Chris Krebs, former director of the Cybersecurity and Infrastructure Security Agency (CISA), appeared on "CBS Mornings" to discuss his new Masterclass and offer practical advice for protecting individuals from online scams, identity theft, and the growing threat of deepfakes. Krebs emphasized that while technology continues to evolve, so do the tactics used by cybercriminals, making vigilance more important than ever. He stressed the importance of using strong, unique passwords for every account and enabling multi-factor authentication (MFA) wherever possible. “MFA is one of the most effective tools you have,” Krebs said, noting that it can block the vast majority of automated attacks. He also recommended using a password manager to keep track of complex credentials without the risk of forgetting them. Krebs warned about the dangers of phishing—where scammers impersonate trusted entities through emails, texts, or social media. He advised people to be skeptical of unsolicited messages, especially those that create a sense of urgency or request personal information. “If it feels off, it probably is,” he said, urging users to verify the source before clicking any links or sharing data. The rise of deepfakes, particularly in audio and video, presents a new layer of risk. Krebs explained that scammers are using AI to mimic voices of family members or executives to trick people into sending money or revealing sensitive information. He recommended verifying requests for money or personal data through a separate, trusted channel—such as a phone call or in-person meeting—before taking action. He also highlighted the value of monitoring financial and credit accounts regularly, setting up fraud alerts, and using credit freezes when necessary. “You don’t have to wait for a breach to act,” Krebs said. “Proactive steps can prevent a lot of damage.” Krebs encouraged people to stay informed and take advantage of educational resources, including his new Masterclass, which covers real-world cyber threats and how to defend against them. “Cybersecurity isn’t just for IT professionals,” he said. “It’s a personal responsibility in today’s digital world.”