Bitdefender has actively issued a comprehensive cybersecurity advisory aimed at journalists, highlighting the increasing risks related to phishing, device vulnerabilities, and source protection. The guidance specifically targets staff reporters, freelancers, and investigative journalists who frequently operate in high-risk environments. Moreover, it emphasizes that modern threats extend far beyond traditional hacking attempts and now include sophisticated spyware, impersonation, and AI-driven attacks.

To begin with, the advisory outlines a broader understanding of operational security. Experts stressed that journalists must carefully manage what others know about their personal and professional lives. Sensitive data such as home addresses, email accounts, phone numbers, IP addresses, and even details about family members can expose journalists to harassment, impersonation, or physical threats. Therefore, aligning defensive measures with the level of risk becomes crucial rather than treating cybersecurity as a limited concern.

Furthermore, phishing remains a dominant threat vector. Attackers increasingly rely on manipulation tactics such as urgency and trust instead of technical complexity. Spear-phishing campaigns, in particular, target journalists with personalized messages or fake documents. In addition, social engineering extends beyond emails, as attackers may also use phone calls or face-to-face impersonation to extract confidential information.

“Validating unusual requests through alternate channels before action,” said Bogdan Botezatu, Director of Threat Research and Reporting at Bitdefender.

In terms of device security, mobile phones—especially Android devices—were identified as a significant vulnerability. Malware or spyware can gain access to sensitive data, including messages, calls, and location details. Although iPhones generally face fewer routine threats, they are still susceptible to advanced zero-click exploits. Consequently, experts recommend maintaining strict physical control over devices, avoiding untrusted apps, and separating work and personal devices for high-risk assignments.

Additionally, account security plays a critical role. Reusing passwords across platforms increases exposure, as compromised credentials can be exploited elsewhere. To mitigate this risk, journalists should adopt unique passwords, use password managers, and enable multi-factor authentication. Authenticator apps and hardware keys offer stronger protection compared to SMS-based verification, which remains vulnerable to SIM-swapping attacks.

Notably, freelancers and investigative journalists face heightened risks due to the absence of organizational IT support. As a result, verifying suspicious communications through separate channels and compartmentalizing interactions becomes essential. Encrypted platforms like Signal and WhatsApp provide safer communication alternatives, while privacy-focused systems such as Tails OS help reduce digital footprints.

When it comes to travel, border crossings present additional challenges. Devices may be inspected or seized, making it vital to store sensitive data in encrypted formats and consider using sanitized or burner devices. Experts also advised disabling biometric unlocking in such scenarios.

Finally, the advisory highlights the growing risks associated with AI tools. Entering sensitive information into AI systems could lead to unintended exposure or misuse. Deepfake technology further complicates the landscape by enabling realistic impersonations.

“Balancing paranoia with operational practicality,” said Botezatu.

Recommended Cyber Technology News:

To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com  



🔒 Login or Register to continue reading