Most security gaps that hurt individuals and small businesses aren’t sophisticated. They’re forgotten: a setting nobody changed, an app nobody removed, a login nobody turned off. I’ve spent more than 25 years working on secure government and enterprise systems. The surprising lesson from all that time is how ordinary the real risks usually are. Attackers [...]