Hacking is the act of gaining unauthorised access to a computer, network, or system. It is the manipulation of a system beyond its normal behaviour. Although not always malicious, hacking is mostly negative due to its association with cybercrime. 

Hacking works by exploiting weaknesses in systems, networks, or people to gain unauthorised access or control. Hackers gather information about the target (from social media posts, IP addresses, email addresses, employee names, open ports), and this intelligence helps identify vulnerabilities that the hackers can exploit to gain access to accounts or networks. 

Once inside, the hackers can steal data, obtain passwords, escalate their privilege to gain higher access rights, install malware, or create a backdoor for future access. 

• Use strong, unique passwords. Consider a password manager.
• Always enable multi-factor authentication (MFA). Adds a second security layer.
• Keep devices and software updated. Patches fix vulnerabilities.
• Be wary of links and attachments, especially in unsolicited emails or messages.
• Secure your Wi-Fi . Use WPA2/WPA3 encryption and change default router passwords.
• Always back up important data. Use offline or cloud backups to recover from ransomware.
• Install security tools like antivirus, anti-malware, and firewalls.

Social engineering is the art of manipulating people into giving away confidential information or performing actions that compromise security. Social engineers “hack” human psychology — exploiting trust, fear, urgency, or curiosity.

Malicious actors usually focus on people or groups with access to valuable resources, information, or systems. While targets of social engineering are usually certain individuals with access to sensitive data or systems, anyone can be affected by social engineering attempts. Some examples of targets include;

• Employees with privileged access (system admins, executives)

• Finance and HR staff (due to payroll, tax, and payment data)

• Customer service or help desk teams (can reset accounts)

• New hires (less familiar with company procedures)

• Suppliers and contractors (weaker security controls)

• Individuals using social media heavily (easier to gather personal data)

• Public-facing staff (receptionists, call center agents)

Here are some strategies for staying vigilant online and defending against social engineering attempts;

• Be skeptical of unexpected requests. Verify and confirm any messages or emails that you receive before disclosing personal information.
• Don’t click suspicious links. Hover over the link to check the legitimacy of the URLs.
• Don’t overshare online. Attackers may use the information you share online to craft their attacks against you.
• Use multi-factor authentication. This adds an extra layer of protection even if passwords are stolen.
•  Educate yourself and others. Awareness is the best defense.

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or exposed without authorization. This can involve personal data (names, addresses, passwords, credit card numbers), corporate data (trade secrets, contracts), or government records. Breaches can be intentional — caused by hackers or malicious insiders — or accidental, due to human error or misconfigured systems.

While you can’t control the security of every company holding your data, you can reduce your risk and impact:

• For Individuals: Use breach alert services (like “Have I Been Pwned”), change passwords immediately if a service is compromised, and avoid oversharing personal information online.
• For Organizations: Implement layered security (firewalls, intrusion detection, endpoint protection), train staff on phishing and social engineering, apply security patches quickly, and conduct regular penetration testing.

Online account compromise happens when someone else gets access to your personal accounts — like email, social media, or banking — without your permission. They can use your accounts to steal money, send spam, or commit fraud. 

Look for signs such as:

• Login Alerts You Didn’t Trigger – Emails or notifications about sign-ins from unknown devices or locations.

• Password Change Notifications – If you didn’t change it yourself.

• Unrecognized Activity – Posts, messages, or transactions you didn’t make.

• Locked Out of Your Account – Your password no longer works and you cannot access your account.

• Security Alerts from Services – Emails warning your account may be at risk.

• Friends or Contacts Report Suspicious Messages – Your account is sending spam.

• Breached Data Reports – Alerts from tools like “Have I Been Pwned.”

Identity theft is when cybercriminals illegally obtain and use your personal information, such as your name, ID number, banking details, or login credentials, for financial or malicious purposes. They may open accounts, take loans, or commit crimes in your name.

You might be financially, emotionally, or reputationally harmed by cybercriminals who pose as you. This impact can be:

• Loss of money from your bank account or unauthorised purchases
• Legal issues if your identity is used for crimes
• Stress, anxiety, and loss of trust in online systems
• Time-consuming and costly recovery process
• Harms your reputation. You could have trouble proving your real identity.

Your identity is important, and you must take proactive steps to safeguard it. This could include;

• Secure your accounts with strong authentication
• Update privacy settings on social media
• Use a password manager to store complex passwords securely
• Be alert to phishing attempts and suspicious messages
• Encrypt sensitive files on your devices
• Review your medical, financial, and government records for authorized activity
• Educate yourself and your family about common scams and online risks

1. Act quickly to minimise the impact of the theft
2. Contact the affected sites and inform them of your problem
3. Report the theft to the police
4. Change your passwords on all your accounts
5. Keep records of all communications and steps taken.

What is a scam?

A scam is a dishonest way to get money, information or something valuable, by tricking you.

With the increasing use of computers and mobile devices connecting to the internet, an online scam is a common way someone can get you to send money, give out personal details, or buy something without checking it properly.

Common types of scams

Understanding the common types of scams and how they work allows you to better protect yourself from becoming a victim.