As journalism becomes an increasingly digital practice, the data and communications of investigative journalists have become vulnerable to hackers, government surveillance and legal threats. But what are these vulnerabilities – and what steps have investigative journalists taken to protect themselves?