....
any thoughts? especially for more "umbrella" coverage.
Backups, obviously. But be watchful - you can back up bad stuff as well as your valuable stuff & restoring won't help you then.
My approaches, for what they're worth... (I don't use browser-based e-mail readers because of having so many e-mail accounts personal & business)
I use e-mail clients that are less common, and that allow downloading e-mails as plain text rather than html. That way, you don't go careening around the net downloading embedded images etc. You can click a button to trigger all that when you're sure the e-mail is legit. I've used an ancient version of "Barca" for years.
All my e-mail is read using POP3 protocol. Since this is not especially safe I wrote a program I called the "Popsniffer" years ago that looks at the inbox before actually downloading anything. This way you can see the raw e-mail with its actual links etc. and can also get basic info on any attachments and delete anyting you don't want without ever downloading it. There is an excellent commercial program available that does the same thing called "Mailwasher", which I also use. I don't read anything into an e-mail client until I've looked at with Mailwasher.
My business requires keeping reasonably up to date on Windows updates. I download them after they've been out for a couple of weeks. Windows updating is risky in itself but overall it's the lesser evil.
Obviously, use a virus checker and scan your network for open ports occasionally.
Trust no one regarding opening attachments. If I get an e-mail with an attachment not described in the senders words within the e-mail, I don't open it.
Sometimes it's good to be paranoid.