TechTidBit - Tips and advice for small business computing - Tech Experts™ - Monroe Michigan

Brought to you by Tech Experts™

admin

Insights from the 2023 Annual Cybersecurity Attitudes and Behaviors Report

We are living in an era dominated by digital connectivity. As technology advances, so do the threats that lurk in the online world.

Often, it’s our own actions that leave us most at risk of a cyberattack or online scam. Risky behaviors include weak passwords and lax security policies, as well as thinking “This won’t happen to me.” This is why human error is the cause of approximately 88% of data breaches.

The National Cybersecurity Alliance and CybSafe publish a report on cybersecurity attitudes and behaviors. The goal is to educate both people and businesses on how to better secure their digital landscapes.

This year’s study surveyed over 6,000 people across the U.S., Canada, the U.K., Germany, France, and New Zealand. The survey asked about several things including knowledge of cybersecurity risks, security best practices, and challenges faced.

The report reveals some eye-opening insights, including how people perceive and respond to cyber threats as well as what they can do to improve their cybersecurity posture.

We are online… a lot

It’s no surprise that 93% of the study participants are online daily. The logins we create continue to expand, as well as those considered “sensitive.” Sensitive accounts hold personal information that could be harmful if stolen.

Nearly half (47%) of the study’s respondents have ten or more sensitive online accounts. This amplifies risk, especially if people are using the same password for two or more of those accounts.

Online security makes people frustrated

Most people (84%) feel that online security is a priority. But as many as 39% feel frustrated, and nearly the same amount intimidated. It can seem that you just can’t get ahead of the hackers. Just over half of people thought digital security was under their control. That leaves a whole lot that don’t think so.

But that is no reason to let down your defenses and become an easy target. There are best practices you can put in place to safeguard your online accounts that work, including:

  • Enabling multi-factor authentication on your accounts
  • Using an email spam filter to catch phishing emails
  • Adding a DNS filter to block malicious websites
  • Using strong password best practices

People need more access to cybersecurity training

One way to reduce human errors associated with cybersecurity is to train people. The survey found that just 26% of respondents had access to cybersecurity training.

It also broke this down by employment status. We see that those not actively employed are most lacking. Even those employed can use more training access and encouragement. Just 53% report having access to cybersecurity awareness training and using it.

Employers can significantly reduce their risk of falling victim to a data breach by improving their security awareness training.

Cybercrime reporting is increasing

Over a quarter (27%) of survey participants said they had been a victim of cybercrime. The types of cybercrimes reported include:

  • Phishing (47%)
  • Online dating scams (27%)
  • Identity theft (26%)

Millennials reported the most cybercrime incidents. Baby Boomers and the Silent Generation reported the fewest.

No matter where you fall in the generations, it’s important to adopt security best practices and be vigilant about your online security.

How Can A Data Breach Cost Your Company For Years?

Thomas Fox is president of Tech Experts, southeast Michigan’s leading small business computer support company.

The repercussions of a data breach extend far beyond the immediate aftermath. They often haunt businesses for years.

Only 51% of data breach costs occur within the first year of an incident. The other 49% happen in year two and beyond.

The unseen costs of a data breach

The First American Title Insurance Co. case is a good example.

The 2019 cybersecurity breach at First American serves as a stark illustration. It reminds us of the far-reaching consequences of a data breach. In this case, the New York Department of Financial Services (NYDFS) imposed a $1 million fine.

Cybersecurity sites announced the fine in the fall of 2023. The company’s fine was for failing to safeguard sensitive consumer information. This is one example of how costs can come long after an initial breach.

[Read more…] about How Can A Data Breach Cost Your Company For Years?

Are You Really Ready To Upgrade To Windows 11?

So, you’re thinking about upgrading your business to Windows 11? That’s a smart move because this update comes with some cool features that can boost your productivity.

But here’s the thing, it’s not as simple as clicking a button and SHAZAM, you’re on Windows 11. You need a plan, or you might end up with some messy downtime and confused employees.

Before you get all excited about Windows 11, check which of your current PCs can handle the upgrade. Some older machines might not meet the system requirements, and you don’t want any surprises down the road.

If you need to replace some computers, make sure you budget for that as part of your upgrade plan.

Most of your software that works on Windows 10 should play nice with Windows 11, but don’t take that for granted.

Look at all the software your business relies on to make sure it won’t freak out with the new operating system (OS). Some software might need updates to get along with Windows 11, so keep an eye on that too.

Whenever you’re making a big change that affects your team, you’ve got to have a plan. It’s your roadmap to success. So, what should your upgrade plan include?

  • Clear and honest communication with your team about the upgrade
  • Training sessions to show your employees the ropes of the new OS
  • Help for your managers to guide their teams
  • A timeline for when the upgrade will happen, and all the communication and training that goes with it
  • A plan to handle any bumps in the road and any resistance you might encounter
  • A resource to help your team with any questions or issues they have after the upgrade

Alternatively, team up with an IT support partner (like Tech Experts) to make sure everything goes smoothly and to take the weight off your shoulders!

Don’t go solo on this one; it’s best to have IT pros in your corner. If something goes wrong during the upgrade and you’ve done it yourself, it might take a lot longer to get things back on track. Let experts like our team handle it. We know what we’re doing.

Upgrading to Windows 11 can supercharge your business, but only if you plan.

If you’d like help to make the change as smooth as can be, get in touch.

Unlocking Business Potential With Generative AI: A Guide For Non-Technical Business Owners

In an age where technology continually reshapes the landscape of how we do business, staying informed and adaptable is key. As a non-technical business owner, you might have heard about the buzz surrounding generative AI, but what exactly is it, and more importantly, how can it benefit your small business? This article breaks down the essentials of generative AI and provides practical ways to integrate this innovative technology into your business strategy.

Understanding generative AI

Generative AI refers to artificial intelligence that can generate new content, from written text to images, and even music. This technology, powered by sophisticated algorithms, learns from existing data to create original, realistic outputs. The most common examples you might have come across include chatbots, image generators, and content creation tools.

Enhance customer service with AI chatbots

One of the most immediate applications of generative AI for small businesses is through AI chatbots. These virtual assistants can handle customer inquiries, provide product recommendations, and offer support 24/7. This not only improves customer satisfaction but also frees up your staff to focus on more complex tasks. Tools like OpenAI’s GPT-3 have made creating these chatbots more accessible than ever.

AI-generated content boosts online presence

Creating engaging content consistently can be a daunting task for many business owners. Generative AI comes to the rescue by assisting in generating blog posts, social media updates, and even marketing copy. Tools like Jasper or Writesonic can help you craft compelling content that resonates with your audience, saving you time and resources.

Personalizing customer experiences

Personalization is a key differentiator in today’s market. Generative AI can analyze customer data to create personalized recommendations, tailored emails, and targeted advertising campaigns. This level of personalization can significantly enhance customer engagement and loyalty.

Streamlining operations with automated processes

Generative AI can also play a pivotal role in streamlining business operations. For instance, AI can automate invoice generation, schedule appointments, and even manage inventory. This not only increases efficiency but also reduces the likelihood of human error.

Exploring creative possibilities with AI generated designs

For businesses that rely on creative outputs like graphics, marketing materials, or product designs, generative AI offers a world of possibilities. Tools like DALL-E or Canva’s Magic Write can generate high-quality images and designs based on your specifications, providing a cost-effective alternative to hiring designers.

Understanding the limitations and ethical considerations

While generative AI offers numerous advantages, it’s important to be aware of its limitations and ethical implications. AI-generated content may require human oversight to ensure accuracy and relevance. Additionally, issues around data privacy and intellectual property rights in AI-generated content are important to consider and navigate carefully.

Generative AI is not a distant, high-tech dream but a tangible tool that small businesses can leverage today to drive growth, enhance efficiency, and create engaging customer experiences. By understanding and integrating this technology into various aspects of your business, you can stay ahead in a competitive market.

As you explore generative AI options, remember that the key is to use these tools as a complement to human creativity and expertise, not a replacement. Embracing AI smartly can unlock new horizons for your business and pave the way for future innovations.

Start small and experiment with AI tools relevant to your business needs. Whether it’s enhancing customer service, content creation, or operational efficiency, the journey into the world of generative AI promises to be both exciting and rewarding for forward-thinking business owners.

 

Reader’s Note: This article was written entirely by AI using the prompt “write a newsletter geared toward non-technical business owners about how to use generative AI in their small businesses.” This is a technology that goes beyond automation and the AI we used to know. It can create, content, solutions, and possibilities before unimaginable. The landscape of small business marketing is evolving rapidly. The integration of AI technologies is reshaping strategies for growth. Small businesses are turning to GenAI to enhance their marketing efforts. Despite how useful AI can be, it isn’t a replacement for human review, tweaking and approvals.

Online Security: Addressing The Dangers Of Browser Extensions

Browser extensions have become as common as mobile apps. People tend to download many and use few. There are over 176,000 browser extensions available on Google Chrome alone. These extensions offer users extra functionalities and customization options.

While browser extensions enhance the browsing experience, they also pose a danger. Which can mean significant risks to online security and privacy.

The allure and perils of browser extensions

Browser extensions are often hailed for their convenience and versatility. They are modules that users can add to their web browsers. They extend functionality and add customizable elements.

From ad blockers and password managers to productivity tools, the variety is vast. But the ease with which users can install these extensions is a weakness. Because it also introduces inherent security risks.

Key risks posed by browser extensions

Many browser extensions request broad permissions. If abused, they can compromise user privacy. Some of these include accessing browsing history and monitoring keystrokes. Certain extensions may overstep their intended functionality. This can lead to the unauthorized collection of sensitive information.

Users often grant permissions without thoroughly reviewing them. This causes them to unintentionally expose personal data to potential misuse.

There are many extensions developed with genuine intentions. But some extensions harbor malicious code. This code can exploit users for financial gain or other malicious purposes. These rogue extensions may inject unwanted ads. As well as track user activities or even deliver malware.

These extensions often use deceptive practices. They make it challenging for users to distinguish between legitimate and malicious software.

Extensions that are no longer maintained or updated pose a significant security risk. Outdated extensions may have unresolved vulnerabilities. Hackers can exploit them to gain access to a user’s browser. As well as potentially compromising their entire system. Without regular updates and security patches, these extensions become a liability.

Some malicious extensions engage in phishing attacks. As well as social engineering tactics. These attacks can trick users into divulging sensitive information.

This can include creating fake login pages or mimicking popular websites. These tactics lead unsuspecting users to unknowingly provide data. Sensitive data, like usernames, passwords, or other confidential details.

Best practices for browser extension security

Download extensions only from official browser marketplaces. Such as those connected with the browser developer (Google, Microsoft, etc.). These platforms have stringent security measures in place. This reduces the likelihood of encountering malicious software.

Before installing any extension, carefully review the permissions it requests. Be cautious if an extension seeks access to unusual data. Such as data that seems unrelated to its core functionality. Limit permissions to only what is essential for the extension’s intended purpose.

Regularly update your browser extensions. This ensures you have the latest security patches. Developers release updates to address vulnerabilities and enhance security. If an extension is no longer receiving updates, consider finding an alternative.

It’s tempting to install several extensions for various functionalities. But each added extension increases the potential attack surface. Only install extensions that are genuinely needed. Regularly review and uninstall those that are no longer in use.

Use reputable antivirus and anti-malware software. This adds an extra layer of protection against malicious extensions. These tools can detect and remove threats that may bypass browser security.

Stay informed about the potential risks associated with browser extensions. Understand the permissions you grant. Be aware of the types of threats that can arise from malicious software. Education is a powerful tool in mitigating security risks.

Don’t stay in the dark about your defenses. We can assess your cybersecurity measures and provide proactive steps for better protection. Give us a call today to schedule a chat.

Unlocking The Power Of Encryption For Your Small Business: Safeguard Your Digital Assets

Thomas Fox is president of Tech Experts, southeast Michigan’s leading small business computer support company.

Keeping sensitive business data safe is a top priority. When you’re managing a team of employees that use PCs, phones, and tablets, the importance of encryption can’t be stressed enough.

Encryption is a secret code for your digital information. It scrambles your data into an unreadable format, and only someone with the right “key” can unscramble and access it. Think of it as a lock and key system for your digital assets, ensuring that even if someone gains unauthorized access to your devices or data, they can’t make head nor tail of it without the key.

Your business likely stores tons of sensitive information, from financial records to customer data. Encryption ensures that even if a device is lost or stolen, your data remains safe and confidential.

And there are loads of other benefits too. Lots of industries have strict regulations regarding data security and privacy (think HIPAA). Encryption helps you stay compliant, avoiding expensive fines and legal troubles. [Read more…] about Unlocking The Power Of Encryption For Your Small Business: Safeguard Your Digital Assets

Notifications: Striking A Balance At Work And Home

Notifications have become a part of our daily lives. Whether it’s the ping of a new email, a message from a colleague on Teams, or a meeting reminder on your calendar, these little nudges constantly battle for our attention.

But are we reaching a tipping point with notifications?

According to recent research, the answer might be a big “YES”. The study revealed that the ping, ping, ping of notifications from collaboration tools is not only a distraction at work but is also taking a toll on our precious work-life balance.

So, why are notifications becoming a nuisance, and what can we do about it?

We’re living in the era of collaboration tools. From video conferencing to project management platforms, we rely on these tools to stay connected and productive.

But… the more tools we use, the more notifications flood our screens. During the traditional 9-5, the constant barrage of notifications can derail focus and productivity.

But what’s annoying is when notifications creep into our downtime. One in three workers report that notifications outside of working hours have spiked over the past year.

As a society, we’ve created a situation where notifications disrupt our relaxation and family time.

A third of young workers aged 21-34 struggle to fully enjoy time with loved ones due to work notifications. And that may put you at risk of losing your best people.

Here’s our three step take on tackling the notifications dilemma:

First, set clear boundaries. Make it understood that messages should be replied to within working hours. Practice what you preach by not sending messages outside of your own working hours (schedule-send where possible).

Second, reduce tool overload. Evaluate the collaboration tools you use. Streamline where possible.

Third, empower your employees. Teach them to use do not disturb, and how to mute non-urgent notifications.

While technology has revolutionized the way we work, it shouldn’t come at the cost of our wellbeing and personal time. If we can help you and your team strike a better balance, get in touch.

Top Data Breaches Of 2023: Numbers Hit An All-time High

The battle against cyber threats is an ongoing challenge. Unfortunately, 2023 has proven to be a watershed year for data breaches. Data compromises surged to an all-time high in the U.S.

The last data breach record was set in 2021. That year, 1,862 organizations reported data compromises. Through September of 2023, that number was already over 2,100.

In Q3 of 2023, the top data breaches were:

• HCA Healthcare
• Maximus
• The Freecycle Network
• IBM Consulting
• CareSource
• Duolingo
• Tampa General Hospital
• PH Tech

Let’s look at the main drivers of this increase.

The size of the surge

Data breaches in 2023 have reached unprecedented levels. The scale and frequency of these incidents emphasize the evolving sophistication of cyber threats as well as the challenges organizations face in safeguarding their digital assets.

Healthcare sector under siege

Healthcare organizations are the custodians of highly sensitive patient information. As a result, they’ve become prime targets for cybercriminals and hackers looking to exploit personal information.

Ransomware reigns supreme

Ransomware attacks continue to dominate the cybersecurity landscape. The sophistication of this threat has increased.

Supply chain vulnerabilities exposed

Modern business ecosystems have an interconnected nature. This has made supply chains a focal point for cyberattacks. The compromise of a single entity within the supply chain can have cascading effects.

Emergence of insider threats

The rise of insider threats is adding a layer of complexity to cybersecurity. Organizations must distinguish between legitimate user activities and potential insider threats.

IoT devices as entry points

The proliferation of Internet of Things (IoT) devices has expanded the attack surface. There’s been an uptick in data breaches originating from compromised IoT devices.

Critical infrastructure in the crosshairs

Critical infrastructure has emerged as a prime target for malicious actors seeking to wreak havoc and sow chaos. From power grids and transportation systems to financial institutions and healthcare facilities, the vital systems that underpin modern society have found themselves squarely in the crosshairs of cyber attackers.

The role of nation-state actors

Nation-state actors are entities sponsored or supported by governments to engage in cyber activities, including espionage, sabotage, and other malicious actions, often for political, economic, or strategic purposes.

These actors operate with the resources, capabilities, and backing of a nation-state, allowing them to conduct highly sophisticated and coordinated cyber campaigns.

Nation-state actors are increasingly playing a role in sophisticated cyber campaigns. They use advanced techniques to compromise sensitive data and disrupt operations.

The need for a paradigm shift in cybersecurity

The surge in data breaches underscores the need to rethink cybersecurity strategies.

Collaboration and information sharing

Collaboration among organizations and information sharing within the cybersecurity community are critical. Threat intelligence sharing enables a collective defense against common adversaries.

Cybersecurity Tips For Everyday Life

When it comes to cybersecurity, we often rely on our IT experts and installed software to protect our systems from digital threats.

From tech support to firewalls, a lot of tools and people contribute to our online safety!

In the midst of all of this, we can sometimes forget that we, too, play a critical role in guarding our systems and networks. At home or in the office, we each have a responsibility to protect the private data in our care.

Human error

Human error is actually responsible for 95% of cyberattacks. YOU are the number one threat to your own private data! You can also be its greatest defense.

How might you put yourself at risk? It can be as simple as clicking on malicious links, opening attachments from unknown senders, or sharing sensitive data by mistake. One wrong click, if your devices and systems aren’t properly equipped to defend themselves, can be disastrous.

Social engineering

Then there are social engineering attacks, which use human psychology to trick people into revealing sensitive information or taking actions that compromise security. Because they rely on you acting emotionally against your better instincts, even people who are aware of the risks can easily fall victim to social engineering attacks. It only takes one moment of weakness!

We also play a part in protecting private data whenever we brush up on our Security Awareness Training. That knowledge helps us to identify and track potential threats, which help prevent them from happening in the first place! We are also responsible for reporting suspicious activity to the appropriate teams, which can help identify and respond to attacks early on, before they cause significant damage.

They say “it takes a village,” and that rings just as true in the digital landscape of cyberspace! Together we can make the Internet a safer place to spend our time.

Always back up your data

Data loss can happen to anyone, at any time. It can be caused by a hardware failure, software corruption, malware attack, fire, theft, or simply human error. Backing up your data is crucial to protect yourself from these events. It will also save you the time, money, and stress of losing your data.

When you’re wondering what to back up on your system, the answer is simple: Save everything that you don’t want to lose. That includes personal documents, like photos, music, videos, emails, financial documents, and other memories and files that you don’t want to lose. You might also want to do this for application data, which includes settings and save files for those programs that you use frequently.

System files are essentially the applications and processes which your computer (or whatever device you’re considering) need to run. Backing up system files helps make system recovery seamless if anything happens. If a crucial file is corrupted or destroyed, it could crash your whole system irrecoverably.

Then, at least once per month, you should back up your storage files to another, separate location so you have two versions saved in case one file gets corrupted. Some cybercriminals go straight after your saved storage, hoping to excavate a large amount of data at once.

Automatic backups ensure your continued protection whether you forget or are otherwise prevented from doing it on time.

Put These Seven Things In Your 2024 IT Strategy

Thomas Fox is president of Tech Experts, southeast Michigan’s leading small business computer support company.

As we enter 2024, it’s the perfect time to set the stage for an amazing year. And one crucial part of this is reviewing your IT strategy.

If you don’t have one, the start of the new year is a great time to pull one together then.

Think of it as your business’s tech roadmap – a clear plan that shows how you’ll use technology to drive growth, efficiency, and innovation.

We believe your strategy should cover these seven areas:

Business goals alignment

Your IT strategy should align seamlessly with your business goals. It’s not only about your technology, it’s about how that tech can help you achieve your bigger objectives.

Security first

Cyber security is no joke, and your IT strategy should make it a priority. Protect your data, your customers’ trust, and your reputation.

[Read more…] about Put These Seven Things In Your 2024 IT Strategy