Crowdstrike: The day the IT First: WINNER from my last newsletter for the Amazon Gift Card was Ariana w/ Atlas Investment Management & Retirement Solutions! Ariana responded to my newsletter in what seemed like a tenth of a second! Congrats! July 19th: The CrowdStrike flawed... The post The day the IT held the Earth Still appeared first on SOS Support.
Crowdstrike: The day the IT First: WINNER from my last newsletter for the Amazon Gift Card was Ariana w/ Atlas Investment Management & Retirement Solutions! Ariana responded to my newsletter in what seemed like a tenth of a second! Congrats! July 19th: The CrowdStrike flawed patch that took the Earth to a grinding halt Did you notice anything unusual on Friday, July 19th even through the weekend? Personally, I noticed Amazon packages showed up late. FedEx deliveries were delayed. Weird things were happening all over the place. Payment processors were “broken”… It was like the moon-earth connection myths were all coming to fruition. CrowdStrike, is one of the, if not the most globally recognized leading company of “I.T. awesomeness” … an all-in-one platform called CrowdStrike Falcon Complete that essentially replaces **nearly** every I.T. defense tool needed… This software offers Endpoint Security; Exposure Management; Identify Threat Detection & Response; IT Automation; Threat Intelligence & Hunting; Cloud Security; Next-Gen SIEM; Generative AI; Data Protection; Workflow Automation… All under their flagship product. This company WAS so “SO HOT” that its stock price was hovering near $400/share. We actually have been looking at them for over a year and considering them as our solution of choice on behalf of our clients… But the barrier to entry is SO EXPENSIVE… $98,400 per customer MSRP per year. So, if we have 70 clients we do I.T. support for, that would be $98,400×70 (in other words, they are too good for us). Their product also has remediation of all security issues – so when an issue is found, their NOC (network operation center) which employs hundreds of engineers logs into the affected computers on behalf of the company’s I.T. department and remediates the issues. Time Magazine: 298 of the Fortune 500 companies including banks, energy companies, healthcare companies, and food companies use CrowdStrike!! What Happened? On Thursday evening, July 18th, CrowdStrike rolled out a typical patch/update. As it turns out, this update had a bug. This bug crashed every Windows computer and Server globally running the software causing the dreaded Blue Screen of Death (BSOD). The recovery/remediation/repair process is NOT automated. It is all hands-on. Rest Assured – none of our clients were impacted (except co-managed clients whose owner VC/PE groups have deployed CrowdStrike to all their companies). The benefits of non-unified layered protection: We have a multi-layered approach using a handful of vendors to perform the same feature set that CrowdStrike essentially does. On top of that, we are our own NOC and we are performing remediation DAILY for all our clients. We have looked into and often desired to move to an all-in-one platform like CrowdStrike. And, honestly, nobody compares to CrowdStrike which provides an all-in-one set of services listed above. NOBODY. Well, thank you CrowdStrike for making us look good With that said… This is a harsh reality in the I.T. world. We all depend on the internet, security, and uptime. This is a rude awakening to the I.T. space and how quickly things can be flipped upside down – even for Fortune 500 companies with hundreds of I.T. Engineers on staff. SOS|Support here to help If you have any colleagues, friends, or associates at any company that was affected by the CrowdStrike outage – reach out to us @ itdonebetter@sossupport.net or 801-563-9700. We are here to help be boots on the ground. Microsoft has issued a fix and we had experience starting Friday to fix affected computers. The Future of CrowdStrike: Although they are getting plummeted in social media, X/Twitter, and the internet – I believe CrowdStrike will come roaring back stronger than ever in the coming months and years. I have no hesitation in recommending CrowdStrike to any enterprise (and yes, we can even resell it… for only $98,400/year). I’m not a financial advisor, but now COULD be a great time to buy some stock in a company that either MUST rebuild stronger than ever, or it will crumble and fail. I believe the former to be the case. Time will tell. Crowdstrike stock has dropped 30% in 5 days: Mailing Address Change: Please send all mail correspondence to the following address and no longer to the Draper PO Box. SOS Support 1098 W South Jordan Pkwy #106 South Jordan, UT 84095 ——————————————- For the latest cyber-attacks reports, follow these links: https://www.cisa.gov/uscert/ncas/current-activity https://www.csis.org/programs/strategic-technologies-program/significant-cyber-incidents Thanks, Jason ——————- The post The day the IT held the Earth Still appeared first on SOS Support.
Crowdstrike Outage occurred on July, 19th This outage is affecting people worldwide, with multiple companies experiencing issues. It is impacting businesses across various sectors, including airlines and even 911 services in some cases. There have been reports of banks in other countries facing similar... The post Crowdstrike Outage appeared first on SOS Support.
Crowdstrike Outage occurred on July, 19th This outage is affecting people worldwide, with multiple companies experiencing issues. It is impacting businesses across various sectors, including airlines and even 911 services in some cases. There have been reports of banks in other countries facing similar problems, although there is no confirmation of any impact on banks in the United States. This issue appears to be occurring not only in the United States but also globally, affecting different industries. It is important to note that this is not a cybersecurity attack but rather a computer glitch. Crowdstrike, a well-known cybersecurity firm, was working on an update when this incident occurred. The CEO has confirmed that this is not a security incident or cyber attack, further emphasizing that Crowdstrike plays a crucial role in protecting systems from hacking. The issue seems to stem from a problem between Crowdstrike and Microsoft. When there is an issue with Crowdstrike, it affects all Microsoft computers that are connected to it. Mac and Linux computers are not affected. Many individuals have reported encountering a blue screen on their computers at banks, airlines, and other locations. This issue, known as the “blue screen of death,” essentially locks users out of their computers, causing inconvenience and potential disruptions in services. While personal computers without the Crowdstrike plugin or cybersecurity layer may not be affected, enterprise companies and corporate customers relying on this protection are facing significant challenges. These challenges range from being unable to print boarding passes for flights to bank tellers being unable to assist customers with account openings. Crowdstrike is actively working to resolve this issue, and they have identified the problem, isolated it, and deployed a fix. However, the duration of the fix’s deployment and its impact on existing issues are still uncertain. It is crucial to recognize the urgency of resolving this problem, especially in critical areas like hospitals and emergency services. Additionally, flight cancellations and delays are already a significant concern, with over 500 cancellations and 700 delays reported. The speed at which Crowdstrike can address this issue will determine whether the situation improves or worsens. It is important to highlight that there have been reports of 911 issues in New Hampshire, although it is yet to be confirmed if they are related to this incident. If unable to access 911, individuals should explore alternate methods to seek emergency assistance, such as trying different phone carriers or using a different type of phone. In terms of possible solutions, using an IT documentation platform can help resolve issues stemming from cache synchronization problems with login servers. Using an incognito browser or booting into Safe Mode or the Windows Recovery Environment can also aid in remediation. If using Safe Mode, it’s recommended to connect to a wired network for better results. The Federal Aviation Administration (FAA) has implemented a ground stop due to a bug in Crowdstrike agents that results in blue-screening computers. To resolve this, users are advised to boot into safe mode, remove the corrupted file located in the %WINDIR%\System32\drivers\CrowdStrike directory, and then boot the host normally. Please note that this information is subject to change as the situation unfolds. Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post Crowdstrike Outage appeared first on SOS Support.
The Chinese Hack That Stole 22 Million People’s Data
Two powers compete to dominate the global market we know foreign countries and companies swipe our corporate Secrets China Breaks the Rules in its quest to become the world’s economic superpower There’s two types of companies left in the United States companies that have... The post The Chinese Hack That Stole 22 Million People’s Data appeared first on SOS Support.
Two powers compete to dominate the global market we know foreign countries and companies swipe our corporate Secrets China Breaks the Rules in its quest to become the world’s economic superpower There’s two types of companies left in the United States companies that have been hacked by China and companies that don’t know they’ve been hacked by China, yet Chinese hackers breach American corporations under direct orders from Beijing. This is often times a military operation and you don’t disobey orders in the military, billions of dollars worth of us trade secrets are stolen every year, the people behind the keyboard think they’re Anonymous and these charges show you are not What will it take to stop the theft? In July 2015 the Washington based USA office of personnel management announced that the private records it kept in more than 22 million American civil servants had been stolen the US government never formerly blamed China but plenty of unnamed officials made the accusation that Chinese government backed agencies can steal information about how you live with, your social security number, your date of birth, what schools you went or even your employment history so a lot of significant personally identifiable information that we consider um very sensitive and how long will the intelligence Community the United States be feeling the ramifications of this This data can be used to Target US government employees and contractors for many many years and to try to bribe them. Google Google broke the silence on their blog in January 2010 the American Technology giant had been hacked and China was to blame but Google wasn’t the only company targeted it was just the first one to go public a slew of other Fortune 500 corporations were also hacked and an attack now known as operation Aurora what was interesting about operation Aurora wasn’t that it was some kind of new attack it was that it was the first time an American company had had the courage to stand up and point the finger at China and say we know you did this Nicole pearlroth is a cyber security reporter for the New York Times and she’s written extensively on Chinese hackers and Google uh as open as they were about who had done it they’ve been relatively Clos lipped about what exactly was stolen but the word on the street is that uh the Chinese were actually able to get a fair amount of Google source code that source code could help Chinese hackers break into Google’s products or to replicate them in the future what do we know about Chinese we know that China has basically uh made it a core part of its economic mission to stop being the world’s manufacturer and start innovating Every 5 years you see a new industry that China wants to excel at and suddenly you just see a rush of cyber attacks towards whatever industry China has said that it wants to dominate in it’s paint formulas it’s Coca-Cola’s negotiation strategies it’s think tanks it’s diplomats it’s uh University professors it’s law firms people have started to realize that this actually has become a serious issue or I think it made people realize that um some of the most vibrant companies in the United States were major targets but I think it took another five years for um companies that thought why would we ever be the target of a state sponsor Chinese Cyber attack to wake up and say oh we’ve been a victim Phishing To click on a link so you’re talking about fishing emails with malware payloads that’s right in some cases uh it was actually innocent message uh not not even an email that once you click on that link your machine is compromised and the attackers take over it and how did you figure out it was China once we started tracking all the machines that were involved in the compromise and there were these multiple of machines that were set up for command and control and where the connections into those machines were coming from we started to see um signs that were pointing to Chinese activity and later on as we expanded investigation we started to uncover other activity that we were able to tie together to this group that we now call Aurora Panda uh Chinese nation state group uh that is really conducting to this day Espionage activity into numerous organizations government agencies as well as private sector organizations across the globe operation Aurora offers a glimpse into how Chinese hackers work within the country’s government or more specifically its military branch the people’s Liberation Army. You keep on going because you were given a mission by your by your boss to do so and uh you don’t disobey orders in the military you need to achieve that objective absolutely the hackers deployed malware. Obama’s Administration American intellectual property was once kept secret by 2014 the Obama Administration was no longer silent for the first time the Department of Justice charged Chinese military hackers for breaking into US corporations today we are announcing an indictment against five officers of the Chinese people’s Liberation Army for serious cyber security breaches against six American victim companies these represent the first ever charges against known State actors for infiltrating United States commercial targets What to learn about this Stay Vigilant Don’t click on suspicious links Just click on links your work colleagues, family members or closed friends send you, or from sources you trust. In case of an email, check the domain first, and see if it’s a legit website, not a forged one. Download just trustful files Just download files from trustful sources, also, avoid copyright infringement. Contact us if you need IT support! Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post The Chinese Hack That Stole 22 Million People’s Data appeared first on SOS Support.
In today’s digital age, more organizations than ever are using remote staff. While this change provides various advantages, such as flexible work conditions and access to a global labor pool, it also introduces a new set of obstacles. Improving business culture in remote work situations... The post Top 5 Virtual Team Building Activities appeared first on SOS Support.
In today’s digital age, more organizations than ever are using remote staff. While this change provides various advantages, such as flexible work conditions and access to a global labor pool, it also introduces a new set of obstacles. Improving business culture in remote work situations is critical to retaining a pleasant and productive team. Incorporating a virtual team-building exercise is an important tactic for improving corporate culture and sustaining a good, productive remote workforce. Virtual meetings have evolved into an important tool for preserving ties and improving business culture, providing as a platform for arranging virtual icebreaker games, establishing virtual reading clubs, and even bringing unique visitors such as llamas or goats to engage and excite the team. One of the primary problems is ensuring that remote employees feel as integrated and connected as their in-office colleagues. To address this, try using virtual team-building activities that have been proved to improve team cohesiveness and morale. These activities are especially crucial for virtual teams since they confront problems such as communication across time zones and a lack of social connections, both of which can impede cooperation and engagement among distant employees. Here’s an overview of interesting virtual activities for your business, as well as recommendations on how to get started, including the necessary equipment. Virtual Team Building Activities Virtual escape rooms. Escape rooms are exhilarating puzzle-solving experiences that need collaboration and creative thinking. Many platforms now provide virtual escape rooms specifically for remote teams. Participants are separated into groups and must work together to solve riddles and escape a virtual confined area. This exercise promotes teamwork, improves problem-solving abilities, and provides a pleasant method for team members to interact, making it a valuable team-building event. To begin, you will need a virtual escape room platform and a reliable internet connection for each team member. Organizing virtual quiz games is a simple and enjoyable approach to engage remote employees. You may make your own game with platforms like Kahoot or Quizlet, or utilize pre-made quizzes from websites like Sporcle or TriviaMaker. Trivia games inspire amicable competition and teamwork. Furthermore, it allows employees to demonstrate their expertise on a wide range of issues, providing them an opportunity to shine outside of their professional function. Virtual Book Club. Freelancer relaxes while reading a book. A virtual book club is a wonderful approach to encourage employee learning and development while also boosting teamwork. Choose a book that reflects your company’s beliefs or purpose, and plan weekly or biweekly talks. This helps employees to interact over common interests and get new views from one another. A virtual book club not only encourages personal growth, but it also fosters critical thinking abilities and open communication among team members. Virtual Happy Hour Even if you can’t get together in person for after-work beverages, virtual happy hours may help you create a fun and relaxing atmosphere. Set up video conversations using platforms like as Zoom or Skype, and have team members bring their favorite beverage to enjoy together. This pastime helps individuals to unwind after work while also engaging with their coworkers on a deeper level. It also encourages social contact, which is necessary for effective team dynamics. Virtual Team-Building Games Just because your team works remotely does not imply you can’t have entertaining team-building events. There are several online games and activities that may be played virtually, such as virtual escape rooms and online quiz games, or even virtual scavenger hunts. These games promote not just friendly competition, but also teamwork and communication. Furthermore, they can help break up the monotony of remote work and provide some excitement to the workplace. Equipment List To ensure that these operations go properly, your team will require the appropriate equipment. This is a basic list: Man happy working at a coworking facility. Laptops and desktop computers: Required for accessing virtual platforms and engaging in activities. Webcams: Essential for video-based tasks, since they allow team members to see one other, exchange expressions, and communicate more effectively. High-Speed Internet Connection: A solid and fast internet connection is required to avoid delays or disconnections throughout the activity, ensuring a smooth experience for all participants. Microsoft Teams: Microsoft Teams is essential for virtual team-building activities because it allows for a range of engaging games and activities that foster remote team camaraderie, enhance interpersonal connections, reinforce business culture, raise morale, and encourage work-life balance. Getting Started: Tips for Successful Integration. Choose Activities Carefully When choosing virtual team-building concepts, consider your team members’ hobbies and backgrounds to ensure that everyone feels included and enthusiastic to join. This strategy is critical for building a cohesive virtual team. Consider virtual activities such as virtual murder mysteries, virtual taste experiences, and remote game experiences, which are meant to bring together team members from all over the world and encourage camaraderie, engagement, and cooperation among distant teams. Virtual meeting platforms are critical for efficiently organizing and carrying out virtual team-building activities, since they play an important role in improving team cohesiveness and morale. Consider including team meetings to help minimize anxieties during wellness activities, particularly belly breathing exercises. Make these exercises a regular part of your team’s routine. Consistency helps to establish a routine that team members can look forward to, increasing their sense of belonging. Encourage Participation Encourage everyone to participate, but recognize that some people prefer to observe. The goal is to make these gatherings stress-free and pleasurable, but not essential. Gather Feedback After each activity, request feedback. Understanding what works and what doesn’t helps you to fine-tune future events to better suit your team’s needs, with a focus on the needs and input of remote team members to boost productivity and morale. Invest in Quality Equipment Make sure your staff has access to the appropriate equipment. If possible, consider providing team members with stipends to update their home office setup. Incorporating virtual team-building activities into your company processes is a smart move toward fostering a more connected and cohesive remote workforce. You may establish a thriving remote work culture by carefully selecting activities, guaranteeing access to the necessary equipment, and cultivating an environment of inclusion and cooperation. Finally, education has an important role in both individual and societal growth. It provides individuals with the required information, skills, and values to constructively contribute to their communities. However, it is crucial to remember that education should include not only academic performance but also the development of critical thinking, empathy, and social responsibility. As we navigate through an ever-changing world, It is critical to focus and invest in education to ensure a better future for everybody. Let us work together to establish a more fair and inclusive education system that allows everyone to fulfill their greatest potential and leave a better world for future generations. Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post Top 5 Virtual Team Building Activities appeared first on SOS Support.
Breaking the Record-breaking Vulnerability in Google Chrome in May Underscores the need to Move Away from reactive-based IT Solutions
Hello from SOS|Support! I’m a few days late for July’s newsletter having spent last week in Lake Powell with family and friends… I’ll put a fun 4th of July picture below for all my SOS friends. 🙂 NOTE: READ ALL THE WAY THROUGH, PAY... The post Breaking the Record-breaking Vulnerability in Google Chrome in May Underscores the need to Move Away from reactive-based IT Solutions appeared first on SOS Support.
Hello from SOS|Support! I’m a few days late for July’s newsletter having spent last week in Lake Powell with family and friends… I’ll put a fun 4th of July picture below for all my SOS friends. NOTE: READ ALL THE WAY THROUGH, PAY ATTENTION TO THE DETAILS… FIND THE POP QUIZ AND THE FIRST ONE TO EMAIL ME BACK THE ANSWER WILL GET A $25 AMAZON GIFT CARD! We anticipate unveiling some awesome upgrades from our team in the next few weeks! In the meantime, I wanted to share some statistics about the 2024 year to date. My right-hand man Scott Gentry was in Denver for “Pax8 Beyond” in June… which is an I.T. conference quickly becoming the Gold Standard tech conference of the year with execs from Microsoft, Amazon AWS, Google, Apple, and dozens of the other largest Tech companies in the world. A few notable highlights (or, lowlights.. as this is kind of sad): Ransomware Attacks in 2024 are up 96% Year to date, there have been more successful attacks in 2024 than all of 2023 alone NVidia passed Apple as the 2nd largest Tech company. Only Microsoft is bigger. Microsoft 365 continues to dominate Google Workspace What do we think about this? This exceeded expectations – in the wrong way. I expected things to get worse, but not this bad. We are ahead of the curve – and were already eliminating all our “Reactive” support plans… It’s bad I.T. business at this point to be reactive. There is far too dominant a need for proactive remediation and monitoring for all I.T. assets … Not just for our client’s sake, but also to protect ourselves. We eliminated our Hybrid plan for this very reason – and replaced it with our “IT Unleashed Lite” plan… which is the same thing, other than we are pro-actively patching operating systems and 3rd party applications (such as Chrome, if you recall my email last month) from vulnerabilities. At this point, not doing this is more like running a new car into the ground… waiting for it to break, and not doing oil changes and maintenance proactively. Yes, you can skip waxes and leave seats with stains… but mission-critical things to keep your car running smoothly and safely should never be skipped. SOME SUCCESS STORIES: I was notified by our lead engineer about a handful of incidences this past month… Here are a couple examples: Scenario 1 The client was looking on Amazon when a popup came on the screen. This popup led to an executable that was malware. Our proactive agents FROZE the internet, and the client called us not realizing they had been hacked and that our protection agents had blocked access to the malware as well as the user. We were able to remediate and get the client back online. Scenario 2 The client was interacting with a (unknowingly) malicious incident of the popular remote agent called ScreenConnect (this issue is on the rise!). Our proactive agents analyzed the executable and found that it was not a legitimate instance and was, on the contrary, a mimic file that looked every bit like the real program but it was hacked code. The agents then isolated the computer and removed its network access to prevent spreading. We then finalized remediation and got the client back online. These are just two examples of things we are seeing every day. To summarize, here is a quick update on the status of 2024 CyberSecurity: In 2024, the United States has experienced a notable increase in cybersecurity breaches compared to 2023. Here are some key statistics: Ransomware Attacks: In 2023, 66% of organizations reported being targeted by ransomware, with the average ransom payout rising significantly from $812,380 in 2022 to $1,542,333. In the first half of 2023 alone, ransomware extortion totaled $176 million more than in the same period of 2022. Despite a slight decrease in the percentage of incidents involving ransomware from 21% in 2021 to 17% in 2023, the overall impact and financial cost have increased dramatically? (Cobalt: Offensive Security Services)?? (The White House)?. Data Breaches: The number of data breaches in the United States was high in 2023, with 3,205 incidents affecting over 353 million individuals. In 2024, the trend of large-scale breaches continues, with several high-profile attacks exposing millions of records? (Norton)?? (The White House)?. Phishing and Email Attacks: Phishing remains the most common type of cyberattack, accounting for 39.6% of all email threats. Email is the primary vector for 94% of malware deliveries. The reliance on phishing for cyberattacks continues to be a significant issue in 2024? (Cobalt: Offensive Security Services)?. Cost of Cybercrime: The financial impact of cybercrime is growing. The average cost of a ransomware attack in 2023 was $4.54 million. This high cost reflects the increased sophistication and financial demands of modern cybercriminals? (Cobalt: Offensive Security Services)?? (The White House)?. Sector-specific Impacts: Critical infrastructure, such as healthcare and energy sectors, remains a prime target for cyberattacks. The construction industry was notably impacted by ransomware in 2023, and attacks on critical infrastructure by state and non-state actors have continued to grow in 2024? (Cobalt: Offensive Security Services)?? (The White House)?. Overall, the cybersecurity landscape in the United States has seen a continuous rise in both the frequency and severity of breaches, with significant financial and operational impacts across various sectors. To end on a fun note – Happy Independence Day. We are blessed to be in a great country. These kids were ultra-patriotic! POP QUIZ: What are the teens saying in this picture? The winner gets a $25 Amazon gift card! Carter showing off but he is the most patriotic kid I know! The post Breaking the Record-breaking Vulnerability in Google Chrome in May Underscores the need to Move Away from reactive-based IT Solutions appeared first on SOS Support.
We need to move and keep up the pace. Nobody likes to be left behind, yet that is what happens to people who refuse to adapt to a changing environment. Of course, some things will not change as quickly as others, and others may change... The post Tips for Improving Efficiency at Work appeared first on SOS Support.
We need to move and keep up the pace. Nobody likes to be left behind, yet that is what happens to people who refuse to adapt to a changing environment. Of course, some things will not change as quickly as others, and others may change at an unforeseen rate, but everything is moving. Whether we like it or not, innovation is no longer an elusive miracle; instead, it is more akin to everyday excellence. And, since we frequently encounter changes and new ways, adjusting becomes a major concern. We have all adapted to several changes during our lives. Growing up is an act of ongoing adaptation, as we see it, therefore it is reasonable to assume that we have all had some experience with it. Of course, in this scenario, experience does not imply competence, nor is it a developed and mastered talent. Most of us may benefit from some training in this skill to ride the tsunami of growth and change that is fast approaching us. When we think about training, we believe in repetition. Perhaps something has been fixed. To perfect a skill, you practice it repeatedly. When we practice for a tournament, we repeat a set of maneuvers until we have them ingrained in our system, and we do this with all types of training. But how can you develop a talent that involves change? There goes the difficulty. Improving your adaptability requires training it like a muscle. But then, how do we exercise this muscle? There are several ways we may work around and within this skill to guarantee comprehensive and practical instruction. Please continue reading to master them. Seek feedback Every now and then, we attend a meeting or speak with a management who informs us of areas where they believe we may improve. In other cases, we may believe that we are doing admirably, yet this is a matter of style rather than performance. But what is it in these ideas that encourages us to grow? It may not be a wonderful comment on how we can dramatically increase our performance, but it may be a basic bit of advise on how to compose your emails, which is still useful. But why? We only perceive ourselves via our eyes, and the mirror is the only other way we can look at ourselves. So having someone else’s perspective on our work is a valuable thing that we can leverage. We understand our reality and why we do things; others do not, therefore they have a different viewpoint. Looking for feedback helps you to put yourself in the shoes of others, view yourself through a new lens, and have the cognitive flexibility to comprehend how that perspective came to be. Being reminded of your blindspots is a useful tool for getting started on mending what needs to be repaired. Keep a growth mindset Taking chances is sometimes necessary while training to adapt. Taking chances often means failing, and being able to perceive every opportunity as a learning opportunity is critical to prospering. Installing this attitude is finding the urge to go above and beyond in order to discover what lies beneath; it is the desire to discover how significant your potential is and how you may fulfill it. Learning entails change. We mutate with every piece of knowledge, whether it is a shift in viewpoint or a change in conduct, even if it is consistent with our beliefs. Part of having a growth mindset is focusing on progress rather than the end result. And as we proceed along that route, we might become liquid and adapt ourselves to the conditions. By appreciating the process, we can take it step by step, making change and adaptability easier to handle. If you find this difficult, perhaps this article can help you adjust your perspective. Finally, remember that adjusting requires comprehension, acceptance, and learning. What better approach to work on it than to attempt to maintain a nutritious perspective? Be curious This goes hand in hand with a development attitude. Curiosity opens doors, illuminates our understanding, and absorbs what is required. Many hidden gems may be found around the globe if you look at it with curiosity. We ask more questions, seek more information and insight, and comprehend the world around us. There is no difference between comprehending the universe and understanding its dynamic. Once we grasp why the apple falls from the tree, we can accept that it will not remain the same and adjust to the reality of its fall. The same may be stated about a change in the work dynamic, such as the transition from working at an office to working from home when COVID-19 began. When we comprehend, adaptation occurs effortlessly and unavoidably, much like gravity’s influence on the fruit. So, be interested, try your best to learn your profession, and maintain an open mind and heart in case things change. Practice cooperation Do you want to discover an excellent resource for learning about adaptation? Working with others. One thing that can help us stay fixed is ourselves. Working with various individuals and letting go of our preconceived notions about what should be done to allow others to express themselves may be tough. When we believe we know what needs to be done, we do not want to waste time listening to someone else who may have an idea that is not as effective as our own. It may appear futile to us, which is understandable, but there is also much more to learn there. Working with others encourages us to reconsider our positions, compromise, and find a middle ground that allows all sides to be pleased. Teams complement and push each other forward, ensuring that everyone grows. Cooperating and attempting to grasp what our colleague wishes to say entails adjusting to a concept that is not our own. It is adjusting to an uncontrollable aspect in our equation. Someone who does not understand us correctly may perceive the same instruction quite differently. Develop Your Problem-Solving Skills If you master problem-solving, you won’t have to worry when the winds shift. Change is frequently frightening since we don’t know what to do with our new situation. Other times, change is difficult because we wish to tackle new issues using old ways. It doesn’t have to be that complicated. Training your brain to look at an issue and come up with a solution is an art. To improve, some people enjoy playing chess, while others prefer to solve puzzles. This training does not have to be related to your profession. However, if you can begin to integrate them, the outcomes will be more original and robust. The objective is to become more solution-oriented and develop the habit of identifying and implementing solutions. In life, just as in chess, you will be confronted with challenges and circumstances that you must acknowledge, analyze, locate various solutions, predict the future outcome of each, and implement the best choice. Develop Resilience I’d want to say that you might fail someday, but the fact is that you almost surely will. Some adjustments will be challenging, calling into question what you believe and have accomplished. Something happened, and you may have to start over or even destroy a whole project. Circumstances can change in the blink of an eye, and there is little we can do but breathe deeply and adjust. Consider yourself a war survivor; you may have won, but your reality will be drastically altered as a result of what you have witnessed. To develop resilience, you must create time for recharging and learn to listen to your body when it is time to stop—or perhaps make a conscious effort to stay optimistic and make the best of every scenario. You must acknowledge change and understand that it will definitely occur. Just like when you realized your first bike was too little to ride anymore. Adapting to changes comes with the territory, and learning to recover from life’s ups and downs is ultimately what matters. Get out of your comfort zone Comfort is excellent, and it may be just as important as the air we breathe. However, it cannot be your sole destination. Being comfortable all the time does not provide much opportunity for progress. There is some difficulty in change, but far more in progress. Unexpected occurrences arise when we step outside of our comfort zones. Those might be excellent chances to hone our flexibility. Putting ourselves in new situations outside of our comfort zone forces us to evolve and adapt. When you gradually push the boundaries of your comfort zone, you become more adaptable, which is an excellent method for mastering adaptability. It’s not that straightforward; comfort zones exist for a purpose, and leaving them might feel like an urgent threat at times. However, the ability to do so demonstrates flexibility; it demonstrates that you are capable of doing more than you are accustomed to. You don’t have to start with anything really extreme, like a 180-degree turn. Begin simply, start small. If you find yourself repeating something repeatedly, consider modifying the process and doing it differently. Managing little changes is like planting on fertile land to manage major, severe changes in time. The times change, and so do we. Sometimes we change quicker than the circumstances; other times, the opposite happens. We may wrap ourselves around things that are near to us, but change can be abrupt, and we must be prepared for the unexpected. Adaptation is attempting to comprehend that everything in life is dynamic and learning to dance to the song we are playing. This is an essential talent in both life and job. So, why are you waiting to enhance it? Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post Tips for Improving Efficiency at Work appeared first on SOS Support.
How to Build a Security-First Culture That Empowers Your Hybrid Workforce
Imagine a workplace where every employee is vigilant against cyberthreats, a place where security isn’t just a protocol but a mindset. In the era of hybrid work, achieving this vision is not just ideal — it’s a necessity. While implementing security controls and tools... The post How to Build a Security-First Culture That Empowers Your Hybrid Workforce appeared first on SOS Support.
Imagine a workplace where every employee is vigilant against cyberthreats, a place where security isn’t just a protocol but a mindset. In the era of hybrid work, achieving this vision is not just ideal — it’s a necessity. While implementing security controls and tools is crucial, the true strength lies in empowering your workforce to prioritize security. Without their buy-in, even the most advanced defenses can be rendered ineffective. Building a security-first culture in a hybrid work environment is a complex but achievable task. It requires a comprehensive cybersecurity strategy that not only involves but also empowers your workforce. Let’s explore how to create such a strategy. Key components of a good cybersecurity strategy Here are the critical components that can take your cybersecurity strategy to the next level: Perimeter-less technology In a hybrid work model, employees work from various locations and collaborate online. This means upgrading your security systems to match the demands of this environment type. Invest in cloud-based SaaS applications that are accessible from anywhere. Ensure your applications support Zero-Trust architecture, a security concept centered on the belief that organizations should not automatically trust anything inside or outside their perimeters. Instead, they must verify anything and everything trying to connect to their systems before granting access. Documented policies and procedures Clearly document your security policies and procedures to ensure enforcement. Without documentation, staff may not understand the purpose or steps involved, leading to a lack of buy-in. Identify critical IT policies and procedures, document them, and share them with the relevant teams and staff. Keep the files up-to-date and accessible. Review policies periodically and make changes as needed. Security awareness training programs Make your employees the first line of defense against cyberattacks. Set up interactive training programs to defend against phishing, ransomware, brute-force password attacks and social engineering. Create training videos and a comprehensive repository dedicated to security protocols and SOPs. Reinforce learning with routine tests and simulations. Communication and support channels Define communication and support channels to handle threats effectively. Ensure every staff member knows how to raise an alarm, whom to contact and what to do after reporting it. Outline approved tools for communication and collaboration, discouraging personal apps for official use. Friction-free systems and strategies When devising new security strategies or evaluating systems, prioritize user experience and efficiency. Ensure that security measures and policies don’t feel like extra work or employees may abandon security best practices. Align security systems and strategies with workflows for a seamless experience. Next steps Building a security-first culture is challenging, especially in a hybrid work environment. To succeed, you need skilled staff, 24/7 support and specialized tools. But you don’t have to navigate this alone. Our team can guide you through implementing and managing the necessary IT/cybersecurity and data security controls. Don’t wait for a breach to happen — proactively secure your business. Call us to set up a no-obligation consultation and take the first step towards a secure future. In a hybrid workforce, where employees work from various locations and collaborate online, implementing a security-first culture becomes vital. Upgrading security systems to match the demands of this environment is essential. Investing in cloud-based SaaS applications that support Zero-Trust architecture can help ensure secure access from anywhere. This approach verifies all connections attempting to access systems, regardless of location, to protect against potential threats. By embracing perimeter-less technology, organizations can create a secure foundation for their hybrid workforce. Another critical component of a cybersecurity strategy for a hybrid workforce is ongoing security awareness training programs. Employees should be educated and empowered to become the first line of defense against cyberattacks. Interactive training programs that cover topics such as phishing, ransomware, brute-force password attacks, and social engineering can help employees recognize and respond to potential threats effectively. By reinforcing learning with routine tests and simulations, organizations can ensure that employees are equipped with the knowledge and skills needed to protect company data and systems. Communicating and establishing support channels is also crucial in a hybrid work environment. Employees should be familiar with reporting procedures and know who to contact in case of a security incident. Defining approved tools for communication and collaboration can also help mitigate security risks associated with personal apps being used for official purposes. By promoting the use of secure and authorized channels, organizations can maintain control over data and communication while fostering a culture of security awareness among employees. Achieving a security-first culture in a hybrid work environment requires prioritizing friction-free systems and strategies. Security measures and policies should not feel burdensome or hinder productivity. Aligning security practices with existing workflows and prioritizing user experience can help ensure that employees embrace and adhere to security best practices. By integrating security seamlessly into the daily operations of the hybrid workforce, organizations can create an environment where security is not just a protocol, but a mindset shared by all employees. Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post How to Build a Security-First Culture That Empowers Your Hybrid Workforce appeared first on SOS Support.
10 Ways to Make Your iPhone Charge Faster
Nobody enjoys waiting for their phone to charge, especially when they have someplace to go. While Apple’s technology has intrinsic limitations, there are a few things you can do to ensure your iPhone charges as quickly as possible. If your phone isn’t charging at all,... The post 10 Ways to Make Your iPhone Charge Faster appeared first on SOS Support.
Nobody enjoys waiting for their phone to charge, especially when they have someplace to go. While Apple’s technology has intrinsic limitations, there are a few things you can do to ensure your iPhone charges as quickly as possible. If your phone isn’t charging at all, we have a separate tutorial for fixing iPhones that won’t charge, as well as one for improving iPhone battery life. Enable low power mode. If you want to charge quickly, turn off all non-essential operations; otherwise, it’s like filling a car’s petrol tank while the engine is running. You can keep your iPhone turned on, but you’ll benefit from enabling Low Power Mode, which reduces animations, 5G consumption, display brightness, and background sync. For example, the Photos app does not immediately upload new photographs to iCloud. You may activate Low Power Mode in one of two methods. The first step is to go to Settings > Battery. The second and simpler option is to launch Control Center by sliding down from the top-right corner of the homescreen and tapping on the battery symbol. If you don’t see the icon, click to Settings > Control Center to add it. Turn off the phone. It may seem sacrilege to suggest it, but if you can get by without your phone for an hour or two, turn it off. We don’t mean “sleep mode,” but all the way. Most iPhone models, which no longer have a home button, may be turned off by holding down the side button and one of the volume keys until a series of sliders display onscreen. To power off, drag the Slide to the right. When it’s time to turn it back on, hold the side button. Do not use your phone while it is charging If shutting off your phone or even using Low Power Mode is too extreme for you, you should at least set it down for a bit. Simply having your screen on is a power drain, let alone things like music and video. Perhaps the worst thing you can do is play an aggressive 3D game that strains your phone to its limits. This can also cause the phone to overheat, further limiting charging speeds. Not sure what drains your iPhone’s battery quickly? Then navigate to Settings > Battery. Scroll down to get a list of your most power-hungry apps. Do not use damaged charging accessories Wear and tear are unavoidable. Cables can fracture, fray, or even discolor, while adaptor plugs can warp after being pushed into a socket too many times. You’re lucky if the damage simply affects charging speed. It’s a big safety issue, so if you see any apparent indicators, acquire a replacement right away. Try to stay with Apple-branded goods or those from big third-party manufacturers like as Anker, AmazonBasics, Belkin, or Mophie; inexpensive, unlicensed accessories might be ineffective or dangerous. Use a charging cord and not a wireless charger Wireless charging pads are gaining popularity, however their charging speed is restricted, particularly with Apple products. Even a high-end MagSafe charger can only provide 15W. A USB-C-to-Lightning cable can deliver up to 20W, but only when used with a USB-C power adapter rated at 20W or greater. As previously said, be sure any cable is MFi certified (Made for iPhone), especially if it is not marketed by Apple. Do not charge your iPhone from a computer iPhones may be charged via the USB ports on a Mac or a Windows PC, although they often provide very little power. They are designed to connect mouse, keyboards, and external storage, so use them for leisurely charging while working rather than powering up before a cross-country travel. If you need to charge while away from an outlet, consider investing in a reliable power bank. These are far more suited to portable charging and, with the right models, can reach maximum speeds. Ensure the charging port is clean It goes to reason that if you want your iPhone to charge faster, the charging port should be clear and clean. If it’s blocked with lint and dust, electricity will struggle to get through. Make sure to clean your iPhone’s charging port on a regular basis, and keep your phone out of your pocket as much as possible unless you have a port-seal cover. Companies such as Catalyst, Griffin, and Otterbox manufacture cases with port covers. Lower the screen brightness In Low Power Mode, the screen brightness is decreased automatically, but you may still change it manually. Navigate to Settings > Display and Brightness, or adjust the slider in Control Centre. Overall, we recommend moderating brightness. It improves battery life and is gentler on the eyes, especially at night. If your iPhone has an OLED display, which most do these days, you can save even more power by permanently switching to Dark Mode. Turn Off Optimized Battery Charging In an effort to address issues regarding iPhone battery degeneration, Apple released Optimized Battery Charging. Once it learns your daily behaviors, it begins to keep your iPhone charged at 80% until soon before you regularly disconnect, at which time it recharges. If you really need your iPhone to be fully charged, you may need to temporarily stop Optimized Battery Charging by navigating to Settings > Battery > Battery Health and Charging. If you care about the longevity of your iPhone battery, turn it back on as soon as feasible. Remove the iPhone’s protective cover When you charge iPhones in protective cases, they can become rather hot, which can interfere with the charging process. You definitely don’t need to remove your case, but it’s worth considering if it’s more handy. In severe cases, an iPhone may stop charging on its own if there is a risk of harm. The same is true if you’re charging your phone in a hot environment or in the sun. A side note: never leave your phone in your car on a hot, sunny day. <img loading="lazy" decoding="async" class="alignnone size-large wp-image-1929" src="https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005-1024x538.jpg" alt="" width="1024" height="538" srcset="https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005-1024x538.jpg 1024w, https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005-300x158.jpg 300w, https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005-215x113.jpg 215w, https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005-900x473.jpg 900w, https://www.sossupport.net/wp-content/uploads/2015/09/iphone-6-rose-gold-005.jpg 1200w" sizes="(max-width: 1024px) 100vw, 1024px" /> Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit The post 10 Ways to Make Your iPhone Charge Faster appeared first on SOS Support.
A Simple Guide to the Updated NIST 2.0 Cybersecurity Framework
Staying ahead of threats is a challenge for organizations of all sizes. Reported global security incidents grew between February and March of 2024. They increased by 69.8%. It’s important to use a structured approach to cybersecurity. This helps to protect your organization. The National Institute... The post A Simple Guide to the Updated NIST 2.0 Cybersecurity Framework appeared first on SOS Support.
Staying ahead of threats is a challenge for organizations of all sizes. Reported global security incidents grew between February and March of 2024. They increased by 69.8%. It’s important to use a structured approach to cybersecurity. This helps to protect your organization. The National Institute of Standards and Technology (NIST) created a Cybersecurity Framework (CSF). It provides an industry-agnostic approach to security. It’s designed to help companies manage and reduce their cybersecurity risks. The framework was recently updated in 2024 to NIST CSF 2.0. CSF 2.0 is a comprehensive update that builds upon the success of its predecessor. It offers a more streamlined and flexible approach to cybersecurity. This guide aims to simplify the framework as well as make it more easily accessible to small and large businesses alike. Understanding the Core of NIST CSF 2.0 At the heart of CSF 2.0 is the Core. The Core consists of five concurrent and continuous Functions. These are: Identify, Protect, Detect, Respond, and Recover. These Functions provide a high-level strategic view of cybersecurity risk as well as an organization’s management of that risk. This allows for a dynamic approach to addressing threats. Here are the five Core Functions of NIST CSF 2.0. 1. Identify This function involves identifying and understanding the organization’s assets, cyber risks, and vulnerabilities. It’s essential to have a clear understanding of what you need to protect. You need this before you can install safeguards. 2. Protect The protect function focuses on implementing safeguards. These protections are to deter, detect, and mitigate cybersecurity risks. This includes measures such as firewalls, intrusion detection systems, and data encryption. 3. Detect Early detection of cybersecurity incidents is critical for minimizing damage. The detect function emphasizes the importance of detection as well as having mechanisms to identify and report suspicious activity. 4.Respond The respond function outlines the steps to take in the event of a cybersecurity incident. This includes activities such as containment, eradication, recovery, and lessons learned. 5.Recover The recover function focuses on restoring normal operations after a cybersecurity incident. This includes activities such as data restoration, system recovery, and business continuity planning. Profiles and Tiers: Tailoring the Framework The updated framework introduces the concept of Profiles and Tiers. These help organizations tailor their cybersecurity practices. They can customize them to their specific needs, risk tolerances, and resources. Profiles Profiles are the alignment of the Functions, Categories, and Subcategories. They’re aligned with the business requirements, risk tolerance, and resources of the organization. Tiers Tiers provide context on how an organization views cybersecurity risk. As well as the processes in place to manage that risk. They range from Partial (Tier 1) to Adaptive (Tier 4). Benefits of Using NIST CSF 2.0 There are many benefits to using NIST CSF 2.0, including: Improved Cybersecurity Posture: By following the guidance in NIST CSF 2.0, organizations can develop a more comprehensive and effective cybersecurity program. Reduced Risk of Cyberattacks: The framework helps organizations identify and mitigate cybersecurity risks. This can help to reduce the likelihood of cyberattacks. Enhanced Compliance: NIST aligned CSF 2.0 with many industry standards and regulations. This can help organizations to meet compliance requirements. Improved Communication: The framework provides a common language for communicating about cybersecurity risks. This can help to improve communication between different parts of an organization. Cost Savings: NIST CSF 2.0 can help organizations save money. It does this by preventing cyberattacks and reducing the impact of incidents. Getting Started with NIST CSF 2.0 If you are interested in getting started with NIST CSF 2.0, there are a few things you can do: Familiarize yourself with the framework: Take some time to read through the NIST CSF 2.0 publication. Familiarize yourself with the Core Functions and categories. Assess your current cybersecurity posture: Conduct an assessment of your current cybersecurity posture. This will help you identify any gaps or weaknesses. Develop a cybersecurity plan: Based on your assessment, develop a cybersecurity plan. It should outline how you will put in place the NIST CSF 2.0 framework in your organization. Seek professional help: Need help getting started with NIST CSF 2.0? Seek out a managed IT services partner. We’ll offer guidance and support. By following these steps, you can begin to deploy NIST CSF 2.0 in your organization. At the same time, you’ll be improving your cybersecurity posture. Schedule a Cybersecurity Assessment Today The NIST CSF 2.0 is a valuable tool. It can help organizations of all sizes manage and reduce their cybersecurity risks. Follow the guidance in the framework. It will help you develop a more comprehensive and effective cybersecurity program. Are you looking to improve your organization’s cybersecurity posture? NIST CSF 2.0 is a great place to start. We can help you get started with a cybersecurity assessment. We’ll identify assets that need protecting and security risks in your network. We can then work with you on a budget-friendly plan. Contact us today to schedule a cybersecurity assessment. Article used with permission from The Technology Press. The post A Simple Guide to the Updated NIST 2.0 Cybersecurity Framework appeared first on SOS Support.
Hot off the Digital Presses… Learn About Microsoft Copilot for Finance
Microsoft Copilot has been at the forefront of driving business AI initiatives across various Microsoft platforms such as Word, Excel, Edge, Windows, and more. This cutting-edge AI application has extended its reach to finance processes, providing a game-changing experience for users. By integrating next-generation AI... The post Hot off the Digital Presses… Learn About Microsoft Copilot for Finance appeared first on SOS Support.
Microsoft Copilot has been at the forefront of driving business AI initiatives across various Microsoft platforms such as Word, Excel, Edge, Windows, and more. This cutting-edge AI application has extended its reach to finance processes, providing a game-changing experience for users. By integrating next-generation AI capabilities into daily workflows, Copilot for Finance acts as a knowledgeable AI companion that streamlines tasks, offers real-time insights, and aims to transform financial operations for professionals, whether seasoned analysts or eager learners. Microsoft Copilot for Finance, a recent addition to the Copilot suite within Microsoft 365, offers AI-assisted support tailored for financial professionals within their everyday productivity apps. By connecting with business financial systems like Dynamics 365 and SAP, Copilot for Finance delivers finance-focused insights and guided actions in popular applications such as Outlook, Excel, Microsoft Teams, and other Microsoft 365 tools. The benefits of utilizing Copilot for Finance are prolific, with finance professionals no longer bogged down by repetitive manual tasks. By automating mundane activities like data entry and report generation, Copilot for Finance frees up time for strategic planning and analysis. This AI-driven tool not only automates processes but also provides intelligent insights tailored to an organization’s financial data and behavior, enabling users to uncover trends, predict cash flow challenges, and identify areas for cost optimization seamlessly within the Microsoft 365 environment. Catering to the specific needs of diverse financial roles, Copilot for Finance offers role-specific workflows and features that streamline operations, from audits to collections to financial reporting. With seamless integration into existing Microsoft 365 tools, Copilot for Finance ensures a frictionless experience, eliminating the need for application-jumping and data import struggles while promoting collaboration and communication across finance teams. Built with security and compliance in mind, Copilot for Finance inherits robust security features from Microsoft 365, ensuring the protection of sensitive financial data and compliance with data privacy regulations. This transformative AI tool represents the future of finance by leveraging AI to augment human expertise, automate tasks, and revolutionize decision-making processes, propelling financial operations into a new era of efficiency and data-driven insights. Currently available for early adopters, Microsoft Copilot for Finance offers a transformative potential for businesses looking to embrace the power of AI in finance operations. By accessing the Copilot for Finance website, reviewing licensing requirements, and connecting with IT providers for support and integration assistance, businesses can experience the benefits of this innovative tool firsthand and leverage AI-powered insights and streamlined workflows to drive growth and success in the evolving financial landscape. Please enable JavaScript in your browser to complete this form. Name * First Last Email * Submit Article used with permission from The Technology Press. The post Hot off the Digital Presses… Learn About Microsoft Copilot for Finance appeared first on SOS Support.