Avoid Hacking: Just say no

The New York Times recently ran an op ed titled "It’s Inevitable — You’re Going to Get Hacked." Here is an excerpt:

I run a public relations company, and there is one type of crisis no amount of planning can allay. It might start like this: One of my clients — imagine the founder of an A.I. start-up — receives notice that her iCloud account is about to be deleted because the payment method is no longer valid. Her assistant, who has access to her devices, calls her so he can update the payment method, and asks for her two-factor authentication code. The founder reads off the code. Moments later she’s locked out of her iCloud. Her text messages, photos, her videos, voice memos and notes-to-self — all stolen. The founder calls me in a panic.

How could this happen? The founder’s passwords could have been compromised and listed on the dark web. With the help of artificial intelligence, the hackers can send the fake nonpayment notice, clone her assistant’s voice using videos posted on Instagram and enter the two-factor authentication code to break into her iCloud account. Then, they could demand a Bitcoin ransom to return the trove of personal musings, sexts and photos, perhaps some sans clothes.

This scenario is not as far-fetched as it sounds. Apple has some of the strongest security measures in tech and is constantly innovating new defenses, but in recent months it has repeatedly warned its customers of sophisticated scams. Gmail break-ins are proliferating. Hackers are subjecting even everyday people to embarrassing leaks. Once they get into your iCloud account, they could have access to your entire digital history dating back to your first iPhone...

Full op ed at https://www.nytimes.com/2026/07/02/opinion/hacking-ai-leaks-shame.html.

These scenarios involve people giving away information. If you get an email, text, or phone message asking for anything - such as a password - DON'T GIVE IT, no matter how urgent the request seems to be, or how trustworthy the messenger seems to be. DON'T DO IT. Just say NO. And use multifactor authentication where it is offered.