I try to be diligent about my default firewall policies and which apps access the internet. A simple-to-use tool called Firewally makes it easy.