What Is An Andromeda C‑CAT?A C‑CAT (Client-Centric Action Team) is a dedicated team that includes one or more two Remote Service Techs, and one or more IT Field Techs whose activities are curated by a Account Coordinator(AC)—each specifically appointed to service your organization. With cat-like reflexes and precision, your Andromeda C-CAT will pounce on any IT issue, upgrade, or project. It's really the cat's meow for your IT needs!)
Professional IT Services that Andromeda Provides for Fox Valley, IL Businesses:
What A Few Of Our Clients Have To Say
Andromeda IT Service Offerings
Here is just a quick list demonstrating the breadth of IT services you can expect from Andromeda:
AndroPedia Tech Library
As part of our service, it is important to keep our client-partners well informed on IT developments, news, and best practices. Here is just a sampling of typical items from our AndroPediaSM library archive:
5 Ways Your Information Gets On The Dark Web May 03, 2019
In our last IT article we discussed the Dark Web. Specifically what the Dark Web is and why it is something that matters to just about everyone. If you missed the article make sure to give it a read here.
There are many ways your information can be compromised and inevitably end up in the hands of wrong doers on the dark web. On top of that, there are numerous ways that hackers and criminals can steal your data that are completely out of your control.
It is important that you put defense in place where you can but it is also important that you manage your risk by educating yourself on some of the top vulnerabilities out there.
With that in mind we’ve gathered 5 of the top ways hackers and criminals get around you to steal your data for the Dark Web.
5 Ways Your Information Gets On The Dark Web
1. Visiting & Using Unsecure Websites
If a website isn’t secure, information passed between you and the site can easily be compromised. In a nutshell, websites pass information to your browser (google chrome, firefox etc.) and your browser displays that information for you to look at/use. Without proper security protocols like an SSL or HTTPs, sites don’t secure that information transfer. So, if you enter personal data into a form, make a purchase or put any data on the site that isn’t secured, it is easy enough for a hacker or cyber-criminal to intercept that data and sell it on the Dark Web.
If you are interested in how to secure your website or tell if the sites you visit are secure, we have an easy to understand article here.
2. Consumer Database Breach
While hackers and criminals will go after your personal data on a small scale, a larger customer breach is what their dreams are made of. Just think back to the Target, Home Depot and Experian breaches of recent years. Even social media databases are full of rich information that hackers can make use of. If a hacker gets ahold of your Facebook password they might have also gotten ahold of your date of birth, where you live and other personal information that they can use to access financial accounts or other personal accounts.
While you can’t keep hackers out of Target’s database, you can practice your own security protocols to decrease the likelihood of criminals using compromised data to ruin you financially:
- Use different passwords for different sites
- Change passwords often (every 90 days is recommended at minimum)
- Use strong passwords
- Look into a monitoring service that alerts you of suspicious activity on financial accounts
3. Firewall Issues
You don’t necessarily have control over whether someone else secures their website and you definitely don’t have control of the security procedures at your local grocery store, but you do have control over the firewalls you use at your business.
First . . . make sure you are using a professional or business grade solution for your firewall. Consumer grade solutions are meant for home use and will not have adequate protections in place to keep your company’s private data secure.
Additionally, make sure that you have regular updates and software patches scheduled. These devices are only as good as the software they utilize. If your firewall is out of date or your software is out of date, chances are they cannot defend against the latest hacker strategies and viruses.
You will also benefit from a regular system audit to ensure all ports are secure and no user changes are impacting your network security. It is pretty common for businesses to forget these updates and checks and this is an incredibly vulnerable access point into your network if not properly configured.
4. Outdated Systems/Devices On Your Network
While your firewall controls much of the inbound and outbound traffic on your network, there are countless other devices that can create vulnerabilities. For instance, if you consider the Target breach of 2013, it is rumored that the criminals gained access to Target’s network via an HVAC company that monitored temperatures in stores. This brings up the fact that it is not just your own network but anything connected to it and the security of those ancillary devices/networks that you must be aware of.
If you have smart devices in the office, if you subscribe to any type of service that needs access to your network, all of these items and programs open you up to vulnerabilities. Even the smart devices you use at home can cause you trouble on a personal level. Imagine if a smart device on your home network was compromised and used by hackers to get into your work files on your home computer. This stuff happens and your information ends up on the dark web because of it.
5. Downloading untrusted applications/Opening Malicious Email
Email is essential to running your business but it is one of the best ways for hackers and criminals to gain access to your network. All they have to get you to do is click a link or download a file and BAM! your data might be compromised.
Email isn’t the only culprit though. Downloading files off the web can also give hackers access to your network and in turn your data. There are tools that can help you avoid this as well as training that helps you spot malicious links/sites.
How Can I Prevent My Info From Getting Onto Dark Web
With proper firewall configuration, professional anti-virus software that is updated regularly and employee training, you will dramatically decrease your vulnerability and incident rate.
There are so many ways hackers access your data. They can get to you through stores, websites, your email, the smart devices at your office/home and those are just a few examples. The scary part is that no matter how secure you make things, they will come up with a new approach that no one expects.
All hope isn’t lost though, with certain protections like professional cyber security consulting, monitoring software (both professional and personal), and specific security devices, you can protect yourself from cybercriminals.
If you’d like to discuss your options and make sure you are truly covered, reach out to our team and schedule a network security assessment.
The post 5 Ways Your Information Gets On The Dark Web appeared first on Andromeda Technology Solutions.HTTPs Encryption: Why You Should Use SSL Certificates Jan 20, 2019
2018 was an eventful year for technology and it’s only going to increase in 2019. Between the Facebook security breach, the Google+ API vulnerability, and many other less famous incidents – one thing is for certain. Cybersecurity dominated 2018 and 2019 is expected to be no different.
With cyber attacks being so prevalent, businesses are starting to notice a shift in public perception when it comes to the companies they work with when it comes to data security. Feeling safe is priority: people don’t want to have to worry about their information being breached on or off the web.
While this has been a growing trend for a several years now, it has also transitioned cyber security from being a feature, to a necessity.
2019 is the year of HTTPs.
What Exactly is HTTPs?
To understand what HTTPs means and how it works, you need to know a few definitions.
HTTP (HyperText Transfer Protocol): In simple terms, this is an application layer protocol. Essentially, HTTP is the protocol that involves information sent between a browser (ex: Google Chrome or Firefox) and a website itself. If you were to interrupt that connection and intercept it, you’d see in plain text what was being communicated between the website and the browser.
This can create extremely vulnerable conditions in certain situations. For example, if you are purchasing products on a website with a basic HTTP, your personal information like your address, credit card info and whatever else you submit can be intercepted and stolen.
The thieves are the only ones who want this to happen – so HTTPs encryption was introduced as a secure option.
HTTPs (HyperText Transfer Protocol Security): Adding additional security components, the language being transmitted between website and browser is encrypted and kept from being read cyber criminals.
SSL (Secure Socket Layer): This is a certificate that enhances your security protocol. This is just another way of saying that your site has the technology in place to securely encrypt transactions between the website and browsers etc.
The types of SSL Certificates may vary, but their basic coding provides security and encryption.
You can always tell if a website is secure by looking for certain factors:
- https:// shows before the URL destination (ex: https://www.google.com)
- A lock (sometimes green) icon may appear in the left corner of your navigation bar
Today, many users look for these key signals to see if they are using a secured website.
When this was first being used, its primary purpose was a security feature for websites that utilized ecommerce and to transfer personal information (ex: financial, medical, legal). However, it has transitioned into having an HTTPs encryption as a standard.
After going through the basics of this HTTPs encryption, you may still have some additional questions about which feature would best suit your business. Here are a few of the most common topics and questions below:
I Don’t Have A Large Business – Do I Still Need HTTPs?
Providing An SSL Tells Your Customers That You Care About Their Security
By utilizing an SSL certificate and transforming it from HTTP to HTTPs, you are providing an extra layer of security for your consumers. They know right away that your website is secure. Nothing they are viewing or how they are interacting on your website is being monitored or watched by a malicious user. It shows that you care about your customer’s user experience – and that reflects highly for company brand.
It Provides Additional Security Against Hackers
Having an SSL certificate installed on your website also helps protect your website from potential breaches or hacking attempts. The extra layer of HTTPs encryption provides an external wall that is difficult for hackers to break and infect. While you might not exactly need one for the style of your business’ website, it still helps protect against possible attacks and saves you capital on potential cleanup and patches once a website does get infected or breached.
HTTPs Improves SEO (Search Engine Optimization)
Having this HTTPs encryption applied on your website shows popular search engines like Google, Yahoo and Bing! that you take your user’s experience and security seriously. They are able to recognize this and return with increased rankings on their engines.
We all know that higher rankings lead to more traffic – this leads to more clients and customers.
Google has been favoring websites with HTTPs for awhile now. However, after recent technology-related world events, they have doubled-down.
Starting July 2018, websites that do not use HTTPs will be labeled “Not Secure”. The last thing you want your prospective clients to see when visiting your site is a message about poor security.
More than 70% of websites are utilizing HTTPs and Google is really trying to make it the norm across the board.
Failure to increase security on your site risks lower search rankings and even increases bounce rates. It is also proven that HTTP sites load slower, causing Google to penalize them for site speed. Overall, the industry is punishing sites that do not value security because they are striving to give the best user experience possible.
So, what should you take away from all of this?
An SSL does incur minimal extra costs, but failure to secure your website can cost you a lot more: potential customers, reduced website traffic and impact overall user experience.
Your IT partner or web hosting provider should have the necessary tools to help you with your website security. It should be simple and affordable enough to keep from breaking your budget.
Want to take the next step and convert to HTTPs, but not sure how?
Andromeda has trained technicians and developers that are more than happy to help you with the conversion. Just give us a call to get started today!
The post HTTPs Encryption: Why You Should Use SSL Certificates appeared first on Andromeda Technology Solutions.Zynga Games Has Data Breach Including Personal Information Oct 14, 2019
Zynga is a wildly successful gaming company with a number of hit titles under their belt including FarmVille, Words with Friends, Zynga Poker, Mafia Wars, and Caf� World.
Their titles boast more than a billion players, worldwide, which is a number that would make most gaming outfits green with envy.
Naturally, their success has painted a giant target on the company. Recently, a Pakistani hacker going by the alias Gnosticplayers has claimed that he successfully breached Words With Friends and made off with a massive database containing information on more than 218 million users.
It doesn't appear to be an idle boast.� Recently Zynga acknowledged that they had been breached and that a variety of data was stolen from certain players of Draw Something and Words With Friends.
For his part, Gnosticplayers has been quite forthcoming, even providing The Hacker News with a sample of the stolen data, which includes:
- Player name
- Email address
- Login ID
- Hashed password
- Password reset token (if present)
- Facebook ID (if connected)
- User Zynga account ID
He also boasted that he made off with data belonging to some 7 million Draw Something users, and in this case, revealed that the data he stole contained plain text passwords.
Zynga issued a statement which reads, in part, as follows:
"An investigation was immediately commenced, leading third-party forensics firms were retained to assist and we have contacted law enforcement.�As a precaution, we have taken steps to protect these users' accounts from invalid logins.� We plan to notify players as the investigation proceeds further."
If you play either Words With Friends or Draw Something, you should change your password immediately and be on the lookout for phishing scams aimed at you in a bid to try and extract even more information from you.