Lessons About Cybersecurity That You’ve Learned Because of Pandemics

Because of the coronavirus, countless events, gatherings, conferences, and other social gatherings have been cancelled. Since most of the technology is made by China, the supply chains have been in put in jeopardy since the outbreak began. It appears like even the tech industry can’t avoid getting drawn into the gravity of COVID-19.

Although this pandemic is not hitting everybody yet with deadly force, over time, it may lead to some major disruptions for various individuals and organizations. This is not to downplay the pandemic’s severity, but there are a few useful parallels to how you can manage cyberthreats.

Containment Isn’t Perfect

Issuing a quarantine is among the first moves during an outbreak to contain the spread of the virus. Simply put, nobody is allowed to leave their homes so that the threat would be bottled up. However, quarantines tend to leak and the virus will start to spread anyway. Containment methods leak, just like the most common cybersecurity controls.

You need to evaluate what is involved in the pandemic. It’s just a range of strategies that are applied in different ways. Infected individuals are isolated, which is just like how bot detection and anti malwaretools lock down certain machines. Specific quarantine guidelines are issued on geographic areas, which are similar to how you use network segmentation through firewalls. Logging and monitoring is similar to contract tracing while a travel ban is like decryption and traffic inspection to prevent threats from gaining access to your network.

Does this mean you should get rid of your firewall? Of course not. Quarantine is not expected to prevent a pandemic right away. Just like firewalls, these controls are all about reducing and managing the threat. This could mean cutting bock the flood to a river. It could mean providing you with more data about the velocity, size, and the nature of the ongoing threat. Containment could give you time so that you could prepare your other defenses.

Time Is A Precious Resource

In cases when threats are affecting crucial assets and services, time is your most important resource. Whether it is a pandemic or a online threat, every second have to count. Tools such as containment will provide you with more time. However, you also have to use other tools. You need intelligence to inform you on what they look like, what threats are coming, and what assets may be affected. You need thoughtful analysis and data to show how you can make use of your time. You have to plan, and then prepare, as well as practice ahead of time so that you will have the correct responses and tools prepare when something goes crazy.

A part of the needed preparation and making use of your time well is to ensure that the executives are briefed on the possible threats and the potential consequences. This too, will need time and during a crisis, you might not have enough to explain or to correct misconceptions.

Call SpartanTec, Inc. in Fayetteville for more information about cybersecurity.

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Cybersecurity’s Top Priorities Amid The Coronavirus Pandemic

Chief information security officers or CISOs have two main priorities as the world continue to face today’s global health crisis. These are maintaining business continuity and protecting against new online threats. Listed below the most effective cybersecurity strategic principles that could help address these concerns.

The amazing efforts of several businesses to protect their employees and serve clients during the coronavirus crisis have also raised their exposure to online threats. The large scale move to work from home, increased activity on client facing networks, as well as greater utilization of online services provide fresh opportunities, which cybercriminals managed to exploit quickly.

Addressing The Challenge

Although several CISOs as well as other executive have turned to their experience with previous crises as to how they’ll respond to the initial stages of the outbreak, the unpredictable duration and vast scale of this global health crisis is extremely unusual. There’s no playbook that chief information security officers can turn to for guidance. Nevertheless, the CISOs as well as senior cybersecurity managers have provided a list of practices that can be helpful during this time.

Focus

The technology and security risk departments should focus on supporting the appropriate capabilities, service rollouts, as well as features that are crucial to the business operations.

Test

In case your organization has any kind technology or security risk plans like plans for business continuity, talent succession, vendor succession, and disaster recovery, then you should test them immediately. In case your business does not have enough plans set in place, create one and make sure to test them out right away. You should know if the risk response of your organization is efficient and effective.

Monitor

Think about mustering all of the available resources to assist you with the monitoring, which allows risk response as well as recovery to start. Stepped up monitoring aspects may include remote monitoring of the collaboration tools, monitoring networks for the novel and new strains of malware, as well as monitoring staff as well as end points to catch information related incidents before they become an operational risk.

Balance

Teams taking care of cybersecurity Fayetteville are most likely to get a lot of urgent cybersecurity rule exception requests that will let teams somewhere else in the firm to get the work done.

Although CISOs have a tendency to deny these requests to prevent risks, they should also remember the importance of ensuring business continuity during a challenging and fluid time for their coworkers. In order to support the continued operations, CISOs have to endure some high risk during the short term by providing waivers and relaxing a few control temporarily. 

An accommodating strategy would encourage cowokers to create smart risk trade offs. Having said that, CISOs must never let such exceptions to weaken the risk posture of the organization permanently. In case the chief information security officers provide waivers or if they relax the controls, they must establish a formal assessment, review the processes, and execute time limits to encourage reevaluation on a periodic basis or restrict the exceptions to specific user groups.

Call SpartanTec, Inc. if you need the help of an expert IT team to assist you in setting up the most effective cybersecurity measures for your company.

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

How Important Are General Software Updates And Patches

You’re already used to all those tiny pop up windows. They remind you about software updates that are readily available for your mobile device, tablet, laptop, or computer. Some might be tempted to simply click on that remind me later button. But don’t! Or at the very least, don’t put it off for too long.

Software updates are very important especially when it comes to your cybersecurity and IT security. The sooner you install the update, the sooner you will feel confident that your device is secure, until the next update is released.

Why are software updates important?

Software Updates Do Many Things

Software updates provide a lot of advantages. It is all about changes. These may include fixing security loses that may have been identified and repairing or getting rid of computer bugs. Updates could add more features to your devices and get rid of outdated ones. While you are at it, it is also highly recommended that you make sure that the operating system is up to date.

Software Updates Patch Security Problems

Security flaws or software vulnerabilities are the favorites of hackers. A vulnerability in a software is a security weakness or hole that is found in an operating system or a software program. They can take advantage of such weakness by writing the code to fully target the vulnerability. The code will be packaged into a malware, which also called malicious software.

Software Updates Could Protect Your Data

You most likely keep a lot of personal information and documents on your devices. Your confidential information, from bank account details to emails, these are all important to cybercriminals.

They can use it to do crimes in your name or you could sell it on the dark web so others could do the bad deed. If it is a ransomware, the hackers may encrypt your data. You may have to pay a ransom to get an encryption key and unlock your data. But there is also a possibility that you have already paid the ransom but you still won’t be able to get your files back. To avoid all these, be sure to update your operating system and your software so you can keep hackers at bay.

It Is Not Just About You

Most of the time, cybersecurity is about you but you also need to think about other people. If your device will catch a virus, you may pass it on to people you know like your business associates, family, and even friends. That is why you should keep your software and the systems updated all the time. You need to install a trusted anti-virus program that can help keep your computer or other devices secure.

You Deserve The Best

Updates do not just patch the security flaws but they could also improve existing features or add new ones. Your software program or operating system will become more stable and avoid crashing. It could help boost performance and improve the speed. You have the option to ignore these update reminders but you are missing out on a lot of things, especially your cybersecurity in Fayetteville.

Call SpartanTec, Inc. if you need help in setting up the appropriate security measures to make sure you're protected whenever you go online once you start working at home. 

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

New Android Malware Can Get Past Two-Factor Authentication

Since 2010, Google has been doing its part to help keep its massive user base safe. They introduced a small but critical service called Google Authenticator, which is used by a number of online accounts as a two-factor authentication layer.

Google launched the service as an alternative to SMS-based one-time pass codes.

While SMS-based codes are better than nothing, they are the lowest common denominator in the world of 2FA, and are problematic for a number of different reasons. The main advantage Authenticator has over its SMS counterpart is that Authenticator's randomly generated codes are contained within the user's device itself, and never travel through insecure mobile networks.

Although Authenticator generated codes are widely regarded as being superior to SMS-based codes in terms of overall security, they're certainly not invulnerable, as hackers have recently proved. Researchers from ThreatFabric recently announced that they've spotted a new strain of the Cerberus Trojan in the wild that is capable of stealing 2FA codes generated via the Authenticator application.

If there's a silver lining in the research team's findings, it is the fact that the strains they've uncovered seem to be test versions of the Trojan That means the new capabilities aren't yet widely available. Unfortunately, it's just a matter of time before the new strain is out of testing and starts seeing widespread use.

All that to say, that this is a serious threat. Be sure your employees are aware of the risks and dangers. Too often, people get comfortable after enabling 2FA and develop a false sense of security thinking that they're essentially invulnerable.

They aren't. No one is. While this is the first piece of malware we've seen that can counter 2FA, it certainly won't be the last. Stay vigilant. It's going to be a tough year on the security front.

Keep your devices, systems, and network secured from hackers and other online threats. Let SpartanTec, Inc. set up the most effective security measures according to your business needs.

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

New IRS Tax Scammers Use Personal Data For Big Returns

Recently, the Department of Justice brought charges against Babatunde Olusegun Taiwo for using personal information acquired on the Dark Web. He used the information from data breaches to file fraudulent tax returns with the IRS.

He was able to gain enough information to file more than two thousand income tax returns that attempted to claim more than $12 million. The IRS paid out nearly $900,000 before the authorities caught wind of the scam and shut it down, arresting the St. Louis man and sentencing him to four years in prison.

The Special Agent in charge of the investigation, Thomas Holloman, had this to say about the matter:

"We will continue to pursue criminals who prey on innocent victims and we will continue to enforce our nation's tax laws. Today's sentencing should send a clear message to would-be criminals - you will be caught and you will be punished."

Taiwo isn't the only criminal to have recently been caught by the Department of Justice's drag net. In a separate announcement, the DOJ released details of the case against Hitesh Madhubhai Patel, an Indian national. Between 2013 and 2016, he leveraged call centers to scam victims out of millions of dollars by impersonating the IRS and USCIS. He was threatening victims with deportation, arrest, and jail time unless they paid bogus fines over the phone to his employees.

Patel is due to be sentenced on April 3rd of this year and could face up to twenty years of prison time, in addition to fines of up to a quarter million dollars.

Kudos to the Department of Justice for bringing these crooks to justice. One has to wonder though, for every criminal caught and jailed for activities like these, how many more remain uncaught? Too many, but progress is progress!

Call SpartTec, Inc. in Fayetteville if you need the help of IT experts in setting up the most effective methods to secure your devices, network, and sensitive business information.

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

CoronaVirus Scare Is Being Used By Scammers To Trick People

There is no low that hackers and scammers won't stoop to.

The US Federal Trade Commission (FTC) has issued a warning about a worldwide scam in progress relating to fears surrounding the CoronaVirus. The FTC's announcement speaks for itself.

Their announcement reads, in part:

"Scammers are taking advantage of fears surrounding the Coronavirus. They're setting up websites to sell bogus products, and using fake emails, texts and social media posts as a ruse to take your money and get your personal information.

The emails and posts may be promoting awareness and prevention tips, and fake information about cases in your neighborhood. They also may be asking you to donate to victims, offering advice on unproven treatments, or contain malicious email attachments."

Even worse, it appears that there are multiple campaigns like this, running in tandem.
Francis Gaffney is the Director of Threat Intelligence for Minecast, which is one of several companies tracking the issue.

Francis added this:

"The sole intention of these threat actors is to play on the public's genuine fear to increase the likelihood of users clicking on an attachment or link delivered in a malicious communication to cause infection, or for monetary gain."

In short, this is about as despicable as it gets. Then again, hackers and scammers have been known to send emails targeting children, so it shouldn't come as a great surprise.

Even so, the standard precautions apply here. Unless you know and trust the sender of a communication, even if it's about something scary and important like the CoronaVirus, don't click on links or open attachments. You never know where it might take you or what type of malware might end up on your system. Better safe than sorry, and you can always get CoronaVirus information from official sources.

Protect your business from scammers and hackers. Call SpartanTec, Inc. in Fayetteville now and let our team help you with your cybersecurity needs. 

SpartanTec, Inc.
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Kids Can Bypass Communication Limit Feature On iOS 13.3

If you have children that own Apple devices, be aware that the latest update for iOS 13.3 included a feature called Communications Limits.

It is designed to allow parents to set up parental controls to keep their kids from speaking to, texting with, or Facetiming with anyone who's not already in their contacts list.
It's a small but important feature addition. Hackers, scammers, bullies, or strangers can easily get phone numbers belonging to children. Even worse, they can then harass or threaten them in a variety of ways.

Unfortunately, there were problems with the implementation of the feature. For one thing, a bug in the code allowed kids to add a new number to the address book contacts list and use that as a springboard for bypassing the restrictions imposed by the software.

The bug was discovered by staffers at CNBC who were able to show that the feature worked fine on devices backed by iCloud, but not other services like Google's Gmail.
Todd Haselton of CNBC had this to say about the discovery:

"A child should not be able to add the contact to the iPhone's address book without their parent entering their PIN first if the feature is working properly."

That's a succinct description of both the problem and its solution. Right now, Apple is scrambling to generate a fix. Although the company hasn't said as much, there's a very good chance that by the next patching cycle, the company will have a fix in hand.

If you were counting on the feature, one thing you can do until the fix is ready is to make use of the Downtime feature. That allows users to restrict access to apps according to a predefined schedule. It's not perfect, but it will get the job done in the short term.

If you wish to maximize the productivity of your employees by restricting their access to unnecessary apps and programs on your network or if you wish to protect vital business information from prying eyes of unauthorized personnel, call SpartanTec, Inc. in Fayetteville now.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto