[RKDinOKC]

We have Multiple Factor Authentication on our Mail and VPN connections. You go through standard SSL logins which can now be hacked on shared wifi with KRACK. But then you must also do a second authentication using a third device on another network like entering a code that is texted to a phone. The second authentication code changes with every login. So even if your password is monitored and hacked they cannot get in unless they can also monitor your third device that is on another network.

But even so, like Stijn says, YOU are your last line of defense. Think before you click. What that means is make sure anything you open or link you click is from whom you think it is, even if that means you have to Phone a known number and confirm if they sent you the link or file. Now that is even if the file, picture, or link was texted to you.

The scary thing is that things have gotten to the point that hackers can get to anything on your computer once they get malware onto your computer and exploit the recently discovered Meltdown and Specter processor flaws that let them break the application layer boundaries Stijn listed.