Public Wi-Fi hacks, evil twin hotspots, and juice jacking¶

Airports, hotels, coffee shops, conference centers, libraries, and transit hubs are prime hunting grounds for two closely related physical-proximity cyberattacks: Evil Twin rogue Wi-Fi hotspots and Juice Jacking (compromised public USB charging ports). When you connect your smartphone or laptop to an attacker-controlled wireless access point or plug your cable into a modified public USB port, you hand an adversary a direct network or physical bridge to intercept your traffic, harvest your login credentials, or hijack active authentication session cookies.

If you just realized you typed your email, corporate login, or payment card details into a suspicious hotel or airport Wi-Fi splash screen, or if your phone popped up a "Trust This Computer" prompt while plugged into a public charging kiosk, immediate containment can stop an attacker from locking you out of your accounts. This guide provides immediate incident recovery steps, technical explanations of wireless and USB hardware attacks, operating system certificate audits, and travel hardening protocols based on guidance from the Cybersecurity and Infrastructure Security Agency (CISA) in the United States, the National Cyber Security Centre (NCSC) in the United Kingdom, the Federal Communications Commission (FCC), and the European Union Agency for Cybersecurity (ENISA).

Kora ubu¶

1. Disconnect immediately from the Wi-Fi network or unplug the USB cable. Turn off Wi-Fi completely on your laptop, tablet, or smartphone, or physically pull your charging cord out of the public USB port right away.
2. Forget the rogue Wi-Fi network so your device cannot auto-reconnect. Open your device Wi-Fi settings, select the suspicious network name (SSID), and tap Forget This Network (or uncheck Connect Automatically) so your radio stops broadcasting connection probes to the attacker hardware.
3. Switch exclusively to cellular data (4G/5G) to secure compromised accounts. Never use any local public Wi-Fi network while resetting your credentials. Use your smartphone native cellular connection or a separate, uncompromised computer on a trusted network.
4. Revoke all active login sessions and rotate passwords for exposed accounts. If you typed a password into a fake Wi-Fi captive portal or signed into an account over the rogue network, open that account security dashboard, click Sign out of all devices / Revoke active sessions, change your password to a unique passphrase, and freeze any credit or debit card whose number you entered.
5. Audit and remove any rogue root certificates, VPN profiles, or inbox rules. Check your operating system certificate store and device management settings to verify that the captive portal did not trick you into installing a malicious configuration profile, and inspect your email settings for unauthorized auto-forwarding rules.
6. Reboot and inspect your mobile device if you tapped "Trust" on a USB kiosk. If you tapped "Trust This Computer" or enabled USB File Transfer/Debugging at a public charging station, enable Airplane Mode, check for unknown side-loaded apps or profiles, and report severe financial theft or extortion to law enforcement or your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom, or see nimero yihutirwa).

Public Wi-Fi and USB charging incident response tree¶

flowchart TD
    Start["Suspected Public Wi-Fi or USB Charging Compromise"]
    ThreatType{"Which proximity vector occurred?"}
    WiFiBranch["Connected to Suspected Evil Twin Wi-Fi<br/>or Fake Captive Portal Splash Page"]
    USBBranch["Plugged Phone or Laptop Into Public USB Port<br/>or Used an Unattended Cable (Juice Jacking)"]

    WiFiAction1["1. Turn off Wi-Fi radio and tap 'Forget This Network'<br/>2. Switch to trusted 4G/5G cellular data"]
    WiFiPrompt{"Did you type credentials, payment card data,<br/>or install a profile/certificate?"}
    WiFiCompromised["ACTIVE CREDENTIAL / TRAFFIC COMPROMISE<br/>1. Revoke all active login sessions and refresh tokens<br/>2. Rotate passwords and check email forwarding rules<br/>3. Delete rogue Device Management profiles and Root CAs<br/>4. Freeze payment card and issue replacement number"]
    WiFiPassive["PASSIVE CONNECTION ONLY (HTTPS intact)<br/>1. Flush local DNS and ARP caches<br/>2. Enable audited VPN and Encrypted DNS (DoH/DoT)<br/>3. Monitor account login logs for 14 days"]

    USBAction1["1. Physically unplug USB cable immediately<br/>2. Do not use any cable left hanging in a kiosk"]
    USBPrompt{"Did you unlock the device and tap<br/>'Trust This Computer', 'Allow USB Debugging',<br/>or see rapid ghost typing on screen?"}
    USBCompromised["ACTIVE USB DATA OR HID KEYSTROKE BREACH<br/>1. Enable Airplane Mode to cut C2 network callbacks<br/>2. Check for rogue MDM profiles, accessibility apps, or shells<br/>3. Rotate passwords from a separate clean device<br/>4. Back up important photos/files and perform Factory Reset"]
    USBBlocked["OS USB RESTRICTED MODE PROTECTED DEVICE<br/>1. Reboot device to clear USB controller volatile state<br/>2. Charge using AC wall outlet brick or personal battery bank"]

    Start --> ThreatType
    ThreatType -->|Evil Twin Wi-Fi| WiFiBranch
    ThreatType -->|Public USB Port| USBBranch
    WiFiBranch --> WiFiAction1
    WiFiAction1 --> WiFiPrompt
    WiFiPrompt -->|Yes| WiFiCompromised
    WiFiPrompt -->|No| WiFiPassive
    USBBranch --> USBAction1
    USBAction1 --> USBPrompt
    USBPrompt -->|Yes| USBCompromised
    USBPrompt -->|No: Locked or Rejected| USBBlocked

How Evil Twin Wi-Fi and rogue captive portals work¶

An Evil Twin is a fraudulent wireless access point operated by an attacker using a laptop, a portable multi-radio auditing router (such as a Wi-Fi Pineapple), a Raspberry Pi, or a modified smartphone hotspot positioned inside a busy public venue. Under the IEEE 802.11 Wi-Fi standard, open public network names, known as Service Set Identifiers (SSIDs), have zero cryptographic authentication verifying who owns the name. Anyone sitting within 30 to 100 meters (100 to 330 feet) of you in a terminal lounge or hotel lobby can broadcast a wireless network named Airport_Free_WiFi, Starbucks_Guest, Marriott_Conference, cyangwa Inflight_WiFi.

Because client devices automatically select the access point broadcasting the strongest radio signal (measured in decibels relative to a milliwatt, or dBm) for a matching network name, an attacker sitting 5 meters (16 feet) away from your table easily overpowers the legitimate ceiling router 25 meters (82 feet) down the hallway. Even if you are already connected to the real hotel Wi-Fi, attackers frequently transmit spoofed 802.11 deauthentication ("deauth") frames that momentarily kick your phone or laptop off the legitimate router, forcing your device to automatically reconnect to the attacker stronger Evil Twin signal without you noticing.

Once your device associates with the Evil Twin access point, the attacker controls your local Dynamic Host Configuration Protocol (DHCP) gateway and Domain Name System (DNS) resolver, placing them in an Adversary-in-the-Middle (AitM) position between your device and the internet.

The four technical attack vectors on rogue Wi-Fi¶

While modern Transport Layer Security (HTTPS / TLS 1.3) and HTTP Strict Transport Security (HSTS) prevent a rogue Wi-Fi operator from trivially reading encrypted web pages on updated browsers, attackers bypass HTTPS using four specific mechanisms:

1. Captive portal Adversary-in-the-Middle (AitM) credential harvesting: Whenever you join a hotel, airport, or café network, your operating system expects a Captive Portal login window to pop up automatically. Because captive portals operate before your VPN connects, users are conditioned to trust whatever login box appears. Attackers host pixel-perfect clones of hotel, airline, Microsoft 365, Google Workspace, Apple ID, or social media login pages running behind real-time reverse-proxy frameworks (such as Evilginx2 or Modlishka). When you type your email password and 6-digit Multi-Factor Authentication (MFA) code into the fake portal to "Unlock Free High-Speed Wi-Fi," the reverse proxy relays your credentials to the real provider and steals the returned session authentication cookie right out of the stream.
2. Malicious Root Certificate Authority (CA) and MDM profile installation: A rogue captive portal may display a convincing corporate or hotel notice stating: "To comply with network security standards, please click Allow to install our temporary Wi-Fi SSL certificate / network profile." If you approve a root certificate or Mobile Device Management (MDM) profile, your operating system treats the attacker as a trusted Certificate Authority, enabling their proxy server to forge valid SSL certificates for any bank or email domain and decrypt all of your HTTPS traffic in real time.
3. Preferred Network List (PNL) and KARMA/MANA auto-join sniffing: When Wi-Fi is turned on in your pocket or backpack, your phone or laptop periodically transmits probe requests searching for networks you joined in the past. If you have "Auto-Join" enabled for open networks (such as attwifi, xfinitywifi, Boingo_Hotspot, cyangwa Hotel_Guest), rogue access points listen for those broadcast probes and dynamically spawn a virtual network matching whatever SSID your device is looking for, silently connecting your laptop or phone while it sits in your bag.
4. Local subnet lateral movement (SMB, AirDrop, mDNS, and LLMNR poisoning): Public Wi-Fi networks that fail to enforce AP Client Isolation place your laptop on the exact same Layer-2 local area network segment as every other stranger in the room. Attackers scan neighboring devices for exposed Windows Server Message Block (SMB) file shares, Remote Desktop (RDP), Secure Shell (SSH), open development web servers (0.0.0.0:3000 cyangwa :8080), or poison local Link-Local Multicast Name Resolution (LLMNR) and Multicast DNS (mDNS) queries to capture Windows NetNTLMv2 password hashes.

Comparing wireless connection methods by security level¶

Use this comparison table to evaluate your connection options when working away from home or the office:

Step-by-step recovery after an Evil Twin Wi-Fi incident¶

If you connected to a suspicious public Wi-Fi network, saw browser certificate warnings (NET::ERR_CERT_AUTHORITY_INVALID), or entered information into a sketchy captive portal, perform these four technical remediation steps in sequence over a trusted cellular connection:

Step 1: Audit and remove rogue configuration profiles and Root CAs¶

Before changing any passwords on your device, verify that the attacker did not install a persistent Mobile Device Management (MDM) profile, rogue VPN configuration, or Root Certificate Authority that would allow them to watch you type your new passwords:

• On Apple iPhone and iPad (iOS / iPadOS):
• Open Settings > General > VPN & Device Management. Unless your device is managed by your employer IT department, there should be zero Configuration Profiles listed here. If you see any unrecognized profile, tap it immediately, select Remove Profile, enter your passcode, and restart your phone.
• Next, open Settings > General > About, scroll to the bottom, and tap Certificate Trust Settings. Under Enable Full Trust for Root Certificates, verify that no user-installed root certificates are toggled on.
• On Android smartphones and tablets:
• Open Settings > Security & privacy > More security settings > Encryption & credentials > Trusted credentials and switch from the System tab to the User tab.
• Any certificate listed under the User tab was manually installed onto the device. Tap any unrecognized certificate and select Remove / Uninstall.
• Also check Settings > Security & privacy > More security settings > Device admin apps and make sure no unknown app has device administrator privileges.
• On Apple macOS laptops:
• Open System Settings > General > Device Management (or Privacy & Security > Profiles) and remove any unrecognized configuration profile.
• Open Keychain Access, inspect System and login keychains under the Certificates tab, and delete any unfamiliar certificate marked with a blue + custom trust icon.
• On Microsoft Windows 10 and 11 laptops:
• Press Win + R, type certmgr.msc, and press Enter. Expand Trusted Root Certification Authorities > Certificates and delete any rogue root certificate you were prompted to install.
• Open Settings > Network & Internet > Proxy and verify that Use a proxy server has not been pointed to an external attacker IP address or .pac script.

Step 2: Flush poisoned DNS and ARP network caches¶

When you connect to an Evil Twin router, the attacker DHCP and DNS server often hands your computer poisoned DNS records with long Time-To-Live (TTL) values so the redirect persists even after you switch networks. Clear your local network caches immediately: - On Windows: Open Command Prompt as Administrator and run ipconfig /flushdns followed by arp -d *. - On macOS: Open Terminal and run sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder. - On iOS and Android: Turn Airplane Mode ON for 30 seconds, then turn it off and reboot the phone. - In web browsers: Clear Cached images and files and Cookies and other site data for the past 24 hours.

Step 3: Terminate active session cookies and rotate passwords¶

If you logged into Google, Microsoft 365, Apple ID, social media, or any personal account inside the captive portal window or while connected to a network where a rogue certificate was active: 1. Changing your password alone is often not enough if the attacker reverse proxy stole your post-authentication session cookie or OAuth refresh token. 2. Log into each affected account security settings over cellular data, go to Active Sessions / Where You're Signed In / Devices, and click Sign out of all sessions. 3. Rotate the account password to a strong, unique 16-to-20-character passphrase stored in a password manager. 4. Check your email account Forwarding and Inbox Rules / Filters (in Gmail or Outlook) to confirm the attacker did not plant a silent rule auto-forwarding password reset emails or moving security alerts to Trash. 5. Upgrade your account Multi-Factor Authentication to a phishing-resistant Passkey or FIDO2 hardware security key (WebAuthn), which binds cryptographically to the genuine domain name.

Step 4: Freeze payment cards entered into captive portals¶

If you typed a credit or debit card number, expiration date, and CVV security code into a suspicious Wi-Fi portal: 1. Open your banking app immediately on cellular data and Lock / Freeze the card. 2. Call the fraud department number on the back of your card, report that the card details were compromised on a suspected phishing portal, and request a replacement card with a new 16-digit card number and CVV. 3. Ask the card issuer to reset any automatic Account Updater (Visa VAU / Mastercard ABU) tokens so unauthorized recurring billers cannot follow your new card number.

How Juice Jacking and weaponized USB cables work¶

Standard Universal Serial Bus (USB) connectors, including USB Type-A, Micro-USB, Apple Lightning, and USB Type-C, combine electrical power lines with bidirectional data transfer pins inside the same plug: - Muri 4-pin ** USB 2.0 ** ihuza, Pin 1 (VBUS) itwara + 5 volt yingufu za DC na Pin 4 (GND) itanga ubutaka bw'amashanyarazi, mugihe ** Pin 2 (D-) na Pin 3 (D+) ** gutwara ibimenyetso bitandukanye byamakuru hagati ya mudasobwa yakiriye nigikoresho gihujwe. - Muri 24-pin ** USB Type-C ** umuhuza, hamwe na bane VBUS amashanyarazi hamwe nubutaka bune, plug irimo D+/D- amakuru abiri, ane yihuta cyane yihuta TX/RX inzira zamakuru (kugeza kuri 40 Gbps), na ** Umuyoboro Iboneza (CC1/CC2) ** pin ikoreshwa mukuganira gutanga amashanyarazi hamwe ninshingano za host / ibikoresho.

** Umutobe Jacking ** ibaho mugihe umwanzi ahinduye ibyuma byihishe inyuma ya sock ya USB yishyuza rusange cyangwa agasiga umugozi wogukoresha amashanyarazi ** wacometse muri kiosque rusange kugirango abagenzi babikoreshe.

Ibyiciro bitatu byibitero bya USB byishyurwa¶

flowchart TD
    USBPlug["User Plugs Device Into Public USB Port or Unknown Cable"]
    AttackClass{"What malicious hardware is behind the port or inside the cable?"}
    Class1["1. MTP / PTP / ADB Data Exfiltration Host<br/>Hidden SBC (Raspberry Pi / microcontroller) requests<br/>file sync, photo access, or backup extraction"]
    Class2["2. BadUSB / HID Keystroke Injection Implant<br/>Cable head (O.MG Cable / Hak5) enumerates as a<br/>USB Keyboard + Wi-Fi AP and types shell commands"]
    Class3["3. Electrical Surge ('USB Killer') Capacitor<br/>Boosts 5V DC into -200V DC high-voltage pulses<br/>dumped directly into the device data lines"]

    Defense1["Mitigated if OS stays locked (USB Restricted Mode)<br/>OR if user taps 'Don't Trust' / uses a Data Blocker"]
    Defense2["Bypasses 'Trust Computer' prompts on unlocked screens<br/>because OS automatically trusts USB keyboards;<br/>prevented ONLY by never using unknown cables/ports"]
    Defense3["Destroys motherboard USB controller instantly;<br/>prevented by using your own AC wall charger or battery bank"]

    USBPlug --> AttackClass
    AttackClass -->|Data Host| Class1
    AttackClass -->|HID Keyboard| Class2
    AttackClass -->|Voltage Spike| Class3
    Class1 --> Defense1
    Class2 --> Defense2
    Class3 --> Defense3

1. ** Gukuramo amakuru no gukoresha nabi (MTP / iOS Pairing / ADB): ** Mudasobwa ihishe inyuma yicyapa cya USB ikora nka USB Host kandi igatangira guhana amakuru hejuru D+/D- pins. If a traveler unlocks their phone and taps "Trust This Computer" (iOS) or selects "File Transfer / MTP" or "Allow USB Debugging" (Android), the hidden computer can copy photos, contacts, messages, and unencrypted local backups, or side-load spyware via Android Debug Bridge (ADB).
2. HID (Human Interface Device) keystroke injection ("BadUSB" and O.MG Cables): Attackers leave modified cables (such as O.MG Cables) plugged into airport or hotel outlets that look and charge identically to genuine Apple, Samsung, or Anker USB-C and Lightning cords. Hidden inside the plastic connector shell is a microprocessor and Wi-Fi transceiver. When plugged into an unlocked laptop or phone, the cable tells your operating system "I am a standard USB hardware keyboard." Because operating systems trust keyboards without showing a "Trust This Computer" prompt, the cable immediately types hundreds of keystrokes per second (opening Terminal, PowerShell, or browser windows) when triggered over Wi-Fi.
3. Electrical hardware destruction ("USB Killer"): Modified cables or ports containing miniature DC-to-DC boost converters charge capacitors from the 5-volt power line and discharge 200-volt electrical spikes straight back down the data pins, permanently frying the USB controller chip and logic board.

Comparing public charging methods and hardware defenses¶

Intambwe ku yindi gukira nyuma yo gukekwa umutobe wa Jacking cyangwa USB¶

Niba wacometse terefone yawe cyangwa mudasobwa igendanwa mu cyambu rusange cya USB cyangwa umugozi utazwi, suzuma ibyabaye kuri ecran yawe hanyuma ukurikize icyiciro cyo kugarura:

Urugero A: Mugaragaza yawe yagumye ifunze, cyangwa ukande "Ntukizere"¶

IOS igezweho (kuva iOS 11.4.1) na Android (Android 9+) zirimo kwirwanaho byubatswe byitwa ** USB Byabujijwe Mode ** cyangwa ** Kwishyuza-gusa USB Default **. Iyo ucometse kuri terefone ifunze muri USB yakiriye amakuru, sisitemu y'imikorere ituma imirongo ya USB itandukana mu buryo bwumvikana kandi igakuramo ingufu z'amashanyarazi kugeza igihe ufunguye ecran hanyuma ukande ku buryo bweruye ** "Kwizera" ** (hanyuma winjize passcode yawe ubwa kabiri kuri iOS) cyangwa uhindure imenyesha rya USB kuri * "Kohereza dosiye." *

Niba utarigeze ukanda "Kwizera" kandi ntukoreshe umugozi utazwi mugihe ecran yawe yafunguwe: 1. Kuramo umugozi ako kanya. 2. ** Zimya terefone yawe burundu, utegereze amasegonda 30, hanyuma uyisubize kuri ** kugirango ukureho ububiko buhindagurika bwumugenzuzi wa USB. 3. Hindura kuri AC urukuta cyangwa banki ya batiri.

Urugero B: Wakanze "Wizere iyi Mudasobwa," ushoboza USB Gukemura, cyangwa wabonye imyuka yandika¶

Niba warafunguye terefone yawe hanyuma ugakanda kuri ** "Kwizera" ** kuri sitasiyo yishyuza rusange, ushoboza ** Android USB Debugging **, cyangwa ugacomeka umugozi utazwi muri terefone cyangwa mudasobwa igendanwa kandi ukabona umuzimu wandika: 1. ** Kuramo umugozi hanyuma uhite ushoboza uburyo bwindege (cyangwa uzimye Wi-Fi na data ya selire) ** kugirango uhagarike imitwaro yose yatewe kugirango itabaza seriveri yo hanze-igenzura. 2. ** Kuri iOS / iPadOS: ** - Kanda "Wizere iyi Mudasobwa" itanga inyandiko zifatika zifasha mudasobwa yakiriye kubona ibikubiyemo, amafoto, nibikoresho byabateza imbere. - Kugira ngo uhagarike mudasobwa zose zizewe kuri iPhone ako kanya, fungura ** Igenamiterere> Rusange> Kwimura cyangwa Kugarura iPhone> Kugarura> Kugarura Ahantu & Ibanga ** (bihanagura ibyuma byose byizewe bya mudasobwa ya USB), hanyuma urebe ** Igenamiterere> Rusange> VPN & Ubuyobozi bwibikoresho ** kuri porogaramu nshya yashizweho cyangwa porogaramu yabatezimbere. - Niba ukeka ko washyizeho spyware, subiza gusa amafoto yawe ninyandiko zawe mbisi hanyuma ukore byuzuye ** Kuraho Ibirimo byose na Igenamiterere , hanyuma ushoboze ** Uburyo bwo gufunga ** ( Igenamiterere> Ibanga & Umutekano> Uburyo bwo gufunga **). 3. ** Kuri Android: ** - Fungura ** Igenamiterere> Sisitemu> Amahitamo yabatezimbere ** (niba bishoboka), kanda ** Kuraho uburenganzira bwo gukemura USB **, hanyuma uhindure ** Amahitamo yabatezimbere OFF **. - Reba ** Igenamiterere> Porogaramu> Reba porogaramu zose **, ** Igenamiterere> Kugerwaho **, na ** Porogaramu ya Admin ya Admin ya porogaramu ** kuri porogaramu iyo ari yo yose itamenyerewe yashyizwe mu gihe cya USB. - Niba USB Gutanga uburenganzira byari byemewe ku cyambu kibi, subiza inyuma amafoto yingenzi na contact hanyuma ukore ** Uruganda rwo gusubiramo amakuru **.

Urugendo rw'iminota itanu rugenzura urutonde rwa terefone na mudasobwa zigendanwa¶

• ** 1. Sukura wabitswe imiyoboro ya Wi-Fi hanyuma uhagarike Auto-Join: ** Siba amazina rusange y'urusobekerane (Airport_Free_WiFi, Hotel_Guest, Starbucks, attwifi) uhereye kurutonde rwawe wabitswe hanyuma uzimye ** Saba Kwinjira Kumurongo ** na ** Auto-Join Hotspot **.
• ** 2. Shyiramo VPN yagenzuwe hamwe na Kill Hindura: ** Shyira umukiriya wa VPN uzwi ukoresheje ** WireGuard ** cyangwa ** OpenVPN **, hanyuma ushoboze ** Kica Hindura ** kugirango traffic traffic yose ihagarare niba umuyoboro wa VPN ugabanutse.
• ** 3. Gushoboza DNS ihishe (DNS-hejuru-HTTPS / DNS-hejuru-TLS): ** Emera DNS Yizewe / DNS Yigenga muri mushakisha yawe na sisitemu y'imikorere ukoresheje Cloudflare (1.1.1.1 / one.one.one.one) cyangwa Quad9 (9.9.9.9 / dns.quad9.net). Niba hoteri yafashwe mpiri ya hoteri yananiwe kwikorera muburyo bwambere, hindura DNS Yizewe kumasegonda 30 kugirango ukande "Emera Amabwiriza," hanyuma uhindure umutekano DNS na VPN yawe inyuma.
• ** 4. Funga gusangira imiyoboro yaho: ** Shiraho imyirondoro ya Windows Wi-Fi kuri ** Umuyoboro rusange **, ushoboze macOS ** Firewall + Uburyo bwubujura **, hanyuma ushyire ** AirDrop ** kuri ** Guhuza gusa ** cyangwa ** Kwakira **.
• ** 5. Gushoboza uburyo bwo kurinda amakuru ya USB: ** Kuri iPhone / iPad, genzura ** Igenamiterere> Isura ID & Passcode> Ibikoresho ** byahinduwe ** OFF ** (cyangwa ushoboze ** Lockdown Mode ** kuburugendo rufite ibyago byinshi). Kuri Android, kora ** USB kurinda amakuru ** hanyuma ukomeze ** Amahitamo yabatezimbere ** yazimye.

Ibibazo bikunze kubazwa¶

Inkomoko yagenzuwe¶

• ** Ikigo gishinzwe umutekano w’ibikorwa remezo n’ibikorwa Remezo (CISA, Amerika): ** * Umutekano w’umuyoboro w’itumanaho hamwe n’ibikoresho bigendanwa Urutonde rw’umutekano w’ikoranabuhanga ku bagenzi *.
• ** Ikigo cy’igihugu gishinzwe umutekano wa cyber (NCSC, Ubwongereza): ** * Wi-Fi rusange: Nigute wakwirinda umutekano ku miyoboro itizewe hamwe n’ubuyobozi ku mikorere ya Enterprises *.
• ** Komisiyo ishinzwe itumanaho rusange (FCC, Amerika): ** * Imenyesha ry'umuguzi: "Jacking Jacking" - Inama zo Kwirinda Malware no Kwiba Data kuri Sitasiyo rusange ya USB yishyuza * na * Wireless Connections hamwe ninama z'umutekano wa Bluetooth *.
• ** Ikigo cy’igihugu gishinzwe umutekano (NSA, Amerika): ** * Uburyo bwiza bwo kubona imiyoboro idafite insinga n’umutekano w’ibikoresho bigendanwa kuri televiziyo n’urugendo *.
• ** Ikigo cy’ubumwe bw’ibihugu by’i Burayi gishinzwe umutekano wa interineti (ENISA, Umuryango w’ubumwe bw’ibihugu by’Uburayi): ** * Amabwiriza yerekeye umutekano w’ibikoresho bigendanwa, Hotspots za Wi-Fi, no kugera kure *.
• ** Ikigo cyigihugu gishinzwe ubuziranenge n’ikoranabuhanga (NIST, Amerika): ** * Amabwiriza yo Kurinda Umuyoboro W’akarere utagira umuyaga (WLANs) (NIST SP 800-153) *.

Kuyobora¶

• Uburobyi bwa MFA n'umwanzi-hagati-hagati ya bypass
• Kutubahiriza amakuru no gusubiza ijambo ryibanga
• Uburobyi no kubangamira kugarura konti
• Gukorera kure kandi ufite umutekano muri hoteri
• Airport scams and transit safety
• Emergency phone numbers by country