Business & Finance

G-Suite Users Can View Employee Productivity With Work Insights

October 3, 2018 by Joseph Martin

Google has recently made some changes and improvements to its G-Suite. It introduces new tools designed to allow managers and admins greater visibility into how the people in their organizations use the G-Suite.

Currently, the “Work Insight” tool is available in beta and displays information on how G-Suite is deployed at the team level.

While this will be a boon to all organizations, it will be especially valuable for organizations moving from legacy tools to the G-Suite. It will also serve to shine a light on teams or individual employees who could benefit from additional training on specific applications and provide valuable information on cross-team collaborations.

Where collaboration is concerned, the thinking is that admins would be able to see, for example, how many members of a sales team are working collaboratively with the marketing department. They could also see whether that collaboration is happening via face to face meetings or via co-created documents.

In addition to the Work Insight tool, Google also announced the availability of the G-Suite Security Center, which is an investigative tool that provides admins with a dashboard they can use to monitor a variety of security metrics.

The two big advantages to the new Investigation tool are:

It gives admins the power to scale an incident response as needed, up to and including scaling it across an entire domain

It adds integrated remediation to the detection and prevention capabilities already available to admins in the G-Suite.

Taken together, these changes should make life much easier for both managers and admins, providing better data which can be transformed into hard-hitting business information. If you use the G-Suite at all, be sure to check out these new tools at your next available opportunity. Both are excellent additions.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

Data Breach Notifications May Get Standardized

October 2, 2018 by Joseph Martin

A new piece of legislation is making its way through the halls of Congress that could standardize and streamline the data security and breach notification process for financial institutions. This is something that most people in the industry tout as an improvement over the current situation.

The Consumer Information Notification Requirement Act (H. R. 6743) legislation was approved by committee not long after Congress received a letter cosigned by members from the American Bankers Association, the Consumer Bankers Association, the Credit Union National Association, the Independent Community Bankers of America and the National Association of federally-Insured Credit Unions.

The letter read, in part:

“Our existing payments system serves hundreds of millions of consumers, retailers, financial institutions and the economy well. Protecting this system is a shared responsibility of all parties involved and we must work together and invest the necessary resources to combat never-ending threats to the payment system.”

Despite so many influential organizations weighing in, many state regulators are skeptical of the proposed legislation and are actively pushing back against it over concerns that it would undermine state-level authority.

Whether you agree that those are valid concerns or not, the reality is both stark and terrifying. In the first half of 2018, ThreatMatrix recorded more than 81 million cybercrime attacks against financial institutions. 27 million of those targeted the mobile channel, given greater mobile banking adoption rates.

ThreatMatrix weighed in on the debate saying, “Financial services mobile transactions are growing globally, with China, South East Asia and India showing the strongest regional growth. Overall, the biggest threat in financial services comes from device spoofing, as fraudsters attempt to trick banks into thinking multiple fraudulent log-in attempts are coming from new customer devices, perhaps by repeatedly wiping cookies or using virtual machines.”

Clearly, something must be done, and while the politicians debate the issue, the attacks continue unabated.

Joseph Martin

Your Business Email Is Highly Targeted For Attacks

September 25, 2018 by Joseph Martin

There’s a new report out, authored by ProofPoint, and its findings for business are grim.

It’s no secret that businesses of all shapes and sizes are coming under increasing fire from hackers around the world.

Now we have hard data that shows us exactly how big of an increase we’re seeing.

Here are some of the key findings in the report:

Email fraud attacks targeting businesses have increased 25 percent in the last quarter alone

They have increased by a staggering 85 percent from this time last year

Phishing links sent via social media platforms have increased by 30 percent

60 percent of those phishing links specifically targeted individual contributors and lower-level corporate management

23 percent of attacks targeted employees working in operations and production

Incidents of customer support fraud increased by 39 percent, compared to the previous quarter. This increased a whopping 400 percent compared with this time last year

Nick Frost (a co-founder of the Cyber Risk Management Group) had this to say about the disturbing report:

“Key to this is engineering emails and spoofing email addresses to a level of sophistication that fails to alert the recipient that there is anything suspicious about the email. Techniques such as web crawling and web scraping are able to collect and collate key information about an individual that can be used in crafting an email, accompanied by a link (as part of a phishing attack) to an unsuspecting user.

Whilst there are many legitimate web crawlers and many are enabled for business reasons, there may be organizations and individuals that wish for their information not to be collected and shared either for legitimate or adversarial purposes. There are tools that organizations can adopt that prevent or even delay web crawlers.”

Training is the first line of defense here. If you’re not doing it already, you should be holding regular phishing simulations so your employees become adept at spotting them.

Joseph Martin

Microsoft Allowing More Time For Major Windows 10 Updates

September 20, 2018 by Joseph Martin

Microsoft has been making two major Windows 10 releases every year, giving businesses 18 months before they need to move to the next update. This plan and schedule is part of the company’s “Windows as a service” paradigm, designed to ensure that Windows 10 gets new features, as opposed to the company’s former practice of a new Windows release every three years.

In most respects, the new paradigm has to be regarded as the superior approach, but unfortunately, the pace is a bit too fast for some businesses. High level executives have pushed back, asking for more time and flexibility to update the OS, so they can be sure that business critical apps work with the latest update.

Microsoft has heard, and more importantly, they’ve listened. However, business owners didn’t get everything they wanted. Here’s the scoop:

The company is planning to release a series of cloud-based tools that will make app compatibility testing easier, and has agreed to give IT admins more time to update. As things stand now, all currently supported feature updates of Windows 10 (Enterprise and Education editions) are supported for 18 months. The company is expanding that to 30 months, but only for their September release. The March updates will still only be supported for 18 months.

While not a perfect solution, it does give everyone some of what they wanted. Businesses will have an extra year to apply the latest features if they stick to the September cycle, while firms that don’t need the extra time can simply continue on as they are.

Jared Spataro, the Corporate VP of Microsoft 365 summarized the changes this way:

“You’ve been talking, and we’ve been listening. We recognize that it takes time to both upgrade devices and operationalize new update processes. Today’s announcements are designed to respond to your feedback and make it easier, faster, and cheaper to deploy a modern desktop.”

On the whole, this is very good news indeed.

Joseph Martin

Hacker Requests For Wire Transfers Are Topping Email Scams

September 13, 2018 by Joseph Martin

Business Email Compromise (BEC) attacks are a major threat, costing business nearly three billion dollars a year.

This form of attack primarily targets the C-Suite in order to impersonate them.

In the world of BEC attacks, those that employ requests for wire transfers are almost devastatingly effective.

Asaf Cidon, the Vice President of Content Security at Barracuda Networks, explains why:

“Criminals use business email compromise attacks to obtain access to a business email account and imitate the owner’s identity, in order to defraud the company and its employees, customers, or partners. In most cases, scammers focus efforts on employees with access to company finances or payroll data and other personally identifiable information.”

The attack unfolds when the hacker, pretending to be a company CEO or other high-ranking official requests immediate payment, usually via wire transfer.

Again, per Asaf Cidon:

“The sense of urgency, a request for action, or a financial implication used in BEC schemes tricks targets into falling for the trap. For example, an accountant may receive a fraudulent email request for a wire transfer from the company CEO, which includes a spoofed version of the CEO’s email address and even the CEO’s own email signature.”

According to a 2016 report published by Trend Micro, a successful BEC attack nets the hacker an average of $140,000. Given how easy they are to pull off (and how low-tech), don’t expect this type of attack to show any signs of decline in the foreseeable future.

What makes BEC attacks even more troublesome is the fact that law enforcement officials believe that few attacks of this type are ever reported, and that the losses to business could be up to four times the figure we cited earlier.

Worst of all, these types of attacks appear to be increasing in their frequency. Unfortunately, C-Suite employees are notoriously resistant to basic security training, meaning that there are no easy solutions to this large and growing problem.

Joseph Martin

Most Small Businesses Can’t Recover From Cyber Breaches

September 10, 2018 by Joseph Martin

A new study recently published by Sitchfast Technologies paints a grim picture of the threat landscape for small and medium-sized business. Their key finding? A staggering 60 percent of small businesses that suffer a data breach of any magnitude go out of business within six months. Worse, one business owner in three does not have a plan or safeguards in place to prevent a breach.

The single biggest weak link in the small business landscape is the fact that most employees who work for smaller companies are woefully uneducated about the dangers, how to identify them and how to avoid them. The study noted that among small business employees, more than a third (35 percent ) haven’t changed their passwords in over a year. In addition, 19 percent of small business employees share their passwords with colleagues, with a similar percentage using weak passwords based on personally identifiable information. Put those elements together, and it’s a recipe for disaster.

The authors of the report had this to say on the matter:

“Today’s cyber criminals employ a variety of complex attack methods to exploit business weaknesses and target employees with bad cyber hygiene, whether it’s the CEO or an intern, bypassing the basic security measures most companies have in place.

Until they recognize they are prime targets for hackers and adjust their security strategies, small businesses will continue to fall victim to rampant cyber attacks.”

Unfortunately, there are no easy solutions, but the report clearly points to two areas where you can make immediate improvements:

Currently, 65 percent of small to medium sized businesses have never run a phishing email test.

Only 21 percent of small to medium sized businesses provide cybersecurity training to their employees.

Both of these are incredibly easy to remedy, and if you perform these two simple steps, you’ll be miles ahead of your peers.

Joseph Martin

Hackers Make More Money Than Is Spent On Cybersecurity

September 5, 2018 by Joseph Martin

Quick question – how much do the world’s cyber criminals make every sixty seconds?

If you guessed a quarter of a million dollars, you’d be wrong. If you doubled that value, you’d be wrong again.

According to research conducted by RiskIQ, cybercriminals are raking in a cool million dollars per minute, compared with businesses spending $171,233 per minute on security measures. It’s a lopsided battle, and businesses aren’t winning.

Some other interesting tidbits culled from the company’s research. Every sixty seconds:

Four new potentially vulnerable web components are discovered.

A new website appears running the CoinHive cryptocurrency mining script.

1.5 companies fall victim to a ransomware attack, with an average cost to the victimized company of $15,221.

In addition to that, RiskIQ discovered that a site running the CoinHive script was deleted every ten minutes, and that a new phishing domain appears about every five minutes.

Raef Meeuwisse, a security researcher and author, had this to say about the report and its findings:

“Cybercrime and cybersecurity co-exist in a constant cycle of innovation. As one particular criminal trend towards a particular technique increases, so the security functions create or strengthen the required defenses.

However, it is evident at both the level of personal and organizational cybersecurity that spending is unusually low. In fact, most of these cybercriminals are not going after the hard targets with great defenses, they are targeting the low hanging fruit – and there is still far too much of it.”

The simple truth is that until and unless we start taking cybersecurity more seriously, and until the aforementioned “low hanging fruit” ramps up spending to properly secure their systems, we can expect to see the number of cybercrimes continue to increase. Unfortunately, despite the crimewave, there doesn’t seem to be much motivation to do that.

Joseph Martin

Microsoft Is Keeping Classic Skype, For Now

August 16, 2018 by Joseph Martin

Microsoft recently found itself on the receiving end of more than a little user rage when they made significant changes to Skype, with the release of version 8. The company’s original plan was to model Skype 8 after several different social media services, but the users found the new interface to be both annoying and frustrating.

On the face of it, Skype 8 boasts a number of impressive enhancements, enabling users to screenshare inside calls, connecting with up to 24 users simultaneously and sharing up to 300MB of files via the Skype application itself. Plus, it offers free HD video.

Unfortunately, users weren’t pleased with the fact that the redesign relied on a single window. This makes it impossible to multitask with separate conversations occurring in different windows. Some of the new features lacked professional polish (like emoji’s and @mentions). These features would be fine for a consumer grade app, but the desktop version of Skype is something that businesses rely on heavily, and those features are of little value there.

It caused such an uproar in the Skype user community that the company abandoned their plans to end support for Skype 7 on September first, and re-branded it as “Skype Classic,” leaving it in place for the time being. Ultimately, the feeling is that “Skype Classic” will be killed off at some point, but for now, Microsoft has chosen to listen to their user base and continue offering support for it.

The future, however, is uncertain. While the temporary stay is useful, it is not yet known how long that will hold. The company might intend to go back to the drawing board where Skype 8 is concerned and re-think some of their design decisions to make the new version more palatable to Enterprise users. Time will tell.

Joseph Martin

New Report Shows 32 Percent Increase In Cyber Attacks

July 28, 2018 by Joseph Martin

Positive Technologies has just released a new report that paints a grim picture for IT professionals. If your sense is that the number of cyberattacks are increasing, you’re not wrong. In fact, it’s probably worse than you realize.

So far this year, we’ve seen a staggering 32 percent increase in the total number of cyberattacks in the first quarter of 2018, compared to the same period last year. Even worse, malware attacks have increased by a mind-bending 75 percent since the first quarter of 2017.

Individuals were far and away the most frequent target (28 percent), but government agencies came in a reasonably close second (16 percent), with business in the healthcare, finance, and IT sectors rounding out the top five (8 percent, 7 percent, and 5 percent, respectively).

Of the malware deployed against targets this year, spyware was by far the most common, with stealth cryptocurrency mining software not far behind.

Leigh-Anne Galloway, the cyber security resilience lead at Positive Technologies explains in more detail:

“Our research shows that 63 percent of attacks included use of malware. Spyware, in particular, is used most often because it allows obtaining not only personal information and corporate secrets, but credentials for the services and systems needed to attack internal corporate infrastructure.”

Long story short, the prevalence of spyware seen in this report is likely to have cast-off effects in the future. Hackers will gain a sufficient level of access and information, courtesy of their successful spyware attacks, to launch even more harmful attacks against both individuals and government/corporate institutions in the future.

Positive Technologies warns that the number of attacks is likely to continue to escalate, and that there’s no clear end in sight.

The report is dark news if you’re in the digital security business. If your business hasn’t been hit yet, it seems that it’s just a matter of time.

Joseph Martin

Attackers Targeting Job Seekers Via Listings And Recruitment

June 20, 2018 by Joseph Martin

Cyber-criminals around the world are increasingly focusing their attention on job seekers. According to the security firm Flashpoint, there has been a notable uptick in ploys involving phony job listings that attempt to get job seekers to give up personal information.

Perhaps the biggest surprise is the fact that this is only now becoming a growing threat. After all, from the cyber-criminal’s point of view, it’s low hanging fruit. Job seekers expect that they’ll be asked for all types of personal information when applying for positions, after all.

As long as the criminals take the time to make their offers appear legitimate, most applicants wouldn’t think twice about sending in their resume (complete with physical address and phone number), and then, a bit later in the process, their social security number and other personal and confidential information.

According to Flashpoint analyst David Shear, it’s not just personal information the criminals are after, however. Increasingly, criminals are seeking to engage the services of the people who “apply,” by using them as unwitting money mules, or using them as part of an intricate money laundering scheme.

On top of that, it’s all too easy for the criminal to respond to an applicant’s inquiry with an email containing an attachment (usually a poisoned PDF). Again, since the applicant thinks he (or she) has replied to a legitimate offer for employment, odds are excellent that they’ll open the attachment without hesitation.

At that point, whatever payload the poisoned file contained is installed onto their computer, which can have devastating consequences, depending on the nature of the malware the criminals want to install.

Shear also notes that he and his team have seen an increase in the number of inquiries on the Dark Web asking after compromised business accounts, and offers this explanation as to why: “Attackers want access to business accounts in order to leverage their phony job listings and recruit people who would ultimately participate in fraud without their knowledge.”

All that to say, job seekers beware. It seems that no low is too low where these criminals are concerned.

Joseph Martin

G-Suite Users Can View Employee Productivity With Work Insights

Data Breach Notifications May Get Standardized

Your Business Email Is Highly Targeted For Attacks

Microsoft Allowing More Time For Major Windows 10 Updates

Hacker Requests For Wire Transfers Are Topping Email Scams

Most Small Businesses Can’t Recover From Cyber Breaches

Hackers Make More Money Than Is Spent On Cybersecurity

New Report Shows 32 Percent Increase In Cyber Attacks

Attackers Targeting Job Seekers Via Listings And Recruitment

Contact Info

Navigation