Anyone with a computer is well aware of security concerns on the Internet. As time goes on, security and internet safety becomes more and more of an issue. It’s clear that hackers are becoming more advanced and will continue to find ways to steal our data. With a large part of our lives spent online, it’s just a matter of time before hackers affect you. If you own a business, the sheer amount of valuable information you are responsible for is something to be concerned about. Moving into 2021, data safety will continue to be a growing issue. In this blog, we will discuss SSL and security concerns for your company’s website and the types of sites you may be visiting. 

What’s an SSL? 

SSL stands for Secure Sockets Layer, also known as Transport Layer Security. This may sound like nerdy talk that doesn’t matter much, but the fact is that you interact with SSLs every day.  They are specific technology designed to keep your Internet connection safe, especially when secure data is involved. SSLs run a protocol of data encryption to make sure third parties can’t see what either party is viewing or sending. 

This includes sensitive and non-sensitive information, such as passwords, names, banking information, and more. This setup uses a handshaking procedure that both the parties involved agree to use. The data transaction creates a cipher so information can be sent from one to the other in an encrypted format. Theoretically, even if a third party were to intercept your data, it would be gibberish since they don’t have the means to decipher it. 

This is essential for safe Internet communication these days. You and your company likely send highly-sensitive information back and forth online all day long. What used to be something kept safe in a drawer can now become public information because of a malicious hacker. This layer of safety is so standard we don’t even notice it. Sites that have an “HTTPS” in front of their address use some form of SSL or TLS.  

 Managing a TLS/SSL  

Not only do you want to keep your company’s information private, but you need to make sure that customer information stays private as well. Unfortunately, SSLs and TLSs are not a one–and–done procedure. Like any other security protocol, SSLs change over the years. Make sure that any certificate your company’s website uses is up to date and effective. You can do this by installing updates as they are released. 

Think of the SSL protocol like a deadbolt. Having a deadbolt on your door is much safer than a locking doorknob. Yes, there are always people who know how to compromise it, but it is still much safer. Over the years, deadbolt technology has improved and evolved as people learn to bypass obsolete technology. Sometimes, however, it takes working with an experienced locksmith to have it installed correctly. 

SSLs/TLSs are certainly much better options than nothing at all. However, these protocols, particularly older versions, are still prone to many vulnerabilities. There are numerous common attacks that hackers use to break this encryption. And some of these threats have very colorful names. For example, POODLE, BEAST, CRIME, BREACH, and HEARTBLEED are commonly used attacks, and they are highly successful. 

Keep Yourself and Your Customers Safe 

Having your company’s private information exposed to the highest bidder can have devastating effects on your operations. Stolen customer information due to a lack of care in your communications could result in lawsuits and legal trouble. Customers have well-deserved expectations: when they share information with you, it needs to be kept confidential and secure. 

This can be especially true in organizations that deal with sensitive information regularly, such as financial institutions and medical centers. In the hacking community, there is a highly lucrative market for personal information. The dark web is flooded with people selling private information databases to the highest bidder — and there is always “a highest” bidder.  

If you want to avoid liability, make sure your security protocols are up to date. It is also critical that you maintain them professionally. A relatively small investment in this area of security can end up saving large amounts of money and possibly your business itself. 

We regularly report on attacks that businesses like yours face daily. But we don’t always mention that many of these attacks are successful because the victim has a lax security protocol. The last thing we would want is for you to be another statistic. If your SSL/TLS certificates are getting old and dusty, or (even worse) you don’t have any at all, now would be the best time to contact us. As 2021 quickly approaches, these threats are only going to be more significant and more challenging to handle.  

Our team of security professionals is one of the most experienced in the business. The web can be a scary place, and the last thing you want is to be caught unprepared! By making sure your SSL/TLS certificates are in perfect order, you can rest a little bit easier at night. 

The holiday season is upon us and we have many things to look forward to — even if this year will be a little bit different than others. This time of year the things that come to mind include: family, holiday festivities, and of course cookies! As a Managed Service Provider, people often ask us, are cookies safe?

But we’re not talking about the kind of cookies your grandma bakes for you. In technological terms, cookies typically pop up on your internet browser. They track and store data in the deep corners of your hard drive. With lots of controversy surrounding cookies, many people don’t know if they’re a good or bad thing. You probably have seen notices regarding cookies on most major sites you visit asking permission to use cookies. This is in response to privacy laws in Europe and in many states to protect people’s personal information and browsing habits. We expect to see these notices pop up more and more frequently as privacy laws become more stringent.

In this article, we delve into what exactly these oddly-named, annoying items on your browser are. And we discuss whether or not you should be worried about them.

What is a Cookie Anyway?

Sweet and tasty cookies have been around since the 17th century. But the type of cookie we are talking about today has been around since the mid-90s. The official name is an “HTTP Cookie”. Designers at the time referred to this as a magic cookie of information. And ever since then, the name has stuck.

But what exactly does a cookie do? Cookies gather information when you browse the internet. They track what you are doing on a particular site or what you are doing while browsing in general. There are multiple forms of cookies so here are the more common types that you’ll run into on the Internet:

Session Cookie

This appears on your web browser when you visit a website and tracks information such as your login, products you view, how long you were on a particular page, and other browsing habits. These are called session cookies because they terminate as soon as you close your browser or move to another page. 

Persistent Cookie

Also known as tracking cookies, these cookies stay active even after you leave a site or close your browser. In general, these will track the sites you’re visiting, but usually have an expiration date in which they become inactive. This is one of the most controversial form of cookies since they track your information outside of their original range. However, there are benefits to these cookies, such as storing your login info so you don’t have to enter your information every time you visit your favorite sites.  

Third-Party Cookies

In general, the cookies on your computer are from the sites you visit. For example, if you visit Amazon.com, Amazon will create a cookie on your browser. Third-party cookies differ in that they attach themselves to your browser even if you’ve never visited their site. This may happen if there is a banner or another form of an advertisement on a site that you visit, even if you do not click on them. Many pop-up blockers disable this feature, although it’s not uncommon to have more than 10 third-party cookies attached to your browser after visiting a site without any sort of cyber protection. 

Should You Worry? Are Cookies Safe?

Cookies are an essential part of the ecosystem of the web, but are cookies safe? Massive amounts of small packets of information are passed around every second, and these packets usually play a role in marketing, sales, or captured analytical data. In general, cookies are harmless, or at most a nuisance. 

You might be surprised by how much of your daily life on the Internet is dependent on cookies. Don’t believe us? Go ahead and delete all your cookies on your web browser and then go about your daily business to see how many sites you now have to log into that were automatically accessed before. You’ll be surprised at how much information you’ll have to put in compared to before. 

Cookies are not as invasive as they used to be. They typically contain tiny kilobits of information that take up almost no space on modern computers. Older Internet users may have been in the habit of deleting their cookies to save space, back when computers had very small hard drives.  

Many browsers automatically block third-party cookies, so the only cookies on your computer are from sites that you’ve visited. Sometimes hackers can use certain cookies to gain access to your computer, and since third-party cookies are often weak entry points they become easy targets. Make sure your firewall and internet security is blocking hackers who might try to sneak in through these pathways. 

Bottom Line about Cookies Safety

So, now that we have a better understanding of cookies, can we conclude that cookies are safe? In short, cookies shouldn’t be an issue in most circumstances and you should be fine when accepting them. The amount of memory they use is a nonissue these days. 

However, few things in life are always straightforward, so there are two caveats. The first issue you should be aware of is that while cookies are mostly safe, there is always the chance that a cookie can be hacked and used nefariously. Second, certain operations do not allow cookies on their systems. For example,  government and medical organizations may require absolute security and prohibit cookies.

If you have any questions about cookies on your system, contact us and we’ll ease your mind. As a Managed Service Provider, we will consult with you on any restrictions your organization is required to have in place. We’ll offer you a solution that will work for you in the long run.   

Remember: there’s always the possibility that the wrong cookie may be bad for your computer or your diet! 

We think we’re safe when we say that 2020 has been…less than ideal. After the first quarter, we quickly found ourselves — both professionally and personally — in uncharted waters. But, 2021 is just around the corner and we want to be optimistically prepared.

The continuation of this month’s series of section 179 tax deductions covers how the rapid changes of 2020 can actually benefit your 2021. The good news is that this is actually good news!

As a disclaimer, be aware that we are not tax professionals and this article should only be viewed as informational. Before making any changes related to your company’s taxes, consult with your company’s CFO or other tax professionals.

Overcoming 2020 – The Worst Crown Ever

Who would have thought this time last year that the entire world would be crippled by a tiny little organism? COVID-19 changed everything overnight. For the most part, those changes were devastating. Of course, hundreds of thousands of people have already lost their lives by the time of this writing. Many businesses have also shut their doors or drastically cut back operations.

What seemed like temporary changes (such as sending your employees home to work) soon became the new normal. Businesses like Zoom became overnight successes because of the change in the landscape. We don’t know what will happen with COVID-19 in the coming months or years. We believe, though, a lot of these changes are probably here to stay. So, your company may as well make the most out of it.

Prepare for 2021: Be Smart About Deductions

Most companies had to make changes besides simply sending employees home. Perhaps they had to change or upgrade software, purchased equipment for employees to use remotely, or simply had to downsize. These are all examples of things that can be written off at the end of the tax year.

As a refresher from our last article, the more you spend, the more you save. Even though you may have shelled out more than originally budgeted to accommodate for 2020 challenges, at least you can avoid paying tax on those expenses. What are some examples of changes in the last year you can get some benefit from?

Maybe you found that your company needed more mobile hardware to address a more mobile workforce. Write-off.

Perhaps you moved office space as the decreased workforce (either from layoffs or employees working from home) didn’t justify your former space. Write-off.

Even better, maybe you took our advice and decided to migrate to a hosted environment or virtual office. First of all, thanks for listening! Second, write-off.

If you haven’t done any of this, you still have two months to upgrade your business operations. While these deductions don’t make the upgrades free, they do make the decision much less painful in the short term. Then, the upgrades themselves make it worth it in the long term.

Prepare for 2021: Don’t Just Sit There

If you’re reading this article right now, we congratulate you on surviving in an extremely difficult environment. If you want to remain in business and even grow in the coming years, it’s time to make some upgrades. Now is the best time, as well, while you can utilize the benefits of tax write-offs.

One of these changes is the aforementioned virtual office. It essentially involves creating a virtual workspace where employees can log in and do any of the sorts of work that they would do in a physical office. The primary benefit of a virtual office is allowing your company to be flexible; giving you the option to have employees anywhere in the world and yet still be productive.

This virtual office setting not only stores data like in a traditional cloud solution, but it includes all software and line of business applications to facilitate full productivity. When administered by an experienced company such as ourselves, you end up having a very lean yet safe solution.

If you want to see how your company can get itself in a leadership position in this new climate, contact us and see how we can help put your section 179 tax deductions to work for you!

This year has been…interesting, to say the least. One minute businesses were running normally. Seemingly overnight, many of us got the work-from-home position we always wanted. Within and beyond the pandemic, many companies have been transitioning portions of their workforce to work remotely. As technology marches forward, the image of the modern office changes with it.

That being said, cybersecurity is completely different working from home versus an office with dedicated IT support to set up and maintain all computer systems. Cyber thieves are all too aware of this and have acted quickly to take advantage of these new vulnerabilities.

This final Cyber Security Month article discusses protecting yourself and your business from the new threats lurking at home.

Security Dangers Working From Home

When working from home, we generally can’t use the same equipment we enjoyed in the office. Many businesses told their people to use their personal computers when they scrambled to send them home in March. Even if they’re using traditional security techniques, working online makes them more vulnerable to attacks.

For example, maybe they’re relying on the standard Windows firewall. There’s a reason Microsoft constantly pushes security updates to cover the holes in the OS exposed by hackers. This firewall is simply not secure. Perhaps they are extra responsible and installed a computer grade antivirus program. That’s fine against some automated threats, though not for active hackers trying to get access to the system.

Additionally, with many kids learning at home, that same computer may now have additional programs that create vulnerabilities. Many school districts are using software that has had breaches in recent months.

Finally, there’s the latest trend for remote work: VPNs. While some people swear by it for security, last week’s article focused on all the reasons VPN security isn’t all it’s cracked up to be.

Options to Create a Secure Environment Working From Home

When possible, it’s best to provide the computers and other devices that your employees need when working from home. That way you have complete control of the programs they use and how you set up and maintain their systems. This is often, however, too costly and complex to supply and control systems used in the office and remote.

You could also deploy a relatively new option: a virtual office (or hosted desktop solution). Essentially, this creates a secure place online for employees to log in and do their work from home or any other remote location. This is different from a VPN because a VPN protects only the connection itself, whereas a virtual office gives you a safer harbor, of sorts, to do all your work and store files. This can be extra effective as you know who you’re dealing with from beginning to end and if any sorts of problems arise, they can be fixed from a single source.

Who You Gonna Call?

If the idea of supplying your employees with company-owned devices or the setup and maintenance of a virtual office seem overwhelming, don’t worry! Even many large corporations find this to be too difficult or time-consuming to do on their own. In fact, a recent study showed that more than half of all of the companies surveyed use external services to help with their IT needs, and that number goes up significantly with a larger percentage of their workforce working remotely.

This is complicated stuff and no one expects someone from a nonrelated field to be a pro, which is exactly why we work so hard to make sure these processes and services are as seamless as possible for our clients. We’re a managed service provider — this is what we do. We make sure that when some specter hangs overhead and requires your company to have your employees work remotely (even on a moment’s notice), we can be there to make the transition as smooth as possible. Even if you currently have some sort of remote work arrangement in place currently, we can assess your current setup and make sure that you are optimized for what the business world may throw at you today or in the future!

October is National Cybersecurity Month and password security is a big part of that! Cybersecurity is so important and appropriate to discuss considering how scary it is out there! As we regularly cover, hackers are getting more advanced by the day, despite security measures improving by leaps and bounds. Of course, no monster is all-powerful and there are ways to protect yourself against these dangers.

In this article, we’ll be discussing a feature that we all use (and abuse) every day: passwords. How insecure can this security feature be and what can you do to protect yourself and your business?

A Necessary Evil

We don’t think that there’s anyone out there that actually enjoys creating and using passwords. After all, they’re just another barrier between you and your data. However, that barrier is exactly what’s going to protect that data from the outside world.

Password Security Struggles

Since many of us struggle to remember passwords, we end up making a lot of common mistakes. These include:

• Making the password as short as possible
• Reusing passwords for multiple accounts
• Not regularly changing the password
• Using a word that’s easy for us to remember.

We’ve all been told that we should avoid these mistakes ad nauseum, but why?

A Real Monster

When you think of a scary beast like Frankenstein’s monster, what gives us the chills? The sheer physical strength that can break down any door you hide behind. There are software programs that work pretty much the same way, using Brute Force Attacks.

These attacks are codes/programs that test possible password after possible password using random combinations of letters and numbers until something works. Dictionary Attacks operate along the same lines, using all the words in the dictionary instead of just random letters and numbers. Passwords that are too short or too simple feed the success of Brute Force Attacks.

One recent program could crack any 8-character password in less than six hours! Once a hacker cracks that password, they then have access to anything that shares that password. If you use that password for business purposes, the payload is even bigger.

Is Your Password Worth It?

Although cyber pirates still buy large lists of passwords and other stolen data off of the Dark Web for quick hits, they’ve shifted in the past few years focusing on more time and effort on fewer but larger targets. These attacks may take up more of the hacker’s valuable time, but it brings in massive returns.

Naturally, there’s only so much you can milk from a single victim, but a company or organization has much deeper pockets and a lot more to lose. Think about the amount of cash in your personal bank account versus what your company may have at any given time. On top of that, think of all the resources your company has at its disposal that may be vulnerable in the event of an attack.

Fixing the Problem: The Password Security Silver Bullet

We’d be lying if we said there is a cure-all solution to the problem of password hacks because there isn’t any. However, that doesn’t mean that you’re completely vulnerable either. Below are a few ways to keep your password as safe as possible:

1. Change your passwords regularly — In theory, a hacker could get your password correct eventually. If you keep changing it on a regular basis, you’ll keep them guessing, even if they got the old one correct. On average, we recommend changing passwords every 1-3 months.
2. Get creative — The best defense for a dictionary attack is not to use words in the dictionary. Either create nonsensical strings of characters or use a combination of words that wouldn’t appear in any standard dictionary. Also, consider using upper and lowercase letters as well as numbers and special characters. As a general rule, the more difficult a password is to remember, the longer it would take for a software program to guess.
3. Don’t reuse passwords — Having to remember multiple passwords can be a pain. For some of us, we have to use over a dozen passwords before we finish our first coffee! This recommendation keeps as much information as safe as possible if one of your passwords is compromised. Think of a ship or submarine with multiple compartments — if one springs a leak and fills up, close a door to mitigate the damage. If all of your passwords are the same, one lucky guess could bring your digital world crumbling.

Bring in a Champion

As hard as you might try, there’s only so much you can do to protect yourself and your company from threats to your password and overall security. Plus, keeping your system safe can be a full-time job in this world, and you already have one of those.

Instead of trying to fight this monster single-handed, consider bringing in the help of a professional monster killer! Our experienced team is more than happy to swoop in and assist your company with the strongest cyber protection on the market, including password management. Even if your walls have already been breached, we can help in the cleanup and future protection.