Explainers
Plain-English answers to the questions everyone asks
Evergreen guides to the ideas behind the headlines. Each one answers its question in the first two sentences, then goes as deep as you want to go.
What is a CVE and how does vulnerability scoring work?
CVEs are the universal ID system for software flaws, and CVSS scores tell you how bad each one actually is.
Vulnerabilities · 5 min read
What is a data breach and what should you do after one?
A data breach happens when personal information is accessed or taken without permission. Here is exactly what that means and how to protect yourself.
Breaches · 5 min read
What is a VPN and when do you actually need one?
VPNs encrypt your internet traffic and hide your real IP address, but they are not a privacy cure-all. Here is when one genuinely helps and when it does not.
Identity & Access · 5 min read
What is a zero-day vulnerability? A plain-English guide
Zero-days are unpatched security flaws the software vendor doesn't know about yet, making them among the most dangerous bugs in existence.
Vulnerabilities · 5 min read
What is multi-factor authentication and why does it matter?
MFA blocks the vast majority of automated account takeovers, even when your password is already stolen.
Identity & Access · 4 min read
What is phishing and how do you spot a phishing email?
Phishing is the most common way attackers steal credentials and money. Here is what the attack looks like and how to catch it before you click.
Threat Intelligence · 5 min read
What is ransomware and how does an attack actually unfold?
Ransomware locks your files or systems until you pay criminals to restore access. Here is exactly how that happens, step by step.
Ransomware · 5 min read
What is ransomware-as-a-service? A plain-English guide
Ransomware-as-a-service lets criminals rent attack tools from developers, the same way businesses subscribe to software, making large-scale extortion attacks available to almost anyone.
Ransomware · 5 min read
What is social engineering? A plain-English guide
Social engineering is the art of manipulating people, not machines, to hand over access, money, or data. Here is how it works and how to stop it.
Threat Intelligence · 4 min read
What is zero trust security? A plain-English guide
Zero trust means your network stops assuming anyone inside it is safe, and checks every user and device every single time.
Cloud Security · 4 min read