Entries by Bob Appleby (1525)

Wednesday
Oct042023

Introducing the Sophos Incident Response Services Retainer

With tangible ‘readiness’ now a key component for cyber resilience, I’m excited to announce the launch of the Sophos Incident Response Services Retainer. It provides all organizations (whether an existing Sophos customer or not) with speedy access to Sophos’ industry-first fixed-cost incident response service in the event of a breach.

The retainer also includes external vulnerability scanning and critical preparedness guidance, enabling organizations to proactively improve their security resilience by pinpointing and resolving issues that reduce the likelihood of a breach in the first place.

Every Minute Counts

The need for go-to incident response support that can activate immediately has never been higher, as revealed in the latest analysis of Active Adversary behavior by Sophos X-Ops:

  • The median dwell time in ransomware attacks fell from nine days in 2022 to five in the first half of 2023
  • Attackers take just 16 hours on average to reach Active Directory (AD)
  • 90% of ransomware attacks occur outside standard weekday business hours

The Sophos retainer cuts red tape, allowing Sophos incident responders to quickly jump into active cyberattacks to investigate and remediate them, minimizing business impact.

The Importance of Preparedness

Planning and preparedness are complementary elements of an incident response strategy. Having a plan is essential, but you also need to be prepared to implement that plan at short notice – and as the research shows, more likely than not outside standard working hours. The Sophos Incident Response Services Retainer gives you on-demand access to a team of incident response experts that will rapidly stop active attacks and get you back to normal operations.

Reducing Cyber Risk for All Organizations

The Sophos Incident Response Services Retainer is available to non-Sophos organizations as well as customers already using Sophos’ endpoint, XDR, network, email, and other security products, or Sophos MDR Essentials. Endpoint configuration health checks and device audits are also included in the retainer for existing Sophos customers.

Organizations that prefer broader services in one package can purchase Sophos MDR Complete, which automatically includes full-scale incident response.

To learn more about this exciting new service, read the Service Brief and speak to your Sophos representative or partner.

Tuesday
Oct032023

Coming Soon: Critical Attack Warning in Sophos Central

Adaptive Attack Protection came to Sophos Endpoint earlier this year, automatically deploying an elevated level of protection if adversary activity is detected on a particular device. Coming soon, the new Critical Attack Warning extends Sophos Endpoint’s context-sensitive defenses with an estate-wide approach that alerts if adversary activity is detected across multiple devices in the customer’s environment.

When the Critical Attack Warning threshold is met, an alert will be sent to all admins in the Sophos Central account to inform them of the situation and provide attack context and details. Customers can respond themselves using Sophos XDR, seek assistance from their partner, or engage the Sophos Incident Response team, all from within Sophos Central

We’re planning to make Critical Attack Warning available to all customers running Sophos Intercept X Advanced and Sophos XDR via a staged roll-out, due to begin later this month.

Thursday
Sep212023

New Layout option in Microsoft Edge

 

 published 

 

Tuesday
Sep192023

Celebrating National IT Day: A Tribute to the Tech Heroes

Today, September 19, 2023, is National IT Day, a day to appreciate and thank the IT professionals who keep our digital world running smoothly. Whether it’s network engineers, system administrators, database admins, ethical hackers, or any other type of IT expert, they all deserve our recognition and gratitude for their hard work and skills.

IT professionals are the backbone of any modern organization, as they ensure that the computer systems, networks, databases, and software are functioning properly and securely. They also troubleshoot problems, provide technical support, implement new solutions, and constantly update their knowledge and skills to keep up with the ever-changing technology.

IT professionals are not only essential for businesses, but also for society as a whole. They enable us to communicate, learn, work, shop, play, and access information online. They also contribute to innovation, research, education, health care, entertainment, and many other fields that rely on technology.

IT professionals often work behind the scenes, without getting much recognition or appreciation for their efforts. They may have to deal with stressful situations, tight deadlines, complex challenges, and demanding customers. They may also have to work long hours and adapt to changing environments and expectations.

That’s why National IT Day is a great opportunity to show some love and appreciation to the IT professionals in our lives. Here are some ways you can celebrate National IT Day:

  • Send a thank-you note or email to an IT professional you know or work with. Express your gratitude for their service and support.
  • Share a positive review or testimonial about an IT professional or an IT company on social media or online platforms. Highlight their achievements and skills.
  • Buy a gift card or a treat for an IT professional you know or work with. Surprise them with something they like or need.
  • Learn something new about IT or technology. Watch a video, read an article, take a course, or attend a webinar. Expand your knowledge and skills.
  • Support IT students and aspiring IT professionals. Mentor them, offer them advice, connect them with opportunities, or donate to scholarships or programs that help them pursue their education and career goals.

National IT Day is a day to celebrate the tech heroes who make our lives easier and better. Let’s show them how much we value and respect them. Happy National IT Day!

Wednesday
Aug302023

Mom’s Meals issues “Notice of Data Event”: What to know and what to do

If you are a subscriber to Mom's Meals You will want to read this article from Sophos naked security website.

Wednesday
Aug302023

Business OneDrive Storage change

The size of storage subscriptions, however, just significantly shrank, at least for OneDrive users. Microsoft no longer options unlimited cloud storage as part of OneDrive for Business plans. Instead, the default limit is 1TB per user.

There are some options for up to 5TB of storage per user, but those are limited to certain customers. In order to qualify, an organization needs to have five or more users with a OneDrive for Business subscription, specifically plan 2. Even then, there is an initial limit of 1TB per user, but admins can increase that to 5TB per user.

"In response to customer demand, Microsoft has streamlined the purchasing process for customers who use OneDrive for Business standalone plans,” said Microsoft to TechRadar. “Customers currently on these plans will still be able to add seats and renew their license.”

Microsoft's statement explains that organizations with a current OneDrive for Business (Plan 2) subscription can continue to keep that option. Those organizations will even be able to add seats and renew their license. The change appears to only affect new subscribers, who will no longer be able to sign up for a plan with unlimited cloud storage.

TechRadar spotted that the change occurred at some point between July 14 and July 28 this year. Microsoft's website for OneDrive for Business subscriptions now only lists OneDrive for Business (Plan 1). There are also Microsoft 365 subscriptions that include cloud storage, but those are also limited to 1TB per user.

Thursday
Aug102023

How to make a video using Microsoft Stream

Samantha Bahrini, a product manager at Microsoft, walks through the steps of using Microsoft Stream to create and share a how-to video at work. This video shows you how to open Stream and then set up the recording so that you are in the corner speaking to, or referencing, the content on your shared screen. Next it walks you through adding text onscreen to the recording, saving the video, and lastly, adding a title, description, chapters and a transcript. Recording a how-to video in Stream is simple and helps you quickly transfer knowledge at work.
Thursday
Aug102023

S3 Ep147: What if you type in your password during a meeting?

Thursday
Aug102023

Windows 11 August Patch Tuesday update fixes display and brightness issues

What you need to know

  • Microsoft released Patch Tuesday updates for Windows 11 this week.
  • PCs running Windows 11 version 22H2 will receive an update to Build 22621.2134.
  • The update includes several improvements and security fixes, but it does not have any new features.

To learn more click here.

Tuesday
Aug082023

CryptoRom Fraudsters Utilizing AI Chat Tool to Scam Users: Sophos

In a concerning development, cybersecurity firm Sophos has reported that CryptoRom fraudsters are adopting new tactics, including incorporating an AI chat tool similar to ChatGPT, to deceive unsuspecting users into scams.

To learn more click here.

Friday
Aug042023

Electronic Signatures for Government Contracts

Paperless practices have increased the efficiency levels of many government departments and agencies. Much digital data is being transmitted today between government agencies, businesses, and citizens. With all this data being shared and all the privacy issues it could affect, the government must ensure that all transactions are secure to avoid the possibility of fraud and data loss.

Have Electronic signatures for Government contract been proven effective?

Electronic signature solutions have been proven to be effective in government contracts. In the past, it’s been difficult to send documents between agencies and departments. Paperless processes combined with electronic signature solutions, however, can help reduce time and costs while streamlining workflow.

Electronic signature solutions have facilitated government contracting processes. Electronic signatures can be used by governments for many types of contract work such as tender agreements and procurement. They can be used to sign action orders and tender agreements, in addition to federal and state contracting. Using digital signatures not only streamlines the process but also offers greater security and trust for government agencies.

While electronic signatures are not an absolute necessity, they do offer secure, auditable, and convenient ways to process vital documents. While they can improve government workflows, they can also make operations more efficient.

E-signature solutions are generally a good choice for government agencies. They make receiving and sharing documents much easier. Unlike pen and paper, digital signature solutions are simple to use and are stored in electronic form. The best part is that you can even access government websites to view, complete, and sign forms. And because they don’t require hard copies anymore, this becomes less of a security concern for citizens to worry about.

The 2000 ESIGN Act established electronic signatures as legal. Previously, courts had not applied the requirements for “writing” consistently to the law. However, in ESIGN, the law stated that consumers consented to the use of electronic signatures because they knew they were signing a document with their digitally signed identity. That’s a big deal for the consumer, and it also means that a digitally signed document is more secure than a physical one.

What government agencies should look for in an e-signature solution

When your government agency chooses an e-signature platform, you should be on the lookout for:

  • A reliable vendor with a track record of success. Select a strong platform designed for enterprise-level requirements that invests in digital transformation and meets the needs of mobile citizens.
  • A simple-to-use solution that can be used out of the box. Pick an easy solution to implement as your organization will get more use out of it.
  • A solution that integrates with your existing software with no additional cost. Additional fees or coding may be required. Some integrated solutions may not be suitable for all users. Again, when in doubt, simpler is always better.
  • Support for a wide range of legal issues and requirements. Look for a vendor that can offer legal assistance. Compliance requires a thorough understanding of the laws.
  • A trusted vendor with a track record of security. Your data and documents should be kept safe by your solution anywhere they go.
Wednesday
Aug022023

Introduction to ZTNA

Wednesday
Jul262023

How different industries use digital signatures

The adoption of technical standards for digital signatures has lagged behind the passage of legislation, but the benefits of the technology are numerous and far-reaching. Adopting these standards has allowed businesses to save on storage costs, speed up processes and minimize errors. For example, healthcare organizations can reduce the number of documents stored in their physical facilities, while pharmaceutical companies can eliminate the need for costly re-keying. Moreover, automotive and media industries benefit from electronic signatures because they are more secure and easily transferable between systems.

The adoption of electronic signatures in these industries is becoming commonplace. For instance, an organization’s legal department needs signatures for contracts and invoices. While it’s time-consuming to print, distribute, and sign documents, electronic signatures enable instant approval and automatic storage in the cloud. This means that organizations can focus on their projects without spending hours on tedious paperwork. Furthermore, electronic signatures enable faster workflow while minimizing the risk of human error.

Electronic signature usage is widespread in many industries. They have many benefits, including increased security, improved workflows, and a reduced carbon footprint. The use of e-signatures has exploded since the introduction of the EU eIDAS Regulation. These services are now being adopted by most industries, including media companies, who need to deal with a large amount of paperwork in a certain period.

Many organizations are using digital signatures to streamline their workflow and protect the integrity of essential documents. These are some of the most common digital signature uses in 2021.

Government

Because of their security and low cost, digital signatures are being used more frequently by governments. Government offices can introduce new bills and tax returns, manage contracts, manage ID cards, and do many other tasks much faster. Government organizations handle a lot of sensitive information, and the bolstered security of digital signatures mitigates any possibility of it falling in the wrong hands. This speeds up the entire process and decreases risk of unwanted leaks.

Legal

Some of the most sensitive documents in any country is handled by legal firms or legal departments of businesses. Digital signatures have significantly reduced labor and paper costs. This is where sensitive documents can be preserved.

Healthcare

Digital signatures have greatly improved the administrative process of healthcare and treatment. Digital signatures make admission easier and reduce time to care for hospitals and clinics.

Military

Digital signatures have made the military a more secure sector in many countries. Security and compartmentalization of information has improved tenfold as a result.

Manufacturing

Digital signatures is used by manufacturing companies to speed up processes. This allows for better product design and increases production and sales.

Finance

The pinnacle of modern banking is paperless banking, easy loans, and contracts. Digital signatures make all this possible.

Cryptocurrencies

Blockchain authentication is complicated because cryptocurrencies are complex in nature. Digital signatures are used to verify the authenticity of transactions and help to prove ownership.

Monday
Jul242023

ASUS has committed to manufacturing NUC's 10th thru 13th Gen

On July 10th, Intel announced it will stop direct investment in the Intel® Next Unit of Compute (NUC) product line, and instead pivot our strategy to enable our ecosystem partners to continue NUC Systems innovation and growth. At that time, we said that our priority was ensuring a smooth transition for NUC customers, and we would be sharing additional details in the coming weeks.

We are happy to share that on July 18th, Intel and ASUS, a multinational computer hardware and consumer electronics company, announced that they have agreed on a term sheet for a non-exclusive license for ASUS to manufacture, sell, and support 10th through 13th Gen NUC systems.

Furthermore, ASUS will be licensed to develop future NUC system designs to continue NUC innovations.

As previously communicated, customers can continue to order Intel NUC products via distribution through September 1, 2023. Intel will complete shipping orders by September 30, 2023. Intel will publish a formal Product Change Notification (PCN) for the affected products including timelines for EOL process.

Tuesday
Jul182023

COpilot in Teams - Inside Microsoft Teams S7 E9

Monday
Jul172023

Sophos Endpoint: Sophos File Scanner

Friday
Jul142023

Sophos Email: Impersonation Protection

Thursday
Jul132023

What's new in Tasks in Teams

Wednesday
Jul122023

Sophos Think You Know Ransomware?: Ep. 3 Weapons and Warriors

Monday
Jul102023

Sophos Think You Know Ransomware?: Ep. 3 Weapons and Warriors