Explainers, tips and security rules, with no fearmongering. Browse by content type or start with the latest.
Most stolen accounts were never hacked in a technical sense. The owner handed over the key themselves, through a link or a code. Here are the three methods, each with the setting that blocks it.
Any message that asks you to hurry is asking you to stop thinking.
Cloning a voice takes just a few minutes of audio. Here are the signs that give away a fake call, and a family code word that protects you.
Read the explainerNo one legitimate will ever ask for your verification code. Whoever asks for it is the one robbing you.
Every photo can carry your location, phone model and the time it was taken. When that data stays, when it's removed, and how to stop it at the source.
Three copies, on two different types of storage, one of them off-site. The rule that turns ransomware into a mere nuisance.
Read the explainerWe take a typical scam message apart line by line: where the urgency comes from, why the link is shortened, and what happens after you click.
What you post about yourself today, someone else can use against you tomorrow.
Nothing of this type yet.
Explore 6 core stages and 23 comprehensive packages, demystifying how modern models learn, scale in production, and guard against threats.
Terms that come up again and again in our posts, each defined in a line or two. We start here so we all speak the same language.
A message or link that impersonates a trusted source to get your password, verification code or card details.
A second layer after your password, such as a code from an authenticator app. It blocks access even if your password is stolen.
Tricking the person instead of hacking the device, using urgency, fear or a claim of official authority.
Malware that encrypts your files and demands money to unlock them. A separate backup is your most important defense.
An authorized attack that simulates a real attacker to find vulnerabilities and fix them before anyone exploits them.
A team that plays the adversary in full, both technically and through people, to test an organization's ability to detect and respond.
No automatic trust for any user or device, even inside the network. Every request is verified again.
Audio or video generated by AI that imitates a real person saying or doing things they never said or did.
Sahati Tech is a tech awareness blog that started in Arabic. The skull in the cap and glasses is the hacker who knows how systems get broken into, and uses that knowledge to show you how to protect them. We write for people who don't work in cybersecurity but want to understand it.
Every post ends with a practical step you can take right now.
We explain how attackers think. We never publish tools or methods for causing harm.
No hype and no scare tactics. Accurate information is enough.
One article and three tips every week. No spam, and you can unsubscribe anytime.