Happy Holidays!  Did you know that the time between Thanksgiving and Christmas is the prime time for cyber-criminals?  You’re busy and stressed with holiday preparations, end-of-year tasks, illnesses, weather.  All act on you to lower your defenses and let cyber-criminals in your system.  To help keep you cyber-safe this year, here are 5 tips to help you focus your defense strategies.

1. Do not trust your email!

You know that your inbox is full the rest of the year, but at holiday time, it explodes.  Phishing scams run rampant during this time because you’re less likely to catch the small stuff that signals a fake email or link.  Stay vigilant and meticulously review all senders and links to ensure authenticity.  Also know that a trusted contact might have been attacked, and that weird looking link they sent was a way to continue the attack.  Even large companies are putting out notices that their customers are likely to be taken advantage of if not diligent in checking the details.

• Microsoft put out a warning regarding messaging using “rn” instead of an “m” in @microsoft.com. https://cybersecuritynews.com/microsoft-phishing-replace-m-with-rn/  Additional problems may be in store for Windows 10 users as automatic security patching and updating ended on October 14.
• Amazon has warned its over 300 million users that they should be wary of fake delivery notifications, deceptive ads, fake tech or customer service calls, and suspicious links sent via email. You should also look for similar letter substitution tricks as with Microsoft.  Links like arnazon.com, amazzon.com, and AMAZ0N.COM start easily tricking people.  Amazon account attackers warning: Amazon alerts over 300 million users to rising scams and cyberattacks; here is how to avoid falling for new scam tactics
• Generally, anyone can make a fake ad and get the clicks. In the first 2 weeks of November alone, there were over 146,000 unique spam messages found to be using Black Friday sales as part of the phishing campaign. Threat Actors Exploiting Black Friday Shopping Hype – 2+ Million Attacks Recorded
• No one is immune. We, along with most of our clients, have experienced some sort of phishing attempt this month.  Phishing emails get through all the time and are being helped to look more real by AI.  The best way to help yourself, your company, and the data you protect is to be well trained and vigilant.  If you think you may be compromised, change your password and MFA, then call for additional support.

2. Monitor your financials!

The average person spends more during the holidays than most times throughout the year, and sometimes it is difficult to remember every purchase.  Craft shows, pop up booths, and online purchases may be a little harder to trace as they are not your usual store.  Businesses also deal with this kind of purchasing but add in weather-related spending and end-of-year project spending.  Cyber-criminals can try to slip charges onto compromised accounts, take over accounts, or compromise banking logins with great effect.  Monitor your accounts and consider freezing your personal credit.  How to place or lift a security freeze on your credit report | USAGov

3. Be careful of equipment usage!

Everyone should be looking to minimize risks for cyber-attacks, but common practices tend to be overlooked, especially during the holidays.

• Avoid using open internet options. Places like McDonalds, the mall, or even your place of employment may have password free options for internet.  This unprotected access can be a way for cyber-criminals to gain access to your data.  Hackers can set up their own networks to directly gain your data or may use some sort of packet skimming or other attack type to collect your data.
• Businesses often have computer usage policies that are ignored during the holidays. I have seen way too many of my coworkers hop online on Cyber-Monday to get the hourly deals they just wouldn’t get by waiting until the end of the day.  Side point – Your internet will slow down on the Monday after Thanksgiving.  It happens every year, and it comes from the amount of shopping traffic.  Remember that the policies are in place to protect the business network.  Do not use the business network or computers to do your shopping, no matter how much you want to!  Clicking on the wrong link can truly take down your entire network.

4. Evaluate your response plans! All businesses should have an emergency response plan that is regularly updated and practiced throughout the year.  However, if the plan relies on Bob, Bill, and Betty all being at their jobs, what happens when the holiday skeleton crew is in place?  If your key players go on vacation, does the rest of your team have the right information to move the plan along?  Cyberattacks are unique and often rely on specific actions from people with protected access.  Having contingency plans during heavy vacation times is important.

5. Lean into your protective policies! All businesses have policies to protect themselves from fraud.  With the stress of the season, it is common for policies to go by the wayside.

• Training is not optional. Every business should have ongoing cyber-safety training.  One place I worked would have training goals for each month of the year.  You would be in massive trouble for not hitting it in March, but without fail December training would be postponed every year.  If the attacks increase during this time, failing to highlight training can be catastrophic.
• Financial policies and procedures should be followed to the letter. Our business has been unsuccessfully attacked for payroll processing information and fake payments.  We are only 2 people, so it is easy to see right through those attacks.  With 10, 20, 50 people working for or with you, do you have controls in place to make sure you won’t be the victim of a successful attack?

Don’t make the season merry for the cyber-criminals.  Be smart, be watchful, and outmaneuver cyberattacks.  We at Eagle Secure Solutions hope that you and yours have a restful, merry, and cyber-safe holiday season!

The post Staying Cyber-Safe During the Holidays appeared first on Eagle Secure Solutions.

Windows 10 is nearing its end-of-life (EOL).  RIP Windows 10, bring on Windows 11!

If you are anything like me, you have worked in the Windows 10 world for a long time.  After all, Windows 10 was the answer to the hated Windows 8.1 and was released in 2015.  However, after 10-plus years of being the primary Windows operating system (OS) in various versions, Windows 10 is coming to its EOL date of October 14, 2025.  Yes, we are just over a year from losing free service support for Windows 10.  What does that mean, though?  Let’s look deeper into what this means for you and your computer!

What does EOL mean?

For software, EOL means that the company, in this case Microsoft, will stop sending free updates and patches or provide technical support to fix problems in the software.  Like all software, Windows 10 started well, but it had glitches, security vulnerabilities, and other things the programmers could fix with updates sent directly to your computer.  As time passed, newer technologies, good and bad, made it so that more work had to be done on the OS to better interface with the good and block the bad.  Again, this is like most software.  At some point, most companies, including Microsoft, will say that it is no longer effective or efficient to patch the old continually, especially when a brand-new version will do more while fixing all the holes of the past. Hence, Windows 11 was born.  Now, Microsoft needs everyone to jump to a single product to streamline engineering resources and work on the next big thing.  There are some details I am glossing over here, and I know it.  However, this is a nutshell version of what is going on.

What are your options?

Do you already have Windows 11? Yes, don’t change; you’re perfect for now! Depending on how you want to look at everything, you have many options for moving forward, sideways, or standing still if you are on Windows 10 or (gasp) an even older version.

1. Do absolutely nothing! With the rampant cyberattacks occurring frequently (every 39 seconds), it is not a great idea to let your computer continue to run old software that is no longer protected with updates and patches.  However, if you do not have any personal, financial, or other private information for you or others stored on your computer, you may want to take the risk of not having updates.  If you were the victim of a successful cyberattack, they wouldn’t get much.  This makes sense for a personal computer, but business computers must be protected as they are much more likely to store information or be connected to external systems that should not be compromised for the clients’ safety.
2. Upgrade your computer. This may seem obvious, but not necessarily.  Microsoft has put out computer specifications needed to complete an OS upgrade to Windows 11.  If you purchased a computer recently enough, your computer may be able to be upgraded to Windows 11 for free.  If you have an older computer, some hacks have been published that allow you to upgrade to Windows 11.  If your computer is upgradable, it is acceptable and legal to do so, and you will start getting the updates, patches, and technical support for Windows 11 after installation.  If you choose to use a hack to upgrade an older computer, there are a few things you need to know.  First, understand that this is not something a company like ours could help you with.  While we have the technical knowledge, it would put our vendor partnerships at risk.  Second, once you choose this route, you would likely get the updates and patches and a warning notification stating that the manufacturer’s warranty doesn’t cover damages to your system from the upgrade.
3. Buy a new computer. While this is probably the most expensive option, it is also the best option to move you forward.  A new computer will come with the latest OS and set you up for any other newer technologies.  This includes updated graphics cards, processors, and other components to help the computer run better and faster.  These will help run websites and other software better outside of the benefits of running Windows 11.
4. Pay for updates. I have been clear all along that the free updates will end, but educational facilities and businesses already have the option to purchase updates for the first three years after the EOL date. Educational facilities will be able to get updates the first year for $1 per device, the second year for $2 per device, and the third year for $4 per device. For businesses, the first year is $61 per device, the second year is $122 per device, and the third year is $244.  No cost schedule is available for individuals yet, but one is expected.  Paying for the updates keeps you covered for a longer time, but eventually, you will need to upgrade equipment and the OS.
5. Leave Windows entirely. This is more than a Mac vs PC debate, although moving to a macOS device is an option.  However, Linux, Google ChromeOS, and other options are available.

If you are working on a Windows 10 computer, you are part of the 62.99% of Windows users who are.  Even though Windows 11 has been out since October 2021, only 33.37% of Windows users have moved that direction.  (For those good at math, yes, 3.64% are on an older Windows version!)  Within the next year, a lot of movement will need to be made toward Windows 11, or people will be hurting themselves.

The post The end of Windows 10 is near! appeared first on Eagle Secure Solutions.

I keep a running joke going with the owner of Eagle Secure Solutions (my husband) about how he understands tech, and I take care of the paperwork.  It’s a joke because I am also good at solving many problems.  However, I am one of the worst with my computer upkeep.  Unfortunately, many people are like me, and it’s time we learned some best practices to help our computers in the long haul.  In this blog, we are talking about that creepy crawly memory leak that can crash the system at the most critical time.

To understand memory leak or creep, as some call it, you need to know how random access memory (RAM) works.  Everything on your computer takes up memory space.  Even if you don’t have it open or running, the operating system and applications must live somewhere.  However, when you open an application, like your internet browser, you must pull parts of that application out of its home to be able to work with it.  When you pull the parts out, you use RAM to store the pieces you need temporarily.  In a perfectly working system, the temporary storage is emptied back out as the application is being used so that you can always have bits of information coming in and out of storage.  There are even programs designed to be little trash collectors and remove the garbage bits of information from RAM.  If the unused bits of information are not collected, more RAM is used when it shouldn’t be needed.  This is called memory leak.

Think of it like cooking.  You pull out the ingredients and utensils needed to make the meal.  When you finish each ingredient, you return them (normal proper operations).  When you are done cooking, you have dishes that need washing.  Someone returns and does the dishes, eventually getting them back to where they started (again, normal proper operations).  If this process had memory leak happening in the background, some ingredients or dishes would not be put away.  So, the next time you went to make a meal, you would grab different dishes and have a more extensive spread of stuff hanging around your kitchen.  What happens when you run out of dishes or ingredients?  You shut down the kitchen and go out to dinner.  What happens when you have severe memory leak?  The computer crashes.

Why is this a problem?

Well, consider TEMPS for your temporary storage problem. Yes, I made this up, but it is still accurate!

T—Time—Before a crash, your computer slows down. The longer the memory leak continues, the more time you lose.

E—Emotions—If you are anything like me, you get frustrated when technology doesn’t work the way you think it should. That frustration impacts your mental and physical well-being.

M – Money – You lose time, which translates to money, but many people also think they must spend money to get something fixed or replaced.  The truth is that you can fix this on your own.

P – Productivity – Too often, you may lose unsaved work when the application or system crashes.

S—Security—Memory leak opens the door for cyberattacks, such as code injection attacks, a common method of stealing information.

What can we do about this?

As bad as it may sound, there are several easy ways and one very technical way to deal with memory leak.

• Write code—The most technically challenging method is to write code to solve the problem. You can include a trash collector-type code to keep everything clean. If you have access, this can be a separate program code or part of the application coding. Don’t worry; while this stops the problem before it creates havoc, there are other ways to help.
• Update and Patch—We hear this all the time, right? In this case, if the system has a weakness that allows for memory leak, an update or patch from the manufacturer might contain the code needed to solve the problem.
• Check RAM usage – If you were unaware, you can find out how much of your memory is in use by hitting Ctrl-Alt-Delete and going to Task Manager. It gets a little tricky to figure out what may have memory leak, but if small applications like your calculator start looking like they are taking as much memory as your internet browser, you have a problem.  Once you see something that seems too large, close it or end the task.
• Disable startup programs—This may not strictly be to negate memory leak, but disabling unnecessary programs from running on startup will keep them from interfering with memory usage without your knowledge.
• Uninstall unnecessary programs—I am not the expert on what your computer needs to run, but you can quickly consult an expert. They should be able to see if you have unnecessary programs. For example, I got my phone through Xfinity and am now with Verizon (not a plug, as both have pluses and minuses). Under Verizon, I should be able to uninstall any programs specific to Xfinity.
• Close applications—Shut down the application to immediately stop the memory leak and restore the little bits of information. It’s nothing fancy; just close it. Make sure it is not minimized or still running in the background.
• Shut down – The longer a program or operating system runs, the more likely you will have memory leak. Make it a habit to shut down your computer daily.  While this does not fix the coding issues that allow memory leak to occur, it will ensure that your RAM gets cleared out.  This is easy to say and do if your computer is a phone, tablet, laptop, or desktop.  If you have a server or other sort of mainframe system, bringing in an expert to help with a program to stop the leak is more beneficial.

Memory leak may not be the biggest problem that you deal with when using your computer.  However, I have found that Murphy’s law likes to team up with memory leak (or just too many applications being open) to shut me down when I am in the middle of something big.  Be safe, be wise, and always take care of your computer.

The post Memory Leak? appeared first on Eagle Secure Solutions.

A Hacker Got Everyone?

If you have not paid attention to the news recently, you may have missed a big story coming to light this week. You have likely had your identity compromised.  What else is new, right?  Wrong.  In a data breach of epic proportions, 2.7ish billion records have been stolen.  Reportedly, these records are for the US, Canada, and UK.  How is that different from other breaches?  National Public Data (NPD) is a background check company that pulls data from a variety of sources and sells it to companies and individuals for a price.  If they have done their job correctly, they have gathered data on your SSN, phone numbers, past addresses, relatives’ names, past jobs, jail records, and more.  Essentially, a background check company like NPD has an open book for your identity, and NPD lets the book get stolen.  What makes this worse is that the cyberattack happened in April of 2024.  That means your information, my information, and my child’s information may have been floating around the dark web for four months.  Oh, but wait, there’s more!  While the data has been up for sale for $3.5 million, recently, a hacker group released the data for FREE!

Big Deal…My identity has been out there before!

Many of us have felt that there is a chicken little situation with data breaches.  We hear about it constantly, but that does not mean something will happen to me, right?  True, you may or may not be perfectly safe.  You won’t know which way it turns out unless something happens.  So, you are left wondering, “Is today the day?”  You might not even know about your identity being stolen until you need a car loan, mortgage, new credit card, or school loan.  When you cannot get that new loan, you find out loans have already been taken out in your name.  Not only that, but you owe thousands of dollars you knew nothing about.  What’s worse is that you may face more immediate issues from identity theft.  Your bank account could be drained, your social media accounts can be hacked, and your phone number can be hijacked.

SIM Swapping

Given the potential depth of records for everyone impacted by the data breach, the idea of SIM swapping, SIM jacking, or SIM splitting is of more significant concern.  What is that?  These terms refer to the idea that a hacker convinces your phone company to change your phone number to a different SIM card.  They can do this by providing all the information to answer security questions, which may be in the background check data (mother’s maiden name, high school, date of birth, etc.).  This helps the hacker to use a verified number when calling businesses about your accounts.  It also allows the hacker to hijack the MFA codes sent to your phone number, giving them greater access to secured accounts and data.

Ok, now what?

Thankfully, there are steps you can take to protect yourself.  Yes, they may take some work and possibly money on your end, but it will help you in the long run.

1. Monitor your credit – The best place to start is with a credit check. You will be able to see if your identity has already been stolen.  From there, set up credit monitoring so that you are alerted to changes in your credit.  The earlier you are warned, the easier it is to combat fraud.  At the bottom, I will add links for the three big credit bureaus: Equifax, TransUnion, and Experian.
2. Freeze your credit – If you are not looking to open a line of credit any time soon, consider freezing your credit. This is free and can prevent someone from opening a line of credit without taking verification steps.
3. Improve your internet security—Everyone hates the extra steps to keep things secure, but get over it. You either want to take the extra steps to secure yourself or recover from identity theft. I guarantee one is a lot less stressful than the other.
   1. Passwords—Use different passwords for everything. Use long passwords (12-18 characters) and complex passwords (capital and lowercase letters, numbers, and symbols). If you are concerned about remembering your passwords, get a password manager.
   2. MFA, Security Keys, and Authenticators – Add an extra level of protection with an MFA, security key, or authenticator. MFAs typically send a code to your phone number or email, so if you are concerned about SIM swapping, one of the other two options may work better.  A security key is a physical object connected to your computer that allows you to connect to specified sites.  An authenticator program sends a randomly generated MFA code through the program tied to your device rather than the phone number.
   3. Protection Software – Antivirus, malware protection, and spam filtering software are good ways to protect your computer. Make sure they are up to date to protect from the latest threats.
4. Purchase Identity Theft Protection—Some plans may include theft prevention monitoring and reimbursement of funds if your identity is stolen. Other plans cover just one part. Make sure you know what you already have through places like your bank or insurance companies and fill in the gaps.

Unfortunately, we are experiencing a high frequency of data breaches this year. In fact, in the first half of 2024, over 1 billion people were impacted by data breaches worldwide, a 409% increase over the same period last year. Doing nothing leaves you vulnerable to hackers and thieves. Protect yourself, be safe, be smart, and always be great!

Credit Bureaus

Equifax:  www.equifax.com OR www.equifax.com/personal/credit-report-services/credit-freeze

TransUnion:  www.transunion.com OR www.transunion.com/credit-freeze

Experian:  www.experian.com OR www.experian.com/freeze

The post Epic Hack – 2.7 Billion Records appeared first on Eagle Secure Solutions.

Major IT Outage Hits Banks, Airlines, Businesses Worldwide (msn.com)

The post Worldwide IT Outage appeared first on Eagle Secure Solutions.

By Jennifer Yeagley

Have you ever been sitting at your computer and gotten a pop-up stating you have a problem with your computer? Or have you gotten a phone call from a tech support company (or Microsoft directly) stating that your computer has an issue that needs immediate attention?  SCAMS! Every week, we field phone calls from clients saying that their computers have been compromised and they need help!  Unfortunately, about half of these folks have already fallen for the scam and either provided access to their computer or given financial information.  Please do not fall for this trick!  Microsoft doesn’t call you!!!

Tech Support Scams

Scammers play on our fears of losing out on something good or having something taken away from us.  When it comes to tech support scams, the scammers are trying to provoke a fear of losing your data or computer access.  There are two common methods to engage you in a tech support scam.   The first is a tech support company calling and alerting you that your computer has a problem.  The second is through a pop-up on your computer that provides you with similar messaging about an issue but asks you to call a number provided or click a link.  In this case, you likely have something on your computer that prompted that pop-up, but it likely only has the function of creating the pop-up.  You probably clicked on something online that installed a little program to run that pop-up.  These are harmless unless you call the number, but they can be removed with good security software.

So, regardless of who initiates the call, the tech support scam works the same way.  They say they can fix the problem, but you must pay them and allow them to remote into your computer.  After remoting into your computer, they “run a diagnostic test” showing a problem.  They are running a program designed to look like a real test but will always show a problem.  You give permission to fix and give them financial data like a credit card number or check information.  Some scammers will insist on some random form of payment, such as gift cards, cryptocurrency, or other methods.  This should be a HUGE red flag!  They show you they have fixed the problem, and everyone is happy.  There are two big problems, though.  First, the scammers likely installed something on your computer to steal information or allow them to break into your system quickly.  Second, they now have financial information and often use it later.

What can you do?

Many people fall for this scam, so let me give you what to do or not do before, during, and after the fraud.

BEFORE:

• Run security software (antivirus, malware scans, etc.) regularly to reduce the risk of scam software being on your computer.
• Find a quality technician you can trust. Just as you might find a trusty mechanic for your car, having a technician for your computer is a smart step.
• Educate yourself on scams and how they play out. It is hard to dupe a person who knows about the scam.

DURING:

• Ask questions about how they know of the issue on your computer. Get specific information from them regarding their company and the caller’s information.  Google everything to determine if a scam has been reported online for the number, the company, or the location.  If there is somehow a legitimate reason (unlikely), then getting this information should confirm it for you.
• Do not allow them to remote into your computer. See if you can scan your system to verify an issue.  If there is a problem with your computer, someone may have to remote into the system to clear it up; however, it should be that quality technician you researched before rather than the shady person on the phone.  Tell the scammer you will call them back or get off the phone to delay their interaction.  If you are challenging, they will move on.
• If you allow the scammer remote access to your computer, watch the entire process. You may be able to see if they add something to your system.
• DO NOT give financial information in any form to the scammer! If your computer has an issue, you may need to pay someone to fix it.  Until you have verified proof that you are on the phone with someone legitimate, do not pay them.  Furthermore, you can ask to use a 3^rd party payment site, like QuickBooks, to get an invoice and pay there.  Why?  In that case, the scammer would not have your payment information, as the other vendor protects it.

AFTER:

• If you have gone through the entire process with the scammer and regret it, don’t be embarrassed. Honestly, it happens a lot.  Scammers are good at creating a sense of urgency and making you believe you have a problem.  Additionally, scammers like doing more of this around the holidays when we are stressed about other things.  The mood makes it easier to break through your defenses.
• Call your trusted technician to examine your computer. If you don’t have one, 😊 I know a good one! They can find any malware or ransomware left on your system.
• Contact your financial institution. If you used a credit card or banking information, calling may allow you to cancel the transaction.  If that is not possible, at least alert them to the fraud.  In many cases, scammers will charge fees after the initial date of contact with you.  Your bank can terminate those transactions before releasing the funds.
• Change your password. Update your security measures, in general, to ensure that the scammers no longer gain access to your system after it is cleaned up.
• Report the scam to the FTC at ReportFraud.ftc.gov. This allows scammers to be tracked and a case to be created against them.
• Talk about your experience with friends and family. I know no one wants to acknowledge that they have been scammed, but talking about the event prevents others from falling for it.  Do not allow your friends and family to experience the same thing if you can help them avoid it.

Other Scams

While this blog is mostly about tech support scams, I want you to be aware of other types of common scams that may work similarly to get your financial information or access to your computer.  This is not an exhaustive list, but that’s because scammers are getting more creative every day!

• Refund Scams—These often occur after the tech support scam. You are asked about the service call. If you state that you are unhappy with it, the scammer will initiate a refund. That sounds great until you realize that they are again fishing for your financial information.
• Survey Scams—If you complete a survey, you will not get a million dollars, and it is unlikely that pop-up or email surveys are legitimate. Some sites with vetted surveys pay, but you would rarely get to those through pop-up ads.
• Government Money Ads – If you see an ad promoting free money from the government, pay attention to the agency providing the funds. Go directly to that agency’s website or contact them directly to determine the claim’s validity.  Do not follow the links through to a point where you give away your personal information.
• Venmo/Cash Applications—It is becoming more common for someone to send you cash, “realize” their mistake, and request that you return it. Being the good person that you are, of course, you send it back. Then you find out they canceled the original transaction, so you are out whatever money you sent.
• Sponsored Ads—When you search for a service, the first links are typically sponsored or paid for by someone promoting their service. Be wary. Scammers pay for this so that you trust them and provide them with your information. It is sometimes difficult to tell the legitimate sites from the scams.
• Phony Emails – You may receive emails or texts from organizations that seem legitimate. If there is a warning from Facebook that an unrecognized source has used your login, you want to take that seriously.  However, you should generally not click links in emails when it is avoidable.  Furthermore, check out the email address.  If that warning came from TomTom@gmail.com, that notification is FAKE!  Make it your practice to look at email domains every time to ensure you are not getting duped!

In the end, the idea is to be safe, be savvy, and make good choices!  Good luck!

The post Microsoft Doesn’t Call: Scams and Tricks to Steal Your Money appeared first on Eagle Secure Solutions.

Once upon a time, we were all told that AI would create living machines that would kill us all or use us as batteries.  AI is no longer the villain from yesteryear’s psychological or action thriller.  It is here and taking over faster than most technologies do.  Why?  It is fun, but also really useful!  With that combination, who can resist the call of AI?

Microsoft has developed an AI technology that is free and usable by all, and of course, they have also developed more complex versions of the technology for a price.  I am digging how cool some of this stuff is.  However, I am also highly aware of the impact on various art and work streams.  Let’s dig in!  I am not here to create an ad for Copilot; even though Eagle Secure Solutions could hook you up (wink, wink, nudge, nudge).  I just want to share some of what it currently does so that you can be informed.

To start, I did ask Copilot, the free web version found here, to write a blog about Microsoft Copilot…it didn’t do that. It did give me some key points to include in a blog post.  Since it sounded like an ad, I am mostly ignoring that.  Then I followed one of the prompts provided, “Write a joke that my coworkers would find funny.”  The result was “Why did the computer go to therapy?  Because it had too many bytes of emotional baggage!”  Arguably, that is another failure.  However, the cool thing about Copilot is that it is creating this from a base of language and web grounding.  It is an original unfunny joke!

I wanted to create a challenge for Copilot to create a plan for proposing Acronis backups to a small business.  Guess what I got…an eight-step plan with items to assess with the company, key ideas and features about Acronis backups, strategies to propose, and plans to demo and implement the software.  If that wasn’t something that we already did, I would find this a very useful plan.  My final test for the free version was to ask for a visual ad for Eagle Secure Solutions.  I must say that these were very impressive even if they weren’t exactly what I wanted.  See the images below!

That I can’t play with, but seems amazing, is Copilot for Microsoft 365.  From the demos I have seen, the tools can help you organize and respond to emails in Outlook, take notes and summarize meetings in Teams, take your tables and graphs to the next level in Excel, and more.  In one demo, I saw a table in Excel that had information that was needed in an email.  From the Copilot in Excel, emails were generated from simple prompts.  The emails could be copied and sent from Outlook.  I watched about 15 minutes of demos and felt strongly that there is a time-saving factor to Copilot.  Research also supported that feeling with users claiming an average of 2.5 hours saved monthly.  That may not sound like much, but I see potential for way more than that.

Now, let’s talk about that impact on various art and workstreams.  It took me less than a minute to generate 4 eagle pictures.  Some very artistic people go into making this type of graphic, which will be cheated due to this technology.  The pendulum keeps swinging concerning administrative assistants versus managers doing computer tasks.  I foresee that we will swing away from administrative assistants again.  I am not necessarily seeing a huge loss of jobs from Copilot as it stands now, but the potential is there for the future with this and other AI technologies.  However, I also believe that people adapt to new technologies and find ways to grow in ways that create new types of jobs.

I am not the authority by any stretch on AI or Copilot, but I believe we are just on the cusp of using AI tools to improve our productivity.  While it will lead to changes in the way we work and the type of work being completed, it is critical to jump on board now.  This is a fast-moving technological advancement that will not wait until you are ready.  Enjoy the time you have early to play with it rather than waiting until you are in a situation where you must use it or fail.

The post Copilot – Microsoft’s Cool and Helpful AI appeared first on Eagle Secure Solutions.

By Jennifer Yeagley

In the last two months there have been tons of cyberattacks.  Remember that one happens every 39 seconds?  So, in two months’ time that should be roughly 132,923 cyberattacks.  Most of these are unsuccessful, but it is important to look at three that were not only successful, but crippling:  Ascension, Synnovis, and CDK.  Why should we look to these, because they teach us a critical lesson on the need for pivot strategies as a form of business resilience.

Let’s dive into what has happened in each of these three cases that caused massive turmoil and even led to at least one fatality.

• Ascension – This is a hospital system in the U.S., which was hacked through an employee accidentally downloading malware allowing for a ransomware attack. The cyberattack came to light on May 8,2024 and was “resolved” by June 14, 2024, 37 days.  The result of the attack was that patient charts and records were unavailable to doctors across 140 hospitals in 10 states.  Healthcare workers were able to continue providing care as they switched to paper records.  However, they became reliant on patients providing accurate histories and medication lists.  They also found that the systems that were once in place for ensuring accuracy and expediency with paper records had vanished.  Nurses reported having confusing paperwork that wasn’t always legible.  There were delayed or lost lab results, one instance of which caused a death of a waiting patient.  Medication errors and an inability to cross check allergies or drug interactions caused problems.  Additional stress was put on the medical system by healthcare professionals quitting in favor of other hospitals.  While there has been a “resolution” to the initial ransomware attack, medical records are still being updated for those seen in the downtime, and there is still fallout from patient and healthcare worker mistrust.
• Synnovis – This pathology lab in the U.K. was attacked with ransomware on June 3, 2024. Unlike the Ascension attack, the situation at Synnovis is still unfolding.  As of June 21, Synnovis confirmed that this was also a data breach with customer data being released on the dark web.  The pathology lab connects with multiple NHS hospitals in the U.K., so the impact has been to patient safety first and identity security second.  There is a limited amount of testing that the lab can perform, so all non-critical surgeries are being canceled or pushed elsewhere.  As of June 20, 1,134 planned operations and 2,194 outpatient appointments were postponed.  Keep in mind that planned surgeries include the likes of C-sections, knee replacements, and spinal fusions, so these are still critical surgeries for those getting them.  Synnovis frequently tests blood type to ensure patients get the proper blood type when needing a transfusion.  Because the hospitals are not able to get tests done, they are calling for donations of O- and O+ blood while other types of blood are aging out on the shelf.  The NHS has also called for volunteer medical students to help carry out blood testing until this situation is resolved.
• CDK Global – Again, we are seeing an unfolding situation with a ransomware attack, but this time it is for a software company that supplies its software to roughly 15,000 car dealerships and rental companies like Penske. On June 19, 2024, CDK was hit with an initial cyberattack that took them down for several hours.  While in the process of getting back online, a second attack took them down for a week at this point.  The impact of this has been to block the sale of cars at many of the dealerships that work with the software.   Some of these dealerships have been able to continue selling using old paper methods but are getting stuck at different parts of the process with some not being able to complete the financial transactions and others not being able to complete the transfer of ownership.  An additional pain point of this has been the continued work of scammers masquerading as CDK representatives reaching out to the dealerships with offers of help.  This only further expands a problem for the individual dealerships.

Ok, so varying degrees of failure and general crappiness going on for each of these companies, but how do you avoid the same fate?  First remember that regardless of the cause of downtime, you may not know how long you will be out of the game.  If a flood ruins all your IT infrastructure, building, and all physical files, you will be out for much longer than if you have a brief power outage.  A ransomware attack may have a different timetable than malware that is found on the system.  So, it becomes a plan for the worst and hope for the best situation.  That plan needs to include quality pivot strategies that will work for you and your team.

Traditionally, when you think of pivot strategies in business, you are looking for new products, marketing, or distribution due to changes with the customer base.  These are usually well thought out in response to the current environment but demonstrate a dramatic course change for the company.  When looking at business resiliency in the face of a cyber or other disaster, the pivot strategy must still be well planned, shift dramatically, but will likely be in response to projected environment.  Meaning, you will need to plan for something with a lot of uncertainty and unknown variables.  To pivot, though, means to turn on a central point.  When pivoting your operational strategy in the face of an incident, remember the central point is that you are a needed entity with a needed product that cannot be lost simply due to a hardship.  The better you plan and the more you believe in your business, the better you will pivot.

Any Friends fans out there?  If so, you can probably hear this picture right now.  Just remember that yelling “PIVOT” isn’t enough to get the job done.  Everyone on the team has to be a knowledgeable part of the strategy, and the strategy has to work.  Otherwise, all you have is a large couch on a small staircase with angry people.

When the software, hardware, or whatever ware is not working for you, what can you do?  Here are some of the questions you should be asking BEFORE you run into the need:

• What was I using before? Can I use it again? Do I need something new?
  • This could be software, spreadsheets, paper, etc. Can you pivot back to these quickly and easily?  Will there be a financial obligation to picking them back up?  Remember that Ascension picked up the paper method again but had forgotten or dismantled the operations to make it effective.  If picking up an old method, make sure it is fully intact before implementing.
• What are the critical functions that must be done?
  • Keeping in mind that this could be days, weeks, or months of downtime to cover. Car dealerships found that they could pivot away from most of the functions offered by CDK software but got stuck at critical junctures prior to finishing the process.  Ensure success by having a plan for every critical step.
  • You must think about your internal and external customers. Do you need to think about payroll processes or how your bills get paid?  Also remember that there may be legal repercussions if you do not do certain things in a timely manner.  Make sure you know what those “things” are to avoid adding to your problems.
• Who can I call on for support?
  • Other people and businesses will help you, but you need to know who to ask and how to plan for them to help you. Every school has a planned location to move the students to in case of a bomb threat.  Yes, that is sad, but it is also planned, practiced, and fully community supported.  You can have something similar for your business if you think about the types of “bombs” you may encounter.
  • Speaking of community, do not underestimate their willingness to help in crisis. The NHS hospitals are dealing with a critical need for type O blood as they pivoted to a strategy that would negate the need for strict typing.  People are rising to the challenge.  They also tapped into the medical student community for further support.  Recognize the ways that you can call on your community to support your need.
• What contacts do I need to have access to?
  • If you keep all your critical contacts in the place that goes down, how are you going to call? It may sound silly, but do you remember phone numbers anymore?  Probably not.  Having your contact information allows you to get in touch with those you need to, but it also helps you to verify who you are getting contacted by.  Car dealerships getting duped by the fake CDK employees didn’t lose their contact information, but they didn’t verify it either.

These questions and pivot strategies are part of a larger incident response and disaster recovery plan.  For your organization to be successful, it is critical to have a well organized and practiced plan, otherwise, you will fall.  As the old saying goes, if you fail to plan, you plan to fail.

The post Business Resiliency: Pivoting appeared first on Eagle Secure Solutions.

Everything seems to need a password now, but how do I remember yet another one????  Honestly, so many people don’t bother with a hard or unique password that it is a huge security risk.  With so many personal devices entering the workplace, the risk is no longer a personal one and businesses are getting impacted.  IoT (Internet of Things) attacks, which are attacks on endpoint devices like cell phones and tablets, have quadrupled in the last 5 years.  Why?  One reason is the lack of strong passwords.  In fact, the top 5 passwords unlock up to 10% of the world’s devices.  So, first, play your part in becoming secure and STOP using common passwords!

Top 10 passwords of 2024 (so far) according to a study done by Cybernews:

• 123456
• 123456789
• qwerty
• password
• 12345
• qwerty123
• 1q2w3e
• 12345678
• 111111
• 1234567890

They then went further to look at the link of common names, sports teams, curse words (yes), cities, seasons, months, and food.  In fact, out of 15,212,645,925 passwords analyzed, only 2,217,015,490 were unique.  That’s only about 14.6% of all the passwords were unique!  Aren’t we told to make a new password for everything and have it be difficult to decode?  Ok, so there were only 15.2 billion passwords in the study.  How did they get those passwords?  Data breaches.  Yeah, these were passwords that failed.  DO NOT USE THEM!!

Alright, so how do we do better?  Here are some simple guidelines to create better passwords.

• Make it longer – Currently, most passwords have 8 or fewer characters. Can you make it 12, 15, or more?
• Mix it up – Use capital and lower-case letters with numbers and symbols.
• Leave out the personal information – Do not include your birthdate, name, kids’ names, or other information that would link back to you.
• Consider mnemonic devices or nonsensical – Password crackers try word combinations, so using a string of random letters or disconnected words in a phrase make it more difficult to break.
• Use password generators and password managers – If you want the safest passwords, let a generator put up something random. They are impossible to remember, but that’s where a password management system can support you.  There are several ways to manage passwords, from written, to spreadsheets, to a browser add on to track them all.

At the end of the day, we must start acknowledging the changing times.  In the last 30 years, we have advanced tremendously, but so have the criminals.  We shouldn’t make it easy for them with a sad password choice.

Most Common Passwords 2024 – Is Yours on the List? | CyberNews

The post Password Management appeared first on Eagle Secure Solutions.

The post Thank you PSAB! appeared first on Eagle Secure Solutions.