Information Technology Resources for SMBs

With cybersecurity on the rise, Multi-factor Authentication is a go-to for an additional security measure for your devices and data points. Question: What is Multi-factor Authentication … and Which Method is Best? Answer: Multi-factor authentication is a method of securing data and applications after a user presents two or more credentials to verify the user’s identity for login.  It provides an additional layer of security beyond login credentials. MFA is designed to protect against social

Maintaining a strong cybersecurity posture is more important than ever. With so many businesses investing in digital transformation technologies, the ramifications of a cyber attack would be devastating.  Combine this with the fact that many organizations have standardized the work-from-home model and you’ve got a recipe for serious disruption. But it’s not all doom and gloom. While hackers are eager to exploit the new vulnerabilities entailed by a fully digitized future, there are preventative measures

The Internet of Things (IoT) devices are outnumbering the population of our planet. It is estimated that the planet has over 20 billion devices. The cybercrime results in business-related economic losses in the astounding amount of approximately $8 trillion – EIGHT TRILLION! Beyond its financial cost, the cybercrime disrupts critical and strategic infrastructure of the affected organizations. When an organization with a complex system does not properly assess or mitigate risk, it is important to

A new vulnerability has been discovered for the Microsoft Office Suite named “Follina”.  It is triggered by opening malicious MS Office documents. Follina is a zero-day discovery. It does not appear that there are any exploits just yet, but due to the nature of this exploit, attackers will start to utilize it.   “Zero-day” is a recently discovered security vulnerability that hackers can use to attack systems. “Zero-day” refers to the fact that the vendor

As we go into the long Memorial Day weekend, many users will be checking their phones for new emails, or taking advantage of holiday shopping deals and making online purchases. Cybercriminals are aware of this and will use tactics to try and get you to open a malicious email. While you may think you are receiving an email from a known contact or trusted organization, this email could be from a cybercriminal. Spoofing is a tactic

This week, the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) released its Garden State Cyber Threat Highlights, providing insights into the threats and malicious activity directly targeting New Jersey networks. These threat warnings included ones related to Russia/Ukraine and Cuba. The NJCCIC is the State of New Jersey’s center for cybersecurity information sharing, threat intelligence, and incident reporting. Russia/Ukraine Cyber Threat Update The cyber threat level in New Jersey is currently set to ELEVATED,

Phishing takes advantage of human error, and some phishing emails use sophisticated human engineering tactics to fool the recipient into sharing private information or infecting a network with malware. One phishing email can be responsible for a company becoming a victim of ransom demands in exchange for data or access to your business network.  It can also lead a user to unknowingly hand over the credentials to a company email account that the hacker then

Last week, the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) released an advisory stating that it did not see any specific or imminent cyber threat to New Jersey related to the Russia/Ukraine crisis.  However, it went on to say that it is likely that Russia’s aggressive cyber activity will increase and spread.  Therefore, it stated that New Jersey organizations should ensure that cybersecurity controls and plans are fully implemented. The NJCCIC collaborates with public

Public networks expose your business to security threats. Switching to a virtual private network (VPN) can greatly help in reducing those threats. Many companies rely on public networks for communication and data sharing. It allows them to cut costs and allocate their funds elsewhere. However, reliance on public networks also raises several security issues.   For starters, the network provider might be monitoring the activity, which gives them access to customer details, emails, and critical

Tax season is here and attackers have been aggressively targeting popular tax software to harvest credentials. The software provider Intuit has issued a few security notices of a significant increase in fake emails pretending to be sent by Intuit’s notification system.   Intuit has now joined the ranks of household names such as American Express, Amazon, and other big brand companies whose customers were targeted in phishing campaigns. You may be among those who recently