We’re all guilty of it: connecting to free public WiFi. Whether it’s at the coffee shop, hotel or airport, the temptation to check e-mail and surf the web is just too strong to resist. So BEFORE you connect to any free, public WiFi, make sure the connection is legitimate.
It’s not uncommon for hackers to set up fake clones of public WiFi access points to try and get you to connect to THEIR WiFi over the legitimate, safe public one being made available to you. Before connecting, check with an employee of the store or location to verify the name of the WiFi they are providing. Next, NEVER access financial, medical or other sensitive data while on public WiFi. Also, don’t shop online and enter your credit card information unless you’re absolutely certain the connection point you’re on is safe and secure. In other words, DO NOT use public WiFi!
Do you want others to see files that are on your device when you connect? Probably not. In that case, turn off File and Printer sharing. It is a good idea to turn off your WiFi when not in use. Why be connected and leave that door open?
There is something called the Krack Attack. This is where WiFi access points have vulnerabilities that allow hackers to “inject” their own DNS server into someone’s public WiFi. Then, they can point you to the site of their choice rather than what you wanted.
As always, keep your software up to date and your computer patched. Go to secure sites which display the https:// in the address bar to make sure they are secure. You can also bring your own Internet access through your phone or a Wireless Hotspot. There are also companies out there which offer VPN (Virtual Private Network) services if you do not have your own.
As we said earlier, use a system you know and be careful where you go. Only access what you need. Know your surroundings and use common sense!
BTT can set up a way for you to protect and improve your network and your data; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>There is no doubt about it – Windows 10 is here, and previous Windows versions will eventually be dropped from Microsoft support.
Anyone who buys a new PC other than a Mac will most certainly be using Windows 10. So let’s dig in and take control!
NOTE! – DO NOT make these adjustments on a company-owned PC! You will become very unpopular with your in-house PC support people!
ALSO – Much of this discussion applies to Windows 10 Pro . Windows Home users will need to make some changes via regedit, which deserves a page of its own.
Windows 10 is a response to much dissatisfaction with Windows 8 and 8.1, just like Windows 7 was a response to Vista. Microsoft has done a nice job of letting the user decide whether to use a Windows 7-like PC desktop, or a Windows 8-like icon interface.
These two options are called desktop mode and tablet mode:
Desktop Mode
Windows 10 will, by default, determine which mode is appropriate for your hardware. If this isn’t satisfactory for you, you can force Desktop mode like this:
Click on Start – Settings – System –Tablet Mode –When I sign in – Use Desktop Mode
Click Start – Settings – Personalization – Start – Use Start Full Screen – Off
Log out of Windows and log back in. – you will be in Desktop mode.
Tablet Mode
If you decide to use Tablet Mode, the process is similar:
Click on Start – Settings – System –Tablet Mode –When I sign in – Use Tablet Mode
Click Start – Settings – Personalization – Start – Use Start Full Screen – On
Log out of Windows and log back in. – you will be in Tablet mode
Restore Control Panel
If we are going to make changes to Windows, we need ready access to the settings. The old control panel is still the best way to go, but Microsoft has not given us easy access. To get control, just do this:
Move cursor to an empty area on the desktop.
Right-click, then click New – Shortcut and navigate to C:\Windows\System32\control.exe
Click Next, then enter a name for the shortcut. Click Finish. Now you can quickly get to control Panel.
Create Restore Points
The regular creation of Restore Points is one of the most powerful safeguards you can use to protect your computer. Proper creation and use of Restore Points allows you to restore a computer to a time in the past, without deleting any recently created documents. Even a computer that refuses to boot can be rescued.
Begin by searching for ‘restore point’ in the Windows search box (Cortana). Click on ‘Create a restore point’.
The System Properties box will open. Click on the drives(s) to be protected (usually C:\) and then click ‘Configure’. The System Protection box will open. Select ‘Turn on system protection’. If desired, adjust the Disk space Usage setting. Click ‘Apply’ and ‘OK’. Then click ‘Create’ in the System Properties box. You have created a Restore Point.
]]>
If you’re using Dropbox, OneDrive, Google Drive or other consumer-grade file sync and sharing cloud applications, listen up! These applications pose a huge threat to your company because company data can be spread far and wide without central oversight of what information is being shared with whom. Further, over 7 MILLION Dropbox accounts have been hacked, giving cybercriminals a path into the company’s network.
This is even MORE important if your company has access to and/or stores financial, medical or other sensitive data. Using file-sharing applications like these are a clear and direct violation of data breach and compliance laws. Bottom line, DON’T USE THEM FOR COMPANY DATA and use only company-approved, business-grade file-sharing applications.
There is growing concern that there is too much company data floating out in the cloud without the protection of the IT department. No one knows what is really out there and how secure the data may be. While File sharing is common on company network servers and it helps boost efficiency, who is protecting that data on Dropbox?
Things to consider:
Is the Data encrypted at rest?
Is the Data encrypted in transit?
Who has access to the Folders?
Who is controlling the Folders and Files?
Is the service Business Grade?
Do you keep business and personal data in separate accounts?
Are your accounts set to Private and only shared with authorized Users?
Do you delete the data once the project is completed?
If it is Company data, it should be controlled by the company IT Department. The IT Department and the CIO are the ones responsible for the safety and security of the company’s data. You should let them do their job. That way, proper standards can be put in place. You would have chaos if every group got to decide how they will share files. Yes, it is inconvenient to have to request the setup or access to a Folder but it beats having sensitive data exposed to hackers.
In a 2012 study by Watchdox Inc. and the Ponemon Institute involving 622 IT and IT-security practitioners, we found 90% admitted that their companies experienced the loss of sensitive or confidential documents at least once over the previous 12-month period. Larry Ponemon, Ponemon Institute
In their Blog, Interlinks stated “During a routine analysis of Google AdWords and Google Analytics data mentioning competitors’ names (Dropbox and Box), we inadvertently discovered the fully clickable URLs necessary to access these documents that led us to live folder contents, some with sensitive data. Through these links, we gained access to confidential files including tax returns, bank records, mortgage applications, blueprints and business plans – all highly sensitive information, some perhaps sufficient for identity theft and other crimes.”
The financial ramifications of such losses can be staggering. Some estimate that it can be $200 per compromised record. What if you have 5000 or more records in your cloud sharing app? You need to consider these things and put a policy in place.
Most of the discussion is about companies with an IT Department. What if you are a small company with no such department or expertise? You should work with a local outsourced IT Provider who can help you manage these risks.
BTT can set up a way for you to protect and improve your network and your data; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>So, you’re in the car on the way home from Starbucks, basking in the glow of consuming your triple-shot, low-foam, extra-hot pumpkin-spice latte when you suddenly realize your laptop has gone missing. You drive back like the caffeinated lunatic you are, only to discover no one has turned it in. What do you do? That depends on what precautions you have (or haven’t!) taken.
First, if you’ve properly encrypted your data, password-protected the access to your device and shut down and logged off all key applications, you’ve got a bit more time to respond. But the first thing to do, whether or not you’ve taken those precautionary measures, is to notify your IT department (us) that you’ve lost your device. That will allow us to change passwords and lock access to applications and data a thief may gain access to via your unprotected laptop. We can also remotely wipe your device (if you have that service) to make sure no one will be able to gain access to the data stored on your computer. (Which is also why it’s CRITICAL to back up your data on a daily basis!)
Next, change ALL the passwords to every website you log in to, starting with any sites that contain financial data (your bank account) or company data. If your laptop contained medical records, financial information or other sensitive data (like social security numbers, birthdays, etc.), then you need to contact a qualified attorney to understand what you may be required to do by law to notify individuals who may be affected.
Quite simply, an ounce of prevention is worth a pound of cure; so make sure you’re engaging us to encrypt and back up your data, as well as put remote monitoring software on all mobile devices. Put a pin-code lock, fingerprint or password requirement to access a device after 10 minutes of inactivity and get into the habit of logging out of websites when you’re done using them.
Do you log out of things or do you just close the lid? Many people just close the lid so things will be where they left off. If your device is secured, you will have to enter credentials to get back in. If not, it will just open back up to the place you left off giving whoever holds the device access to anything you left open. That is very scary. I do not have data on my laptop. I use it to access the data store on my network and log off when done. That way, If I lose the device, my data is not at risk.
My wife calls me a creature of habit. I like to call them routines. One routine is to not put things down on a table. My phone is always in its holster when I am not using it. Keep things together. Put them back in your bag as soon as you are done using them. Another good routine is to check the area in which you were working for anything of yours before leaving. That way, you can make sure you have all your devices and avoid panic and maybe a speeding ticket. As we said, an ounce of prevention is worth a pound of cure!
BTT can set up a way for you to protect and improve your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>
Like it or not, PC manufacturers LOVE to stuff your brand-new PC full of “free” applications (they get paid to do it, so you’ve got a slim chance of getting one without a side of spamware). But clutter is the enemy of a speedy PC, and if you’re not using a particular software on a regular basis, it’s best to REMOVE it completely. That way you don’t have it sucking up processing speed AND leaving the door open to hackers and malware.
I especially hate games! Since, most of the time, I deal with someone’s business computer, games get in the way. Also, they are a target for hackers. Many people will download free games not knowing who the publisher really is. Next thing you know, we have an infection. Dr. Bob, help!
Many of these “free” programs start when Windows starts using your valuable resources. A business class PC usually has less unwanted clutter as they know your purpose is to get your work done. Also, when you purchase a PC through an IT professional company, they usually remove unwanted programs as part of the onboarding process making sure you get the best performance out of your PC.
BTT can set up a way for you to protect and improve your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>There are thousands of hackers who get up every morning with ONE goal in mind: to find a new vulnerability in a commonly installed software (like Adobe, Flash or QuickTime) to access your computer. That’s why these companies frequently issue patches and updates for KNOWN security bugs; and once a KNOWN vulnerability is announced via a patch, hackers get to work like crazy trying to figure out how to use the vulnerability and access those users who are lazy about installing updates. That’s why it’s important to update installed software programs as soon as possible.
Of course, if you’re an IT Wellness Care client of ours, we’re monitoring your network for these updates and handling them for you; but your home computers, smartphone and other devices that may NOT be under our protection probably need a little attention.
Why do companies send out patches? According to Wikipedia, “A patch is a piece of software designed to update a computer program or its supporting data, to fix or improve it. This includes fixing security vulnerabilities and other bugs, with such patches usually called bugfixes or bug fixes, and improving the usability or performance.” Many people never install the patches. All the hackers have to do is wait for an announcement from Java or Adobe about a patch and they go to work exploiting that vulnerability on unpatched machines. Cisco issued a patch for their firewall software vulnerability. MIT.edu asks “Why patch? If your computer seems to be working fine, you may wonder why you should apply a patch. By not applying a patch you might be leaving the door open for a malware attack. Malware exploits flaws in a system in order to do its work.”
There is one thing to consider before applying patches. Some patches have unintended consequences. In their attempt to correct something, the patch causes another issue they weren’t intending. One of the services your IT Managed Service provider should offer is patch review and management. There are services which review updates and patches to make sure they fix what was needed and do not have unintended consequences. Once an update is cleared, it can be safely installed on all your systems. Ask about IT Wellness Care which includes patch management.
BTT can set up a way for you to protect your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>
Here’s a sneaky trick used by many hackers: they purchase and set up a fraudulent website that is a close misspelling of a legitimate one. Example: www.faceboook.com instead of www.facebook.com. All you have to do is accidentally fat-finger ONE letter in the URL and up pops a very legitimate-looking fake copy of the site you were trying to get to – and the login and links are full of key-logger malware and virus landmines waiting for you to click on them. This is particularly important for any social networks you belong to. Once you are on their site, you are subject to all kinds of pitfalls. The idea is to avoid these sites altogether. By Bookmarking the actual site in your favorites, you can avoid typos and browse more safely.
I have mistakenly typed goggle.com for Google and gone some weird place.
Malware Wiki says “Goggle was a typosquatting site appearing when a user mistyped the URL “google.com”. The website was active from 2004 to 2008. Once it was accessed, the domain would instantly download several viruses and other malware along with various pop-ups, some of which were pornographic.”
Caution is needed on the Internet. While there is much information to be had out there, much danger lurks. There are those who seek to steal and kill and destroy. You must be diligent to keep them away from you and yours. Be vigilent! Type carefully. Use a good Internet Security Suite. Consider a hardware firewall with web content and application filtering. You could also institute a DNS Filtering client which would filter web content. There are things you can do to make Internet browsing safer. Do some research. Read our Report. See what makes sense for you.
BTT can set up a way for you to protect your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>You’re a hardworking team player who likes to check e-mail and get a few things done after hours – all good! But here’s something you might not know: you should never access company data, file servers or applications through personal devices and home PCs that are not properly monitored by us. Why?
If you and your kids are using a home PC to play games, access Facebook and surf the web AND you’re not diligently updating and monitoring the antivirus software, firewall and security patches on the machine (and who does, honestly?), then there’s a high probability you’re infected with spyware or malware. Since most malware is designed to operate in total stealth mode undetected, you won’t know that some hacker is watching you log in to your company’s file server or key cloud application containing critical, sensitive data and capturing your login with a key logger. Bottom line, ONLY use company-approved devices that are properly protected and monitored to access company data; and if you just can’t help but take work home, let your IT provider know so they can set you up with a SECURE way to work remote or from home.
I don’t share my computer with anyone because I do not want anyone visiting sites or adding games to my computer. I don’t share well. I have seen too many bad things happen because most people are not careful where they go.
When Remote Access is managed, there are precautions that can be taken. As we said earlier, all the latest patches and definitions must be in place. One of the things that can be done is setting up two Factor Authentication (2FA) which requires a second piece of information to log in to a network that changes every few minutes. You can also set up a VPN (Virtual Private Network) which will encrypt the data transmitted back and forth to prevent interception. Or, you could use a company device that is configured with all these things and managed to protect the network.
If you are going to let associates use their own device (BYOD), you must have a detailed policy in place explaining your requirements for allowing access to your network. One of those requirements would be a way to manage and erase any company data that appears on anyone’s personal device. Your IT provider should be able to help you with an Acceptable Use Policy to your team. BusinessTechTeam can help you establish an AUP in your company if you need us to assist. Call or write us to inquire.
BTT can set up a way for you to protect your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>
Are you feeling insecure? Scams can make you feel that way! BusinessTechTeam can take away some of the worry.
A phishing e-mail is a bogus e-mail that is carefully designed to look like a legitimate request (or attached file) from a site you trust in an effort to get you to willingly give up your login information to a particular website or to click and download a virus.
Often these e-mails look 100% legitimate and show up in the form of a PDF (scanned document) or a UPS or FedEx tracking number, bank letter, Facebook alert, bank notification, etc. That’s what makes these so dangerous – they LOOK exactly like a legitimate e-mail. So how can you tell a phishing e-mail from a legitimate one?
Here are a few telltale signs…
We have a whole presentation on Cyber Security which details a lot of these scams and ways to prevent becoming a victim. Common sense rules. Education for yourself and your associates will prevent many costly errors. Also, write for our Report on Cyber Security and read it. Then, call us and we can perform a 27 Point Network Security Audit to help you feel more secure.Prevention is always the best method. Arm yourself with knowledge and the tools to protect yourself in the new digital war.
BTT can set up a way for you to protect your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
Copyright © 2018 BusinessTechTeam, All rights reserved.
]]>Not too long ago, the CryptoLocker ransomware virus was all over the news, infecting over 250,000 computers in its first 100 days of release (at least that’s the number reported – the real numbers are probably MUCH higher). The threat was fairly straightforward: Pay us or you’ll never get your data back.
Ransomware, like the CryptoLocker attack, works by encrypting your files to prevent you from using or accessing them. After your files are compromised, the hackers behind the attack then pop up a demand screen asking for payment ($400 to $2,000+) within a set time frame (e.g., 72 hours or three days) in order to get the key to decrypt your files. The last CryptoLocker virus forced many business owners to lose data or pay up since there was no other way to decrypt the files. What about WannaCry and so many more like it? And the list goes on.
Obviously the best way to foil a ransomware attack is to be incredibly diligent about IT security; but with hundreds of thousands of new attacks being created daily, there are no guarantees that you won’t get infected. Therefore, it’s critical to maintain a full, daily backup of your data OFF-SITE so that IF you do get whacked with ransomware, you can recover all your files without having to pay a thin dime; and don’t forget to back up off-site PCs, laptops, remote offices and third-party software data stored in cloud apps as well!
Are you interested in Disaster Recovery or Business Continuity? I thought so!
There are several things you need to do to protect yourself, your company and make sure business will continue!
The first is education. Train your people to recognize social engineering schemes and phishing scams. Second, you need Internet Security software that blocks suspicious activity. Third, you need a Firewall. There are hardware and software firewalls. We recommend a hardware appliance. Fourth, we recommend protection of your DNS adventures. DNS (Domain Name Services) is how your computer finds something on the internet. For instance, you type google.com and DNS tells your computer to go to 172.217.12.206. What if you filtered the DNS to make sure it doesn’t take you some strange place?
Fifth, make sure you have total Data protection that happens automatically in the background without relying on human input. The client is the weakest link in the backup chain! It is also important to have versioning on your Backup. Our vendor prevents any encryption of their stored files so ransomware cannot attack your data. What if you could just turn back the clock to an image taken before the attack and pick up from there? No hassle, No downtime, No problem!
You can create a safe environment for your business to continue. There is an investment to put all these things into place. However, sometimes (always), “it’s better to invest a little more than you planned rather than a little less than you should have.” Zig Ziglar
Nothing is foolproof! BusinessTechTeam can offer presentations on Cyber Security and training on what not to do. There are Best Practices you should institute in your company in our Security Report. Hackers are creative! We feature products which can help prevent attacks and help you continue if something new does get in to your network. And odds are it will!
BTT can set up a way for you to protect your network; call our office if you would like us to set that up: 888.477.9895.
Want to know more about Security? Click here to get our report on 7 Urgent Security Protections Every Business Should Have in Place Now.
]]>