Posts Tagged ‘security’

How to Secure Your Business Mobile Phone

Written by WesTec on March 3, 2020. Posted in Business Equipment, Security

Business mobile phones can be used for a range of commercial operations, including inventory control, customer relations, advertising, marketing, banking and more.

Here are few ways to ensure your mobile phone and its valuable data is protected against hackers and malware:

1. Update your phone.

Most of us are guilty of ignoring operating system updates on our business mobile phones. However, the longer you wait to update your phone, the more out of date your systems are, making you an easier target for hackers who can easily identify and exploit system vulnerabilities.

2. Lock your device.

If your business mobile phone contains private information about you or your business, it is important to always engage the four- or six-digit passcode on your device. Don’t use the same password for all your accounts and be sure to change your password occasionally for good measure.

3. Manage app permissions.

On your mobile phone, you can grant apps permissions, like access to the camera, microphone, your contacts, your location, your pictures, and more. Be sure to keep track of which permissions you’ve given to which apps, and revoke permissions that are not completely necessary.

4. Back up your data.

Things happen, but you can always be prepared. When you back up the data on business mobile phones, you are able to protect your important documents and images in case of any loss.

5. Ignore spam and phishing emails.

One of the easiest ways for hackers to access your information is through email. Be sure you don’t click on links in promotional emails, open suspicious attachments or run updates that are promoted through emails. If you need to access sensitive information, report directly to the organization’s website to login.

Connecting the dots with business mobile phones can be confusing, time consuming and costly. For a reliable business mobile phone provider in Houston, contact the experts at WesTec today.

How to Avoid a Spear-Phishing Attack

Written by WesTec on January 10, 2020. Posted in Data Protection

As we discussed in a previous article, phishing is an attack that uses disguised emails as weapons aimed at masses of people. However, spear-phishing is a targeted attempt to steal sensitive information from a specific victim, such as account credentials or financial information.

During a spear-phishing attack, the perpetrator attempts to acquire personal details on the victim’s friends, hometown, employer, hang-outs, and their recent online purchases. This is typically done by disguising themselves as a trustworthy friend or entity through email, social media, phone calls, or text messages.

Because spear-phishing is the most successful form of acquiring confidential information online, it is important to practice how to avoid an attack.

1. Beware what you post: Review your online profiles. How much personal information is available for potential attackers to view? If there is something you do not want the public to see, delete it, or ensure your privacy settings are properly configured.

2. Use smart passwords: It is not wise to use the password for every account you own. In this case, if an attacker has access to one account, they effectively have access to all of your accounts. Passwords with random phrases, letters, and numbers are secure.

3. Use logic with emails: If an organization sends you a link in an email requesting a specific action or sort of personal information, go directly to the organization’s site rather than clicking on the link. Calling the organization can also help clarify the issue. Real businesses will not email you asking for your username and password.

4. Update your software: Software systems include security updates that should help protect you from spear-phishing attacks, as well as others. If you receive notice of a new update, be sure to take advantage, or enable automatic updates.

To learn more about how you can protect your data or sensitive information, contact the experts at WesTec.

How to Protect Customer Data

Written by WesTec on December 19, 2019. Posted in Data Protection, Network, Network Health Check Audits, Security

We place our information online every day. We’re more than happy to hand over our email, phone number, address and credit card information to purchase a product on the internet. In a world where ecommerce is becoming the standard, businesses must do what they can to protect customer data.

Follow Current Encryption Practices

Encryption practices change regularly to evolve and combat cybercriminals. Often, organizations who failed to stay up-to-date with the latest data protection trends fall victim to cyberattacks. To help protect customer data, create a recurring reminder to analyze your company’s security practices and make updates as necessary.

Limit Access to Customer Information

For additional protection, limit who within your business can view customer data. Not every employee needs access to customers’ personal information. When only necessary employees have access to customer information, hackers have a harder time finding a weak point to break into company databases.

Don’t Ask for Unnecessary Information

As a company, it is important to only collect the information you need to complete a transaction or service to your customer. Customers get weary when a business asks for unnecessary information. By only collecting necessary information, there is less for a hacker to steal. This protects customers and their livelihoods.

Educate All Employees on Security Policy

While you may limit who can view customer data, make sure every employee knows and understands the company security policy. Even though an employee may not have access to the customer database, their actions could affect the privacy of customers. For example, if someone were to take a company laptop to a coffee shop and used the open wifi, a nearby hacker could potentially break into the company’s database through the network and steal personal information.

Let Consumers Know Their Information is Protected

The best way to build consumer trust is transparency. Let customers know you value their privacy. Take it one step further by detailing how you work to keep customer information stored safely in a privacy policy. If you’re unsure of how your business should protect customer data, or if your company wants information on the latest encryption practices, contact the experts at WesTec Services. We can help you create strong security protocols and install encryption software for data security.

What is Phishing?

Written by WesTec on December 12, 2019. Posted in Cypbercriminals, Phishing, Security

Phishing is defined as a cyber attack that uses disguised emails as weapons. Hackers try to trick email recipients into clicking links or attachments they designed to steal personal information.

What is Phishing?

Here’s an analogy to better understand: Imagine a fisherman baiting a hook and tossing it into a lake in hopes of getting a bite. If a fish bites, the fisherman reels it in. But, if it doesn’t, the fisherman fails and the fish keeps swimming. Phishing is the same way. A cybercriminal can only gain access to your accounts or information if you fall for the bait. For example, a hacker might design an email disguised as your bank telling you your account has been compromised. They ask you to click on a link to verify your identity. If you click on the link and fill out the information, you have now provided them with the information to access your finances.

Types of Phishing

Hackers attempt to get victims to do one of two things to get what they want. Some cybercriminals try to trick you into giving up your information. This is similar to the bank example above. Other hackers prefer to have you download malware. Often, these types of emails will include a download attachment, often a .zip file or Microsoft document, embedded with malicious code.

How to Prevent Phishing Attacks

If you know how to spot a phishing attempt, you can avoid compromising your data and report it to the Federal Trade Commission. Here are the steps you can follow to confirm the identity of an email sender:

Always check the spelling of URLs in email links before you click
Watch out for URL redirects, where hackers sent you to a different website with identical design
If you receive a suspicious email from a source you know, contact them with a new email, rather than replying

To learn more about how you can protect your data and sensitive information, contact the experts at WesTec.

Top Access Control Trends for 2019

Written by WesTec on October 31, 2019. Posted in Access Control System, IT, Management and Consulting, Network Health Check Audits, Network Installation

Access control systems continuously evolve with the newest technology trends. In fact, they must keep up with updates to protect companies, their employees and data from threats. With a rising number of security breaches, we can expect more companies to install access control systems.

Access Control Reviews

Security breaches are encouraging companies to conduct full audits of access controls. Enterprises will review risks by user, role and business process to isolate and mitigate risks before they turn into high-profile breaches. By noting weak security measures, companies can make changes to better protect assets.

Individualized Access

In 2019, we saw to see a rising trend in individualized access. This ensures each person has their own username, password or identification code. Companies now have access to automated provisioning, which sets up user accounts and creates automated workflows based on job duties.

Security Patching

Hackers will do anything to break into security systems. While this has been a problem for decades, hackers are now specifically targeting overlooked points of access. To combat external threats, we expect access control systems to begin patching vulnerabilities, even if it means temporarily disrupting productivity.

Threat Identification

Next year, systems will continue and expand their use of data analytics to monitor and mitigate threats. Companies will use their dashboards to monitor access, but they will also run possible scenarios to reduce risk and conflict.

Cloud-based Systems

The need for analytics, automation and access will encourage more businesses to install cloud-based control systems. As companies increase their technology and mobile tools, they will want to protect their system in an effective way. As we prepare to enter a new year and decade, businesses shouldn’t ignore threats from potential breaches. Our expert IT professionals at WesTec Services can help you analyze your current strategies and install a system designed to deflect security breaches. Contact us to learn more about our access control systems.

The Benefits of Two-Factor Authentication

Written by WesTec on October 3, 2019. Posted in Security, Social Media, Telecommunications

As technology continues to advance, additional security measures become necessary. Until now, single-factor authentication has been the standard. Single-factor authentication requires a username and password to enter an account. Consumers need additional security measures as cybercriminals become smarter. This is where two-factor authentication helps protect sensitive information and log-in credentials. Two-factor authentication (2FA) isn’t a new concept, but is a necessary additional layer of security. It usually works by requiring the submission of a username and password, then asks for something additional to prove you are who you say you are. For example, some businesses will send a pin number to your cell phone you must provide for entry into a site.

Improved Security

With a second form of identification needed for verification, two-factor authentication makes it harder for an attacker to impersonate a user. In the event a cybercriminal gains password access, they can’t produce the additional element required to authenticate.

Increased Productivity and Flexibility

Employees can work remotely when their employers implement a second factor of authentication. They can securely access important applications, data, documents and back-office systems from any device or location with little risk.

Lower Security Management Costs

Approximately 40% of all help desk calls are related to password resets. With secondary authentication, businesses can expect less of the budget to be spent on security needs. It provides a safe way for employees or consumers to reset their account password by using the additional element to prove their identity, meaning they can handle the issue without contacting an IT professional.

Reduce Fraud

Identity theft is a common goal of cybercriminals. With two-factor authentication, businesses add extra mobile protection for customers, the site and the transaction. Adding a second element in your authentication process builds a sure brand consumers trust. Ready to add two-factor authentication to your website? Contact your Houston IT experts.

Why Your Office Needs an Access Control System

Written by WesTec on June 20, 2019. Posted in Office, Security

Installing an access control system proactively protects your business. ID key entry, fingerprint scanners and video monitoring can ensure only authorized individuals enter a space. WesTec’s access control systems are completely customizable, making it easy for companies with all budgets to protect its employees and assets.

Customizable Access

An access control system can be customized to fit the needs of a business. For example, you can restrict access to certain areas to specific employees. A company can also restrict the times employees enter the building, but give 24/7 access to necessary personnel. Systems can also track an employee’s hours by recording when he or she clocks in and out.

Protection From Intruders

Access control systems make it difficult for unauthorized individuals from entering a space. With the right hardware, including video monitoring, management can monitor a door when an intruder forces it open.

Data Security

If you store expensive equipment, sensitive data or financial information on-site, consider installing an access control system. WesTec employees can set up two-factor authentication for added security. With an additional authentication measure, such as a fingerprint scanner or pin code, there is no risk of an intruder entering with a keycard.

Employee Safety

Today’s society becomes more violent with each passing day. In a world where threats could be anywhere, it is important employees feel protected. Door access control guarantees the only individuals in a space are the ones meant to be there. WesTec offers a variety of access control systems from leading manufacturers. To find the perfect access control system for your business, contact WesTec Services’ highly trained personnel.

Watch out for this persuasive phishing email

Written by Rick Schissler on August 27, 2018. Posted in Office

Watch out for this persuasive phishing email

Anglers catch fish by dangling bait in front of their victims, and hackers use the same strategy to trick your employees. There’s a new phishing scam making the rounds and the digital bait is almost impossible to distinguish from the real thing. Here are the three things to watch out for in Office 365 scams.

Step 1 – Invitation to collaborate email

The first thing victims receive from hackers is a message that looks identical to an email from Microsoft’s file sharing platform SharePoint. It says, “John Doe has sent you a file, to view it click the link below…”

In most cases, the sender will be an unfamiliar name. However, some hackers research your organization to make the email more convincing.

Step 2 – Fake file sharing portal

Clicking the link opens a SharePoint file that looks like another trusted invitation from a Microsoft app, usually OneDrive. This is a big red flag since there’s no reason to send an email containing a link to a page with nothing but another link.

Step 2 allows hackers to evade Outlook’s security scans, which monitor links inside emails for possible phishing scams. But Outlook’s current features cannot scan the text within a file linked in the email. Once you’ve opened the file, SharePoint has almost no way to flag suspicious links.

Step 3 – Fake Office 365 login page

The malicious link in Step 2 leads to an almost perfect replica of an Office 365 login page, managed by whoever sent the email in Step 1. If you enter your username and password on this page, all your Office 365 documents will be compromised.

Microsoft has designed hundreds of cybersecurity features to prevent phishing scams and a solution to this problem is likely on the way. Until then, you can stay safe with these simple rules:

Check the sender’s address every time you receive an email. You might not notice the number one in this email at first glance: johndoe@gma1l.com.
Confirm with the sender that the links inside the shared document are safe.
Open cloud files by typing in the correct address and checking your sharing notifications to avoid fake collaboration invitations.
Double check a site’s URL before entering your password. A zero can look very similar to the letter ‘o’ (e.g. 0ffice.com/signin).

Third-party IT solutions exist to prevent these types of scams, but setting them up and keeping them running requires a lot of time and attention. Give us a call today for information about our unlimited support plans for Microsoft products.

Published with permission from TechAdvisory.org. Source.

Getting ready to switch to VoIP phones

Written by Rick Schissler on August 10, 2018. Posted in VoIP

Getting ready to switch to VoIP phones

Voice over Internet Protocol, commonly known as VoIP, allows you and your employees to make and take phone calls over the Internet using your existing broadband connection. It saves you loads of money and increases team efficiency. If you’re considering moving to a VoIP solution, here are some of the most important aspects to address before the switch.

Network stability

Implementing a VoIP phone system presents unique challenges, such as maintaining a consistent internet connection. Backup internet connections and uninterrupted power supplies are just some of the hardware you should have to ensure reliable VoIP calls. If your internet goes down or the power is knocked out, business goes on as usual.

Bandwidth

Beyond a stable connection, VoIP calls also need minimum network speeds to function. Estimating your current bandwidth and VoIP’s needs is crucial to ensuring your calls are clear and free of drop outs. Before benchmarking your internet speed, decide on how many users, handsets, and calls per day your new VoIP solution will need to handle.

Security

As with anything connected to the internet, VoIP is susceptible to cybersecurity threats and breaches. You could fall victim to information theft and malicious attacks if you don’t have robust and preventive security measures in place. Your best bet is to deploy a firewall to monitor the flow of traffic and protect your systems from security threats.

Budget

VoIP is a long-term money saver for small businesses, but there are relatively small upfront costs when upgrading from a traditional phone system or another subpar VoIP solution. You need to take into account things like whether you’ll purchase deskphones, potential cabling challenges, and installation costs for VoIP-specific routers.

Staff

Employee training is key to a successful VoIP integration. You help these efforts by asking one, or several, of your staff to work with the vendor or IT provider to learn the new system and become in-office resources. While most people are already familiar with video conferencing software such as Skype, it helps to create user guides and manuals to educate those that aren’t as tech-savvy.

VoIP systems create countless cost-saving and business-enhancing benefits, but they should not be installed without certified help. Our dedicated professionals streamline the whole process so your solution is configured and optimized as quickly as possible. Get in touch with us today for information on how to embrace this groundbreaking technology.

Published with permission from TechAdvisory.org. Source.

New Spectre-style attack discovered

Written by Rick Schissler on August 7, 2018. Posted in Security

New Spectre-style attack discovered

Security experts are constantly discovering new potential threats, and quite recently, they’ve found a new type of Spectre-style attack more dangerous than the original. Here’s a quick rundown of the new Spectre variant.

Spectre 101
For those who don’t know, Spectre is a vulnerability in modern computer chips like Intel and AMD that allows hackers to steal confidential information stored in an application’s memory, including passwords, instant messages, and emails. Malicious code running on a computer or web browser could be used to exploit this vulnerability, but ever since Spectre was discovered, Microsoft, AMD, Intel, and other tech companies released a series of updates to fix it.

What is NetSpectre?
To perform Spectre attacks, malware would have to run on a targeted machine to extract sensitive data. But in late July, Austrian security researchers found a way to launch Spectre-style attacks remotely without locally installed malware. The new attack is called NetSpectre and it can be conducted over a local area network or via the cloud.

So far, it’s impractical for average hackers to use this method to steal data. In tests, researchers were able to steal data at a rate of between 15 to 60 bits per hour, which means it would take days to gather corporate secrets and passwords. As such, NetSpectre will probably be used by hackers who want to target specific individuals but don’t want to resort to obvious methods like phishing scams or spyware.

Experts also warn that while NetSpectre may be impractical now, hackers may develop faster and more powerful variants in the future.

How should you protect your business?
NetSpectre attacks exploit the same vulnerabilities as the original Spectre so it’s important to install the latest firmware and security updates. You should also secure your networks with advanced firewalls and intrusion prevention systems to detect potential NetSpectre attacks.

Last but not least, working with a reputable managed services provider that offers proactive network monitoring and security consulting services can go a long way in protecting your business from a slew of cyberthreats.

If you’re looking for a leading managed security services provider, why not talk to us? We provide cutting-edge security software and comprehensive, 24/7 support. Call us today for more information.

Published with permission from TechAdvisory.org. Source.

How to Secure Your Business Mobile Phone

How to Avoid a Spear-Phishing Attack

How to Protect Customer Data

What is Phishing?

Top Access Control Trends for 2019

The Benefits of Two-Factor Authentication

Why Your Office Needs an Access Control System

Watch out for this persuasive phishing email

Getting ready to switch to VoIP phones

New Spectre-style attack discovered

Posts Tagged ‘security’

Follow Current Encryption Practices

Limit Access to Customer Information

Don’t Ask for Unnecessary Information

Educate All Employees on Security Policy

Let Consumers Know Their Information is Protected

What is Phishing?

Types of Phishing

How to Prevent Phishing Attacks

Access Control Reviews

Individualized Access

Security Patching

Threat Identification

Cloud-based Systems

Improved Security

Increased Productivity and Flexibility

Lower Security Management Costs

Reduce Fraud

Customizable Access

Protection From Intruders

Data Security

Employee Safety

Watch out for this persuasive phishing email

Step 1 – Invitation to collaborate email

Step 2 – Fake file sharing portal

Step 3 – Fake Office 365 login page

Getting ready to switch to VoIP phones

Network stability

Bandwidth

Security

Budget

Staff

New Spectre-style attack discovered

Get in touch

Quick Feedback