Understanding cybersecurity, without jargon

The most useful thing is not to know everything about security. It's knowing what to do right away when something seems unusual.

Incident

Deciding what to cut, what to keep, who to prevent

When faced with a compromised account, a suspicious device or a modified page, the order matters: limit exposure, preserve evidence, change affected access, then seek the right support.

Suspicious accountChange the password from a healthy device, revoke sessions and enable two-factor authentication.
Site modified or unavailableNotify the host or service provider, keep the logs and note the time of discovery.
Fraudulent messageDon't click anymore, keep the header or sender, then switch to the phishing route.