Per our role as cybersecurity professionals, part of our responsibility is to put the developing threats out there in the world into perspective for the clientele that we serve. After all, with so many modern threats seeming to border on science fiction, it is only natural for smaller organizations to assume that their size will protect them from such attacks through simple lack of interest—or even that such threats will never be used practically at any significant scale. Unfortunately, these assumptions are too often mistaken.
Dresner Group Blog
Many small and medium-sized businesses don’t consider making physical security investments if they already have some type of workable solution in place. The problem is that there have been a lot of innovative moves made that would make those investments strategically smart at the time. So, while a physical security upgrade may not be a priority for your business, we thought we’d go through some of the tools used, and how they have improved.
We’re all familiar with the idea that pop culture has cultivated in our minds about computer hackers, but as it happens, this impression is just one of the many shapes that the modern hacker can take. This kind of closed-off view is dangerously shortsighted, so let’s take a few moments to dig into the kinds of hackers there are, in ascending order of the threat they pose to your business.
Contemporary movies are filled with high-stakes cybercrime, where a lovable criminal syndicate breaks into a company’s systems to help wreak havoc on the true villains of the film, all the while exposing the company’s dirty laundry. Naturally, this idea can be frightening for any business, whether or not they have any dirty laundry to air out—after all, nobody wants a ruined reputation—and is unfortunately less and less of a fantasy all the time.
While you’ll probably hear us recommend that you update as soon as possible at every opportunity, the source of these updates is important to consider. This is especially the case now that mobile security firm Zimperium has discovered a new mobile spyware that pretends to update your mobile device… but actually steals data and monitors the user’s search history and location.
As ransomware and phishing attacks continue to increase, many Maryland businesses may feel there isn’t much they can do. However, by following a few basic best practices, your business can dramatically reduce the chance of a successful cyberattack. Here are three tips you should enact today.
Ransomware is no laughing matter, especially in terms of the costs it can impose on its victims—this is, after all, what ransomware is famous for. However, some of these costs can be derived from unexpected expenses and exacerbate the already significant issues that ransomware poses. Let’s go over some of the costs that you should anticipate, should you be targeted by a successful ransomware attempt.
Are you concerned about cybersecurity and aren’t sure how to protect your data? You don’t have to go it alone. Fortunately, your managed IT partner is well-positioned to help keep your data safe. Here are three ways we can help your cybersecurity.
As commonly happens with any disaster, COVID-19 has inspired no short supply of scams. While these scams initially focused upon the relief funds that were delivered to people to help sustain the suffering economy, the ongoing vaccine distribution efforts have given those behind these efforts a new means of attack.
Recently, a story broke in Florida that sounds like something out of a terse action film: a hacker managed to access a water treatment facility and subjected the Pinellas County water supply with increased levels of sodium hydroxide. While onsite operators were able to correct the issue right away and keep the public safe from danger, this event is the latest in a line of cyberattacks directed at public utilities. Let’s consider this unpleasant trend.
Businesses that don’t see after their vulnerabilities are just asking to be breached. That’s the consensus view in the IT industry. It’s disconcerting, then, to consider how many businesses don’t actively assess their IT security, especially considering how much these platforms change from year-to-year. Today, we’ll briefly discuss what a security and compliance audit is, and why we think you need one.
Cybersecurity has become front and center due to a rash of ransomware attacks hitting businesses, and more and more high-profile attacks happening every year. Despite the understandable concern, your business doesn't have to be a victim. By enabling 2FA, you can significantly reduce your exposure. Unfortunately, many companies feel that 2FA is too much of a hassle to implement and opt out. If you think this way, give us five minutes to convince you why 2FA is worth it.
The pandemic has forced most Maryland businesses to re-evaluate how they can be productive when things are turned on their head. Many businesses have found success in embracing modern technology to keep collaboration and production going. Unfortunately, with the success technology brings, there is also increased exposure to compromise, as ransomware attacks are rising.
If you haven’t taken the time to go through and update your passwords lately, particularly the one protecting your Google account, you should do so… despite it undeniably being a pain. After all, Google serves various purposes and is attached to many accounts for most. Considering the number of data breaches and other cybersecurity issues this potentially contributes to, you will want to ensure your Google account is properly locked down.
Your business’ software is one of its critical assets, so it really can’t also host many risks to your security and business continuity. Therefore, keeping your software up-to-date and fully patched should be a priority. Let’s go over what patch management entails and why it is so important.
GoDaddy—the domain registrar and web-hosting company once famed for its risqué advertisements—is facing some significant backlash for a much different reason. On December 14th, GoDaddy’s employees received an email that appeared to be from the company, promising a holiday bonus. However, while the email was from the company as it appeared to be, it was actually a phishing test that the hosting provider decided to run.
The threat of ransomware has struck home to Maryland residents. Recently, classes for 115,000 Baltimore County public school students were canceled due to ransomware attacks. If your organization is not investing in security protocols, you too may find access to your critical systems under the control of a bad actor. As such an event can place your organization’s very survival at risk, you must take steps to prevent it from happening.
Browser extensions are nifty little programs that can be implemented into your web browser itself, adding onto its capabilities and utility… at least, that’s the concept. Unfortunately, these programs also give cybercriminals a means of secretly launching an attack. The security firm Avast recently identified 28 such third-party extensions that have been installed—according to the download numbers, at least—by about three million people on Google Chrome and Microsoft Edge combined.
As Maryland businesses increase their reliance on technology, they have gained the attention of cyberhackers. The hackers are now holding networks hostage and demanding a ransom to release them. While any business can be a victim of a ransomware attack, there are currently three at-risk industries: hospitals, schools, and manufacturing. Here are tips to prevent ransomware attempts from succeeding.