hands up or ditch your smart gear. You just need to know how to protect your home the right way.

‘Wouldn’t I know if I got hacked?’

Some of these attacks are loud and in your face, like the email trying to extort you or a computer flashing with pop-ups. But some happen quietly in the background, like these:

  • Botnet recruitment: Getting into your network means hackers may be able to add you to an army of infected devices. Their goal? To use all that power to carry out bigger attacks and hacks.
  • Data theft: Most smart devices collect at least some personal details, like your location, behaviors, health data — whatever. This kind of info is worth money on the dark web.
  • Spying: Think listening in, watching, recording or otherwise stealing info, often to bolster a future attack.
  • Cryptojacking: Thieves want to steal your computer’s processing power and internet connection to mine cryptocurrency and reap the profits.

Your computer might be protected

Windows PCs and Macs both have a built-in firewall that does the bare minimum. 

  • On Windows: Open Control Panel, then type firewall into the search box. Click Windows Defender Firewall. In the left pane, tap Turn Windows Defender Firewall on or off to enable it.
  • On Mac: Click the Apple menu > System Settings > Firewall, then turn it on.

Now, it’s important to know your computer’s software firewall means nothing if your security cams, smart bulbs and network are under attack. It’s common knowledge that most internet-connected devices have no security protocols.

That’s where a physical firewall comes in. It’s a safeguard between your devices and the internet. More specifically, a firewall provides:

Continue reading

Your car is a target – Don’t get hacked or duped

Ever heard of wrapping your key fob in aluminum foil? It sounds a little crazy, but it’s a smart move. Your key fob’s signal is surprisingly easy for criminals to intercept using cheap scanners sold online. Thieves can open your car without setting off any alarms. If you have a true keyless car model, they might just drive away. Wrapping your fob in foil blocks the signals. 

Continue reading

Do this before your next shindig: You can easily find your lost phone if you set this up ahead of time. Hey, why not do it now?

  • For iPhone: Go to Settings > [your name] > Find My. Tap Find My iPhone, then turn on Find My iPhone. To see your device even when it’s offline, turn on Find My network.
  • On Android: Go to Settings > Security > Find My Device. Or try Security & location or Google > Security. Make sure Find My Device is turned on.

Tech to catch political sign thieves: Campaign staffers are putting Apple AirTags in their political posters to track stolen property and find the crooks. At $29 per AirTag, it’s cheaper than hiring a PI and more effective than watching security footage.

Find all the people you've blocked on social media

The ability to block people on social media is there for good reason: To keep away creeps and harassers. But your “Block” button’s also good for exes, oversharers and nosy family members.

Ever want to see who you’ve blocked over time? I pulled together steps to do just that on every major social platform. Check your list of people you’ve blocked. Maybe it was a mistake or misunderstanding.

Continue reading

Ask Kim: 'Help! My brother-in-law is spying on us'

Dear Kim,

My brother-in-law has our family cottage wired with a Ring security system. He is not to be trusted as he has been unfaithful to his wife and she has filed for divorce. My family is very suspicious that we are being watched or listened to all the time. 

Continue reading

No more free web browsers: Most lack the essential security businesses need, and app integration generally stinks. Enter the new genre of enterprise browsers (paywall link), built to be secure and productive. You’ll have to pay to play, of course. If you have a biz, it’s something to consider. It might even reduce your cyber-insurance costs.

🚨 Mac alert: Hackers are rigging search results with fake ads for the hot, new Arc browser. Clicking leads you to a copycat site that hosts a malicious DMG file. (Do not go there, folks.) It sneaks past macOS security to steal your passwords and files. The legit Arc browser URL is arc.net. Stay aware!

🚨 To be continued: Google says Samsung and other Android devices are now vulnerable to the same security risk behind June’s Pixel zero-day warning. It’s so bad that they aren’t even saying what the exploit is (code for “We don’t want bad guys to find out”). I’ll let you know when they release a patch to fix it.

Bad ads: Fake Google ads for browser company Arc are routing people to a landing page that looks nearly identical to the real one. When you install the software, malware sends your data to a shady IP address. Tip: If a download tells you to right-click to open instead of just double-clicking, it’s a scam. That’s a trick they use to bypass macOS security.

Web safety alert: Over 100,000 websites, including Hulu, are victims of a security breach. They all use a compromised JavaScript library that could redirect users to scam sites, install malware, and even swipe usernames, passwords and credit card info. Watch out for rogue pop‑ups.

Burglars, life is short – don’t make it shorter: Keep an eye out for hidden cameras in your front yard, folks. South American gangs are placing them in bushes, disguising them in leaf-covered camouflage, to see your comings and goings. Trim your foliage and get a security system. My pick is SimpliSafe.

The only constant is change: Change Healthcare says hackers stole medical records from a “substantial proportion of people in America.” That means you, me and everyone you know. The info includes names, addresses, birth dates, phone numbers, email addresses, Social Security numbers, driver’s license and passport numbers, medical records, test results and diagnoses, medications and imaging, treatment plans, insurance and policy details, billing and claims information, and banking info. Expect a notice by mail starting at the end of July.

Kaspersky’s kaput: The U.S. has officially banned Kaspersky antivirus software over its shady ties to Russia. Officials say it poses a national security risk due to the Russian government’s influence. If you don’t have an antivirus solution (or you need a new one), TotalAV is my pick.

Your smart speaker can detect smoke and carbon monoxide alarms – Here's how

Your Amazon, Google or Apple smart speaker has a lifesaving feature I bet you don’t know about: It can tell you if there’s smoke or carbon monoxide (CO) in your home.

The speaker can’t actually detect smoke or CO, but it can “listen” for devices that do. So, if your smoke or CO alarm goes off and you’re away from home, your smart speaker can ping your phone, saving your property, belongings and precious pets inside.

Continue reading

🚨 Update Windows now: A new Wi-Fi vulnerability could let hackers take over your Windows device remotely — yep, without you ever lifting a finger. Every Windows device is at risk. Go to Start > Settings > Update & Security > Windows Update to update and get the patch.

Pixel zero-day: Google rolled out a big security update for Pixel users … and hackers have already exploited one of the patched vulnerabilities. This is a “high-severity” bug, so don’t sleep on it. Go to Settings > Security & privacy > System & updates > Security update, tap Install and Restart your device.

🚨 Security breach: A hacker infiltrated tracking company Tile, stealing customers’ names, physical addresses, emails and phone numbers. The bad guys even got into tools that process location data for law enforcement agencies. Instead of paying the hacker off, Tile disabled the login credentials.

It’s getting hot in here …

If your late-night Zillow scrolling has gotten more desperate lately, you’re not alone. Home prices are going bonkers. In the past decade, home values shot up 47.1%, beating out the 2010s and 1990s. U.S. home prices are expected to rise another 1.6% over the next year alone. And I found a few markets that are growing nearly five times faster than that.

Continue reading

Like Uber but with guns: BlackWolf’s rideshare drivers must have at least four years of police, military or private security experience. Why? For high-profile folks seeking extra protection. The service was shut down in Phoenix for operating without the necessary permits. You can still snag a BlackWolf ride for the price of an Uber Black in Atlanta, Miami and Fort Lauderdale.