Category: Article

By J. Mesa

As students head back to school, parents and educators worry about the risks that come with more time online. Cyberbullying, scams, and strangers with bad intentions make the internet a dangerous place for young people.

Students stay safe when adults teach them the risks and give them the tools to protect themselves. This guide covers both.

What are the biggest online risks for students?

• Cyberbullying. Harassment through messages, posts, and group chats
• Online predators. Adults who pose as peers to build trust
• Scams and phishing. Fake prizes, game currency offers, and messages that steal accounts
• Oversharing. Personal details and photos that can’t be taken back
• Inappropriate content. Material that is not suited to their age
• Sextortion. Criminals who trick or pressure a young person into sending an image, then demand money or more images

How do I set rules for internet use?

Before students use the internet for school, set clear boundaries.

• Agree on screen time limits and device-free times, such as meals and bedtime
• Decide which websites, apps, and games are allowed
• Keep devices in shared rooms for younger children
• Explain that you will check on their activity, and why

Write the rules down as a family agreement. Children follow rules they helped create.

How do I teach students to protect personal information?

One of the largest risks for young people is that others misuse their personal information. Teach them to keep these private:

• Full name, home address, and phone number
• School name and schedule
• Passwords, even from friends
• Photos that show their location or school uniform

A simple test helps: “Would I be comfortable if a stranger, my teacher, or my grandmother saw this?”

What is cyberbullying, and what should I do about it?

Cyberbullying is repeated, hurtful behavior carried out through technology. Signs that a child is a target include avoiding their device, a sudden change in mood after being online, and reluctance to go to school.

If it happens:

1. Listen, and stay calm. Don’t take the device away as a first response, because children then hide problems.
2. Save the evidence with screenshots.
3. Block the person and report them to the platform.
4. Tell the school if other students are involved.
5. Contact the police if there are threats of violence.

How do I talk to children about online predators?

Use plain language that fits their age.

• People online are not always who they say they are.
• Never agree to meet someone you know only from the internet.
• An adult who asks you to keep a secret from your parents is a warning sign.
• If anyone asks for a private photo, stop, and tell a trusted adult.

Make sure they know they will not be in trouble for telling you. Predators and extortionists rely on a child’s fear of punishment.

If a child is threatened or pressured for images, do not pay and do not delete the messages. Report it to the platform and to the National Center for Missing and Exploited Children at CyberTipline.org, or contact the FBI.

How do I encourage open communication?

A student who sees something that makes them uncomfortable needs to feel safe talking about it.

• Ask about their online life the way you ask about their day
• Learn the apps and games they use
• Thank them when they bring you a problem
• React calmly

Remind them that they can report any concern to a trusted adult: a parent, a teacher, or a school counselor.

What parental controls should I use?

Parental control tools and filters help you monitor activity and block inappropriate content.

• Device settings. Screen Time on Apple devices and Family Link on Android set limits and content filters.
• App and game settings. Most platforms offer restricted modes and privacy controls.
• Home network. Many routers include filtering and schedules.
• App store approvals. Require permission before a download or purchase.

Tools support your conversations. They do not replace them.

What is the right age for a phone or social media?

There is no single answer. Most social media platforms set a minimum age of 13 in their terms. Consider your child’s maturity, their need to reach you, and your ability to supervise. A basic phone or a device with strong limits is a reasonable first step.

How do I teach students about scams?

Young people see fake giveaways, offers of free game currency, and messages from “friends” whose accounts were stolen. Teach three rules:

1. Nobody gives away valuable things for free online.
2. Never enter a password on a page you reached from a link in a message.
3. Check with an adult before you buy, download, or sign up.

What is a digital footprint, and why does it matter to students?

Everything a student posts builds a record that can last for years. Colleges, scholarship committees, and employers look. Encourage students to post what they would be proud of later, and to ask before they post photos of friends.

How do I secure a student’s accounts and devices?

• Use a strong, unique password for each account, with a password manager for older students
• Turn on two-factor authentication
• Set profiles to private
• Turn on automatic updates
• Turn off location sharing in apps that don’t need it
• Cover or disable webcams when not in use

What should schools do?

• Teach digital citizenship at every grade level
• Publish clear rules for school devices and accounts
• Give students and parents a simple way to report problems
• Protect student data, and check the privacy practices of educational apps
• Train teachers and staff on current online threats

Are AI chatbots and image tools a risk for students?

They can be. Remind students not to share personal details with a chatbot, and that anything a tool produces may be wrong. Explain that fake images and videos of real people are easy to create, that making them of classmates causes real harm, and that it carries serious consequences.

Your next step

Have one conversation with your child this week about what they do online, and set up the family agreement together. With the right knowledge and tools, students enjoy the benefits of the internet and stay safe from its risks. If your school or organization wants a session on online safety, contact Cerberus Cybersecurity about our cybersecurity training.

By J. Mesa

When the COVID-19 pandemic sent people home, hackers and scammers followed. They sent fake health alerts, targeted home networks, and took advantage of people doing their banking and their jobs from the kitchen table.

Remote and hybrid work stayed. So did the threats. This checklist gives you the habits that keep you and your information safe.

What is cyber hygiene?

Cyber hygiene is the set of routine habits that keep your devices, accounts, and data healthy. Like washing your hands, each step is small and works because you repeat it.

Why does remote work raise the risk?

• Home networks are less protected than office networks.
• Personal and work devices mix. Family members share computers and Wi-Fi.
• Coworkers are not nearby. You can’t lean over and ask, “Did you send this?”
• Attackers adapt to the news. Any crisis produces scams within days.

1. How do I spot crisis-related scams?

Scammers use emergencies to trick people into giving up information or money. During the pandemic they posed as government agencies and healthcare organizations. They do the same after storms, during tax season, and around benefit programs.

• Be cautious with emails, texts, and calls that claim to come from a government agency or a health organization
• Never click links or give personal information unless you have confirmed the source
• Go to the agency’s official website by typing its address yourself

2. Use strong, unique passwords

Using one password for many accounts lets an attacker open all of them at once. Use a different, long password for each account. A password manager stores them, so you don’t have to remember them all.

3. Turn on multi-factor authentication

Add a second step at login for email, banking, and work accounts. A stolen password alone then fails.

4. How do I secure my home Wi-Fi?

• Change the router’s default administrator password
• Use WPA2 or WPA3 encryption with a strong Wi-Fi password
• Update the router’s software, or replace a router that no longer gets updates
• Set up a guest network for visitors and smart devices
• Turn off remote management if you don’t use it

5. Keep every device updated

Turn on automatic updates for computers, phones, tablets, and browsers. Restart when asked. Update smart home devices too.

6. Separate work and personal use

• Use your work device for work only
• Don’t let family members use it
• Keep work files in the systems your employer approves, not in personal email or cloud accounts

7. Use a VPN when your employer provides one

A virtual private network encrypts your connection to company systems. Use it on public Wi-Fi and wherever your employer requires it.

8. Be careful with personal information

Scammers look for ways to collect your name, address, Social Security number, and card details. Before you give personal information online, confirm who is asking and why.

9. Watch for shopping and financial scams

More shopping moved online, and scammers stepped up their efforts to steal payment data.

• Buy from retailers you can verify
• Pay with a credit card
• Be wary of fake investment offers and requests for payment up front

10. Secure your video calls

• Use a meeting password or a waiting room
• Don’t post meeting links in public
• Check who is in the call before you discuss anything sensitive
• Look at what is visible behind you and on your shared screen

11. Lock your screen and protect your devices

• Set a screen lock that starts after a few minutes
• Encrypt laptops and phones
• Don’t leave devices in a car or unattended in public
• Report a lost or stolen work device right away

12. Back up your work

Save work files in the company’s approved storage, where backups run. For personal files, keep a copy on an external drive or in a cloud service.

How do I verify a request from a coworker or boss?

Attackers pose as managers and ask for gift cards, wire transfers, or login details. When a message asks for money, credentials, or a change in payment details, confirm it by phone or video with a number you already have. A two-minute call stops the most costly fraud a business faces.

What should an employer do for remote staff?

• Provide company devices with security software and encryption
• Require multi-factor authentication and a VPN
• Write a short remote work policy
• Train staff on home network security and scams
• Give people a way to report problems outside office hours
• Remove access as soon as someone leaves

Is it safe to work from a café or an airport?

It can be, with care. Use a VPN or your phone’s hotspot. Sit where nobody can read your screen, or use a privacy filter. Don’t take sensitive calls where others can hear. Never leave your device unattended.

How do I dispose of work documents at home?

Shred printed papers that carry customer, employee, or financial details. Don’t put them in household recycling. Return old company devices to your employer for secure wiping, and never sell or donate a personal device before you erase it.

How often should I run through this checklist?

Review it every three months. Check that updates ran, that your router is current, and that you still recognize every device on your home network.

What should I do if something goes wrong?

1. Disconnect the device from the network.
2. Tell your employer’s IT contact right away.
3. Change your passwords from a different device.
4. Call your bank if money or card details are involved.
5. Report scams at reportfraud.ftc.gov.

Do smart home devices put my work at risk?

They can. Cameras, speakers, and TVs often run old software and share the network with your work laptop. Put them on a guest network, change their default passwords, and update them. That way a weak device can’t reach your work computer.

Your next step

Pick three items from this checklist and do them today. Start with your router password, multi-factor authentication, and automatic updates. No security measure is foolproof, and these habits go a long way toward keeping your personal and financial information safe. If your business has remote staff, Cerberus Cybersecurity can help with policies and training for a distributed team. Contact us to learn more.

By J. Mesa

More people travel for work and leisure each year, and each trip puts your devices and data in unfamiliar places. Airports, hotels, and cafés are where attackers look for easy targets.

Here are twelve tips to protect your privacy and personal data while you travel, organized by what to do before, during, and after the trip.

What are the biggest cybersecurity risks when traveling?

• Public Wi-Fi in airports, hotels, and cafés
• Lost or stolen devices
• Shoulder surfing, where someone reads your screen or watches you type
• Public charging stations and shared computers
• Travel scams, such as fake booking sites and phishing emails about your reservation
• Card fraud at unfamiliar ATMs and shops

What should I do before I leave?

1. Update your software. Install updates for your operating system, apps, and security software. Updates fix known flaws that attackers exploit.
2. Back up your devices. If a phone or laptop is lost, you keep your data.
3. Turn on device encryption and a strong screen lock.
4. Turn on “Find My” tracking and remote wipe for phones and laptops.
5. Tell your bank and card issuer about your travel dates if they ask for notice, and turn on transaction alerts.
6. Travel light. Leave devices and data you don’t need at home.

1. Use a VPN

A virtual private network encrypts your internet connection. That makes it harder for others on the same network to see what you do. Use one on any network you don’t control.

2. Use a password manager

A password manager creates and stores a strong, unique password for each account. If one account is exposed during your trip, the rest stay safe.

3. Avoid public Wi-Fi

Public networks are often unsecured, and attackers set up fake hotspots with names like the real one. Use your phone’s mobile data or hotspot when you can. If you must use public Wi-Fi, confirm the network name with staff and connect through your VPN.

4. Be cautious with email

Be wary of unexpected messages with links or attachments. Travelers get phishing emails that pose as airlines, hotels, and booking sites. Check your reservation in the company’s own app.

5. Turn on two-factor authentication

Two-factor authentication requires a second proof, such as a code from an app, along with your password. It blocks access even when a password is stolen. Use an authenticator app. Text-message codes can fail when you are abroad without service.

6. Use a firewall

A firewall blocks incoming connections from unknown sources. Make sure the one built into your computer is on, and set the network type to “public” when you join a network away from home.

7. Keep your software updated

Install updates before you leave. Don’t accept an update offered through a hotel or airport network pop-up. Attackers have used fake update prompts to install malware.

8. Pay with a credit card

Credit cards offer stronger protection than debit cards. Under US law your liability for unauthorized credit card charges is capped at $50, and a debit card puts your bank balance at risk. Use ATMs inside banks, and cover the keypad.

9. Guard your personal information

Be careful about sharing your full name, date of birth, or Social Security number while you travel. Don’t post your location or travel dates in real time.

10. Use a privacy screen

A privacy screen narrows the viewing angle of your laptop or phone, so the person in the next seat can’t read it. It prevents shoulder surfing on planes and in lounges.

11. Keep your devices with you

• Never leave a device unattended in a café, a conference room, or a car
• Carry laptops in your hand luggage
• Use the hotel safe for devices you leave in the room
• Lock your screen every time you step away

12. Avoid public charging ports and shared computers

A USB port can carry data as well as power. Use your own charger and a wall outlet, or carry a power bank. Don’t log in to personal or work accounts on a hotel business center computer.

Is hotel Wi-Fi safe?

Treat it as public. Many guests share it, and you can’t see how it is managed. Use a VPN or your phone’s hotspot for anything sensitive, such as banking and work.

What should I do if my device is lost or stolen?

1. Use “Find My” to locate it, lock it, or erase it.
2. Change the passwords for accounts you used on it, starting with email.
3. Report it to your employer if it holds work data.
4. Report it to local police and get a report number for insurance.
5. Tell your mobile carrier, so they can suspend the SIM.

What should business travelers do?

• Follow your company’s travel policy
• Use the company VPN for all work
• Carry only the data the trip requires
• Don’t discuss confidential matters where others can hear
• Be careful with devices and USB drives handed out at conferences
• Report any lost device or suspicious activity to IT right away

Do I need to worry about Bluetooth and file sharing?

Turn off Bluetooth, AirDrop, and similar sharing features when you are not using them. In a crowded place, an open setting lets strangers send you files or try to connect to your device.

What should I do when I get home?

• Change the passwords you used on public networks
• Review bank and card statements for unfamiliar charges
• Run a security scan on your devices
• Remove travel apps you no longer need
• Post your trip photos now

How do I avoid travel booking scams?

Fake travel sites and listings take your payment and disappear. Book through companies you can verify, and type their web address yourself. Be wary of a price far below every other listing, a host who asks you to pay outside the booking platform, and any request for payment by wire or gift card.

Your next step

Before your next trip, run through the “before I leave” list and install a VPN. Protecting your privacy on the road takes attention and good habits. If your team travels for work, Cerberus Cybersecurity can add travel security to your cybersecurity training and your written policies. Contact us to learn more.

By J. Mesa

Every tax season, criminals pretend to be the Internal Revenue Service. They use email, phone calls, texts, and social media to trick taxpayers into handing over a Social Security number, bank details, or money. A victim faces identity theft or financial loss.

Here is how to recognize an IRS scam, what to do about it, and how to keep your tax information safe all year.

What is an IRS scam?

An IRS scam is any attempt to steal money or personal information by posing as the IRS or a tax professional. The most common forms are:

• Phishing emails that link to fake IRS pages
• Text messages about a refund or a problem with your return
• Phone calls that threaten arrest or demand immediate payment
• Fake letters that copy IRS notices
• Social media messages offering help with refunds or credits
• Fraudulent tax preparers who steal refunds or client data

How does the IRS contact taxpayers?

The IRS contacts most taxpayers first by a letter sent through the US Postal Service. The agency does not initiate contact by email, text message, or social media to ask for personal or financial information.

The IRS does make phone calls and visits in some situations, such as an overdue bill or an audit. Those follow letters you have already received.

What will the IRS never do?

• Demand immediate payment by gift card, wire transfer, payment app, or cryptocurrency
• Threaten to have you arrested or deported by local police
• Ask for your card or bank details over the phone, by email, or by text
• Demand payment without giving you the chance to question or appeal the amount
• Send an email or text asking you to “verify” your identity through a link

Any message that does one of these is a scam.

How do I spot a fake IRS email or text?

• It arrives without warning and mentions a refund, a penalty, or a locked account
• It contains a link or an attachment
• The sender’s address does not end in irs.gov
• It pushes you to act within hours
• It asks for your Social Security number, bank details, or login

Don’t reply, and don’t click anything.

How do I spot a fake IRS phone call?

Scam callers sound official. They give a badge number, know part of your Social Security number, and show “IRS” on the caller ID, which criminals can fake. They then threaten arrest or a lawsuit unless you pay right now.

Hang up. If you think you owe taxes, call the IRS yourself at 1-800-829-1040, or check your account at IRS.gov.

How do I report an IRS scam?

• Email: forward it to [email protected], then delete it.
• Text: forward the message to [email protected] with the number it came from.
• Phone call: report it to the Treasury Inspector General for Tax Administration at tigta.gov and to the Federal Trade Commission at reportfraud.ftc.gov.

Reporting helps the IRS shut down fake sites and warn other taxpayers.

What is an Identity Protection PIN, and should I get one?

An Identity Protection PIN (IP PIN) is a six-digit number the IRS issues to you each year. Nobody can file a tax return with your Social Security number without it.

Any taxpayer who can verify their identity can request one at IRS.gov. It is free, and it is the strongest protection against someone filing a fraudulent return in your name.

How do I verify a request for information?

Be careful any time someone asks for personal details. The IRS does not ask for your Social Security number or bank details by email. If you are unsure whether a request is real, contact the IRS directly at 1-800-829-1040, or log in to your account at IRS.gov. Don’t use the phone number or link in the message.

How do I protect my tax information?

• Use strong, unique passwords for your tax software, your IRS online account, and your email
• Turn on multi-factor authentication wherever it is offered
• File early. A criminal can’t file a fraudulent return after yours is accepted.
• Use a secure network. Don’t file taxes on public Wi-Fi.
• Keep your devices updated

How do I choose a tax preparer I can trust?

Give your tax information only to trusted sources, such as a qualified tax preparer or financial advisor.

• Check that the preparer has a Preparer Tax Identification Number (PTIN). Paid preparers must have one and must sign your return.
• Ask how they store and send your documents
• Avoid preparers who base their fee on the size of your refund
• Never sign a blank return
• Make sure your refund goes to your account, not theirs

How do I dispose of tax documents?

Shred any paper that carries sensitive information, including old tax returns, W-2s, and 1099s, once you no longer need to keep it. The IRS suggests keeping returns and supporting records for at least three years in most cases. Erase old computers and drives before you recycle them.

Is tax software safe?

Reputable tax preparation software files your return electronically over an encrypted connection, and e-filing is safer than mailing paper. Download the software from the company’s own website, use a strong password, and turn on multi-factor authentication.

What should I do if I gave information to a scammer?

1. If you sent money, call your bank or card issuer right away.
2. Change the passwords on your email and financial accounts.
3. Place a fraud alert or a credit freeze with Equifax, Experian, and TransUnion.
4. Report identity theft at IdentityTheft.gov for a recovery plan.
5. Request an IP PIN from the IRS.
6. If someone filed a return in your name, the IRS will ask you to complete Form 14039, the Identity Theft Affidavit.

How do tax scams target small businesses?

Criminals target payroll and human resources staff.

• W-2 scams. An email that appears to come from the owner asks for copies of all employee W-2 forms.
• Fake payroll changes. A message asks to change an employee’s direct deposit account.
• Fake IRS notices about business tax accounts or new “registration” fees.

Protect your business with one rule: confirm any request for employee tax data or a payment change by phone, using a number you already have. If you prepare taxes for others, federal law requires you to have a written information security plan.

When do tax scams peak?

Scams rise from January through April and again around extension deadlines in the fall. They also follow the news. New credits, relief payments, and disaster declarations each bring a wave of fake messages. Stay alert all year.

Your next step

Request an IP PIN at IRS.gov before you file this year. Protecting yourself from IRS impersonators takes attention and a commitment to guarding your personal information. If your business handles employee tax or payroll data, Cerberus Cybersecurity can train your team to spot these scams. Contact us about our cybersecurity training.