Blog

April 4th, 2014

Security_March31_BA malware infection is an attack that you do not want invading your business systems. Malicious software can often make its way on computers without your knowledge, causing various disturbances. What’s even worse, is that vital information saved on your computer or data that you access online could be stolen. Computers must have proper protection. In the event that malware infection is detected an immediate response is required.

Signs of a malware infection

Before proceeding with the steps on how to respond to malware infections, we first need to learn about the signs and symptoms of a malware infection. These include:
  • Several pop-ups appear even when not browsing the Web.
  • Unusual slowness of the computer and Internet connection.
  • System hangs or freezes.
  • Corrupted programs.
  • Antivirus is disabled.
  • E-mails sent to or from your account which you did not send.
  • High network activity, even when not using large programs or accessing huge data.
  • Redirected access to some sites.

How to respond to a malware infection

In case you experience any of these symptoms, the first thing to do is to ensure that your antivirus and antispyware program is updated. This is to make sure that they detect the latest known threats on their database. You should then run scans to see if an infection is detected. If it is, the programs usually have a way to remove the infection. You then need to follow the steps the program recommends.

If this doesn't work, disconnect the infected computer from the network to prevent the spread of the malware. Furthermore, avoid accessing the Web and using vital information such as bank account and credit card information. Let the technical department or your IT partner handle the concern since they are trained in determining and eradicating system malware infections.

Once the problem has been pinpointed, a tech specialist will go through the process of eliminating the infection. This includes backing up data on the computer and restoring the system to its original state. Depending on the extent of the infection, the computer may need to be wiped clean, or reformatted before restoring backed-up files.

After the whole process, the computer must be tested to ensure that the infection has been totally removed. Moreover, further investigation and studies must also be done to determine where the problem started, as well as to create a strategy as to how to prevent this from happening in the future.

How to prevent a malware attack

Prevention is better than a cure and this definitely applies to malware infections. It’s best to arm yourself with knowledge on how to avoid malware attacks and prevent your systems from being infected.
  1. Ensure that security protection is always updated and that you run system scans on a regular basis.
  2. Avoid downloading attachments or clicking links from unknown sites or senders.
  3. Enable firewall protection.
Malware can hugely affect business operations and the security of private information. One of the best ways to prevent this is to work with an IT partner, like us, who can help recommend and install protection systems. You might want to think about getting help in managing these solutions too, to ensure that your systems are secure at all times.

If you have questions or concerns with regards to malware prevention and resolution, feel free to call us. Our support team is always ready to help.

Published with permission from TechAdvisory.org. Source.

Topic Security
April 2nd, 2014

Productivity_Mar31_BThere is a common trend with businesses, especially small to medium businesses, of hiring remote workers and also of working with clients at greater distances than ever before. As a result, an increasing number of businesses are creating remote presentations, or using software to present to an audience over the Internet. However, this style of presentation can be a challenge, especially when it comes to engaging your audience.

If you are creating an online presentation to a remote audience there are a number of factors you should keep in mind if you want to grab your audience's attention and keep them following and paying attention. Here are five of the most important tips:

1. Make it visual

For the most part, visual presentations have a higher chance of success - that is, the message being grasped by the audience. This is especially true for online and remote presentations, largely because when more people are on a computer, partaking in a presentation, they will often be multi-tasking.

If you have a ton of text there is a good chance you will lose your audience within the first couple of slides. Instead aim for a presentation that is heavy on graphics and visually appealing. Using bright or contrasting colors will draw the eye and will increase the time you have your audience's attention.

If your presentation is about a product create picture slides with a minimal amount of text; let the product speak for itself. For presentations involving graphs and charts, include these graphics and a couple of key points. The rest you can fill in with spoken narrative.

2. Focus on the audience

Online presentations and those using meeting software should be audience-friendly. This means making it easy for them to join and partake in the presentation by sharing slides, and also asking if anyone has any points to add or even expand upon with an interactive presentation element.

While presenting, there will be slides and points that are more important than others. To highlight this you can 'sign-post' the salient points. Make these visually larger if they are text, and pause to point this out with the script by telling your audience: "This is the most important point"; essentially demanding they pay attention.

Finally, try to limit technical glitches. This can be the quickest way to lose engagement if your Internet cuts out or the computer crashes. Try to present at a time when you know connection will be strong and stable and have a backup in place in case something goes wrong.

3. Adapt to different audiences

Every person in the audience will have different expectations of your presentation. Some will want just the facts, while others might be looking to be convinced by an opinion or argument expressed in the presentation. You should take the time to get to know your audience and what they expect and then develop the presentation around this idea.

If you do your homework and know a bit about your audience, you can take steps to connect with them early in the presentation, if not before, and drive engagement.

4. Create, edit, practice, edit, practice, edit, practice, present

It may sound a bit redundant to edit and practice multiple times, but it really will help when leading an online presentation. First you should create your presentation, then edit it. You are looking to keep your slides as short as possible - no more than four points and two minutes spent talking for each slide.

Really the first edit should be about content, grammar and spelling. Once this is done, practice presenting as you would on the actual presentation day. Start with a blank desktop screen, log into the software/site you will be using, load the presentation, share it, and then actually present. Time yourself and note any issues.

Next, go back and edit the presentation some more, making sure you aren't spending too much time on one slide or that each of the slides does not have too many confusing points, etc. Keep practicing and editing until you are not only comfortable, but know the content inside and out.

You could also try recording your voice. This will allow you to hear where you need to work on inflection and overall style. If you find that you are tuning yourself out when you listen to the presentation, you may want to practice some more and try to inject some extra interest, whether through humor or engaging facts and ideas. This is really vital is you won't have that face-to-face contact with a physical presentation where you are present. If you sound engaging, the audience are more likely to connect with you.

5. Develop your own style

No one likes a dull presentation where you just talk about what's on the slides. Try to give your presentation a narrative arc and structure. Where possible include personal experiences or even tell a relevant joke from time to time. If you are passionate and show that you are trying to connect your audience will likely not click away from the presentation or drift off to other work or simply to surf the Internet and Facebook.

If you are looking to learn more about presentations and how to use software for expert presentations, or even how to conduct your next remote presentation, contact us today to see how we can help.

Published with permission from TechAdvisory.org. Source.

Topic Productivity
April 2nd, 2014

BusinessValue_Mar31_BHaving a website is one of the most important marketing and branding tools a business can utilize. This is largely because visitors will often judge whether they want to do business with you almost solely based off of your website. Therefore, your website needs to be designed properly and look professional. In order to achieve this you need to know about the common mistakes small businesses make when it comes to website designs.

The business value of a business website is that it creates a solid online presence and boosts your brand image and market reach. Even if your business is not Internet based, a website can be used to create a certain impression and ultimately contribute to your bottom line. The key is to make sure you create the best impression. Here are six of the most common mistakes businesses make with website design:

Mistake 1: Building for the sake of building

Websites are important and some businesses believe that they should have a website, so they go ahead and simply build one. You should first take steps to define your target market - who is it that you want and expect to visit your website.

Once you have a defined target market you can then take time to build your site for your market. For example, if the majority of your target market uses mobile devices to browse the Web you should take steps to design your site so that it is viewable on mobile devices.

You should also determine what you want visitors to do on your site. Some companies want them to click through to another site, while others want them to sign up. By defining how you want your visitors to interact you can then develop your content and design around this.

Mistake 2: Designing a website that is too busy

It can be tempting to put all of your information on one page or even have a ton of images and videos. The truth is, this can be distracting largely because once someone lands on your page, they won't know how to get around, find the information they want, or even to know what they should do next.

Busy or flashy websites with lots of animations or large amounts of text also usually don't scale all that well. So, when someone looks at your site on a mobile device they will likely find it too hard to navigate and leave, which is counter to what you are trying to achieve.

Instead, aim for a website that is simple and clean. Important information should be quick to find and read and it should be clear who you are, what you have to say, and what you want the visitor to do.

Mistake 3: Lacking call to actions

Most business related websites have a goal as to what they want visitors to do. Maybe it's download an app, call the company, or even sign make a purchase online. It is essential that you lead visitors toward what you want them to do in the most clear and concise way. The best way to do this is through a call to action. These are usually buttons at the bottom of sections or pages that motivate the user to click and follow the instructions on what to do next, be that sign up to something or get in touch.

The best calls to action stand out from the content, drawing the reader's eye and hopefully inspiring them to click. They should also be clearly written, simple, and direct. e.g., 'Call us today!' or 'Download now!'

Mistake 4: Misguided content

It may seem worthwhile to write in-depth content about your products or services but this isn't always the case. People skim read the basics on the Web and it's different than other mediums.

What you should do is condense down your content so that it only states the most important information. Tell the reader what your product or service does and provide a few of the most important benefits. What you are looking to do is develop enough interest so that visitors to your site will click on the call to action and connect with you.

If you have the time and profits, creating a more visual site where you showcase the products or show how you can help in a short video may lead to higher engagement and possibly higher customer conversions. Take a look at the popular software and service sites like Dropbox, Microsoft, and Google. The content is highly visible and simple, yet provides just enough information so the user knows what the service is and what they are expected to do.

Mistake 5: Static content

It can be tempting to invest the time to write a great website, get the content online then just leave it sitting there. The Internet changes and what might have been regarded as great website design and content a couple of years ago may not be seen in the same light today.

It is advisable to periodically update your site's design and content to reflect current trends; making it more modern. Another related aspect of your content is that you need to ensure that your content is up-to-date. If you are hosting a contest and put the information on your site, you should make sure to take it off of your site, or update it when the date passes. It looks a little unprofessional to have content that is still talking about 2012 or even 2013.

Mistake 6: Doing it yourself

The vast majority of small business owners and managers don't have in-depth Web design skills, yet are determined to build their company's website themselves. This can lead to unexpected problems or a website that doesn't meet your needs. We strongly recommend that you work with a qualified designer who can help ensure that your website is designed and built to high standards.

If you are looking to boost your website's design contact us today. We can help!

Published with permission from TechAdvisory.org. Source.

March 27th, 2014

BI_March24_BSeveral companies nowadays rely on Business Intelligence or BI tools to analyze information generated by their business. These tools are either installed on computers or cloud-based and accessible on the Web. These applications allow users to ensure that everyone is on the same path with regards to achieving their business goals. The question is, how are different departments using them?

There are various BI tools available nowadays that support small to large companies. You can find Business Intelligence tools that fit your company’s size, needs and budget. These applications can be used in different areas of the business:

Marketing Department

A marketing department is responsible for promoting a company’s products, services and brand to increase public awareness. With successful marketing, a business can attract potential clients that can be possibly turned into creating sales revenue. The company can use BI to determine which campaigns are successful or not, as the case may be. Through this, investments can be focused on those campaigns that work whilst avoiding those that have previously failed.

Sales Department

Sales managers and supervisors can also use BI to analyze successful deals, as well as those that they have lost, to see what strategies have worked. The system can also help determine which sales teams hit or exceed set goals in order to analyze what they are doing right. Moreover, this helps determine which products or services are most saleable so these can be pushed further to attain more goals.

Finance Department

BI software makes analyzing, reporting, and managing financial data more convenient. Those who are involved in the process can easily access the information they need through the system. Analysis is easier as the data is organized and accurate. Money in and money out can also be tracked with greater efficiency.

Moreover, these tools often come with features that allow users to create scenarios and determine the possible results from there. This is extremely helpful in deciding on the best action to take as the tool gives you a view of the probable outcome. The success rate is higher if forecasting using a BI tool.

Inventory

Business Intelligence also plays a vital role in inventory tracking of products, items or supplies. For instance, companies in the retail industry can track the movement of products or items from the suppliers to the warehouse and on to their delivery to clients. Any problems encountered in the process can be quickly identified so they can be fixed in time.

Items in demand can also be pinpointed, as well as low stock and overstocks. Items that are low in stock can be ordered immediately, especially if they are in demand, to ensure that the needs of clients are met. This also lets you avoid overstocking, which can be a waste of money when investment is better used for fast moving items.

These are just some of the ways businesses can use BI in their operations. If you have further questions about the topic, do not hesitate to give us a call. We’ll be more than happy to assist you.

Published with permission from TechAdvisory.org. Source.

March 26th, 2014

Office_Mar24_BMicrosoft Outlook can be convenient to use to read and send emails on different accounts. Outlook is popular largely because it offers the convenience of not having to sign into different email clients to check your messages. Aside from your default mail folders like inbox, drafts, sent and junk, it also comes with search folders that give you easy access to important messages. Creating personalized folders is also supported.

Outlook is one of the most popular email platforms allowing you to read emails from almost any account. The inbox is where the majority of your interaction with Outlook is, but the problem is that many users receive so many emails that it can be overwhelmed quickly. This makes it more difficult to find important emails, or separate the spam/less important emails.

One way to deal with this is by creating a customized search folder for important emails. This makes searching for vital messages easier as they are saved in a separate folder.

Default and predefined search folders in Outlook

There are three default search folders in Outlook and you can see them under “search folders” in the mail navigation pane on the left side of the window. These default search folders are categorized mail, large mail and unread mail. Categorized mail contains messages that are categorized by color.

The large mail folder is a search folder that includes messages that are over 100 KB in size. Unread mail, as the term suggests, contains emails that have not yet been read.

Predefined search folders are also available. These are existing search folders that you can add to the search menu, below the other folders. Some of these require that you enter specific criteria, while others do not. For instance, “mail flagged for follow up” does not require any criteria, while “mail with specific words” asks you to enter certain words that the message must contain to be included in the folder.

Adding predefined search folders can be done by following the steps below:

  1. Click File.
  2. Select New and choose Search Folder. The New Search Folder window will appear.
  3. Click on any of the predefined search folders.
  4. Select the option you want if asked for a specific criterion.
  5. Click OK.

Create a new search folder in Outlook

It’s also possible to create your very own search folder. You get to set not only the criteria, but its name as well. This makes it convenient to easily access important messages as you don’t have to browse through the inbox or various folders in your mailbox.

Here’s how to create a new search folder in Outlook:

  1. Right click on Search Folders in the mail navigation pane and click New Search Folder. You may also press ctrl+shift+p on your keyboard to make the window appear.
  2. Click Create a Custom Search Field followed by Choose.
  3. Enter the name of the new folder in the name field.
  4. Click Criteria and set your preferences to further personalize the folder and click OK.
  5. Click Browse and select folders to add in your customized search folder, then click OK.
  6. Select OK on the new search folder window and the new folder you created will be added under your search folders.
Messages in search folders will still remain in the original folders where they are saved. Even if you view the messages and delete the search folder, the messages will still be accessible in their default folder. However, if you select and delete a message in a search folder, it will be completely removed, even from its original folder.

If you have any concerns or feedback with regards Outlook search folders, feel free to get in touch and we’ll help you in every way that we can.

Published with permission from TechAdvisory.org. Source.

March 20th, 2014

Security_Mar17_BThe security of your computer, network and whole system is likely something that has caused moments of stress and even worry. In order to ensure that a business is secure, companies often adopt a security strategy. While these strategies are great, there is one common element that many businesses forget to carry out - the audit.

Auditing and the security security strategy

Auditing your company's security is important, the only problem business owners run across is where and what they should be auditing. The easiest way to do this is to first look at the common elements of developing security strategies.

These elements are: assess, assign, audit. When you develop a plan, or work with an IT partner to develop one, you follow the three steps above, and it may be obvious at the end. In truth however, you should be auditing at each stage of the plan. That means you first need to know what goes on in each stage.

During the assessment phase you or your IT partner will need to look at the existing security you have in place. This includes on every computer and server and also focuses on who has access to what, and what programs are being used. Doing an assessment should give you an overview of how secure your business currently is, along with any weak points that need to be improved.

The assignment phase looks at actually carrying out the changes you identified in the assessment phase. This could include adding improved security measures, deleting unused programs or even updating systems for improved security. The main goal in this phase is to ensure that your systems and networks are secure.

Auditing happens after the changes have been made and aims to ensure that your systems are actually secure and have been implemented properly. Throughout the process you will actually need to continually audit and adjust your strategy.

What exactly should be audited?

When conducting an audit, there are three factors you should focus on:
  1. The state of your security - Changing or introducing a security plan usually begins with an audit of sorts. In order to do this however, you need to know about how your security has changed in between audits. Tracking this state and how it changed in between audits allows you to more efficiently audit how your system is working now and to also implement changes easier. If you don't know how the state of your security has changed in between audits, you could risk implementing ineffective security measures or leaving older solutions open to risk.
  2. The changes made - Auditing the state of your security is important, but you should also be auditing the changes made to your systems. For example, if a new program is installed, or a new firewall is implemented, you will need to audit how well it is working before you can deem your security plan to be fully implemented. Basically, you are looking for any changes made to your system that could influence security while you are implementing a new system. If by auditing at this point, you find that security has been compromised, you will need to go back to the first step and assess why before moving forward.
  3. Who has access to what - There is a good chance that every system you have will not need to be accessed by every employee. It would be a good idea that once a security solution is in place, that you audit who has access to what systems and how often they use them. This stage of the process needs to be proactive and constantly carried out. if you find that access changes or system access needs change, it would be a good idea to adapt your the security strategy; starting with the first stage.
If you are looking for help developing a security strategy for your business, contact us today to see how our managed solutions can help.
Published with permission from TechAdvisory.org. Source.

Topic Security
March 20th, 2014

Hardware_Mar17_BConsidering how people are into the whole digital and cloud technology set up, many business owners are slowly forgetting the value of printers. Their thoughts are often completely shifted from actual paper documents, to different file extensions and online platforms. Which makes you wonder, what are the most common printer types in the offices nowadays? Which ones are mostly used?

These three printers below are the most common printers found in offices these days.

Multi Function Printers (MFP)

Multi Function Printers are also commonly known as all-in-one printers. With this type of device, your printing, scanning, faxing and photocopying needs are covered! These printers usually come in a variety of sizes with many being small enough to fit onto a small desk.

Aside from the multi function features that MFPs have, these are the common benefits that business owners can gain from this type of printer.

  • They take up less room.
  • They are usually lower in cost. Though it may seem expensive compared to the other types of printers, if you consider buying a fax machine, scanner, photocopier and a printer, you’ll find that buying an MFP is actually a lot more affordable.

Inkjet Printers

Inkjets print documents by spraying ink onto paper, and can usually produce prints with a resolution of 300dpi (dots per inch) with some actually able to print documents as high as 600dpi. This makes them ideal for printing saller images and reports.

What most business owners like about inkjet printers is the fact that they are usually affordable, making them an ideal device for businesses that just want printers. Since most offices (if not all) have computers, you’ll most likely see inkjet printers in the majority of offices. Here are some more benefits that people like about inkjet printers.

  • Fast printing speeds.
  • Can produce really high quality print.
  • Easy to use.
  • They can produce vivid colors.

Laser Printers

If there’s one very notable feature that you’ll love about laser printers, it would be the printer's capability of producing very high quality documents. In fact, laser printers can produce copies with a resolution of 600 dpi - 1200 dpi.

One of the main differences that laser printers have is the fact that they use toner (colored or black powder) instead of the inks that are used in most other printers.

Laser printers offer users many enticing benefits including:

  • Very high resolution.
  • Fast results.
  • High volume printing.
  • No smears at all.

What type of printer should my business get?

If you are looking for a new printer, it can be a little confusing as to which you should get. If you don't have a scanner or fax machine, it would be a good idea to look into a Multi Function Printer. Looking to print smaller or shorter documents or only occasionally? An Inkjet would probably be a better choice. If you need to print on a regular basis, or print in mass quantities a laser printer could be the best choice.

With all the types of printers available in the market, choosing a specific printer to use in your office can be quite confusing. If you need help in choosing which printer to go for, then give us a call and we’ll give you our expert advice on the matter.

Published with permission from TechAdvisory.org. Source.

Topic Hardware
March 19th, 2014

BCP_Marc17_BDRPs (Disaster Recovery Plan) although seemingly expensive or hard to implement, are a must have for your business. Since businesses spend thousands of dollars optimizing and upgrading their systems, doesn’t it make total sense to protect your investment? With a good DRP in place, you should be able to mitigate risks in case of a disaster.

While there are several facets to a DRP that are going to determine whether it will be effective or not, making sure that you’ve considered these 5 tips is definitely a good start.

1.) Commitment from management

Because the managers are the ones who will coordinate the development of the plan and be the central figures who implement the recovery plan, it’s crucial that they are committed to it and are willing to back it up.

They will also be responsible for setting an allocated budget and manpower to creating the actual plan. That said, it’s very important that they know the concept behind it and how huge of an impact a DRP can have on a business.

2.) A representative on each department should be available when creating a DRP

It’s unthinkable to believe that your DRP is well optimized when you haven’t had a representative from each department coordinate with you while creating the recovery program.

Considering how they themselves are the front line of your organization with the best knowledge about how their department works, it’s a huge plus that you should take advantage of when creating a DRP.

With the representatives on your team, you’ll be able to see things from their perspective and gain first-hand knowledge from those who do the actual work.

3.) Remember to prioritize

In an ideal world, you should be able to restore everything at the same time after a disaster strikes. But since most businesses usually have a limited amount of resources, you will usually have to recover systems one at a time.

Because of this, you need to have a hierarchy or a sense of priority when determining which systems should be recovered first. That way, the most important systems are immediately brought back up while the less important ones are then queued in order of their importance.

4.) Determining your recovery strategies

This is one of the main focal points of a DRP since this phase tackles the actual strategies or steps that you’ll implement to recover your systems.

When determining your actual strategies, it's important that you brainstorm and think about all the options that you have to recovering your systems. Don’t simply stick with the cheapest possible strategy or even the most expensive ones.

You have to remember though that the simplest strategy to implement is probably the best one. That is, as long as the simplest strategy covers the critical aspects of your system recovery.

That said, avoid over complicating your strategies as you might face unnecessary challenges when it comes to the implementation of the recovery strategy.

5.) Do a dry run at least once a year

Your DRP shouldn’t end with the concept alone. No matter how foolproof you think your strategy is, if you haven’t tested it you most likely have missed something important.

It's during the dry run phase that the need for extra steps (or the removal of one) are made even more evident. You can then start polishing your strategies according to how your dry run plays out. It would also be a good year to practice your plan each year and update it accordingly.

These tips will help you ensure that your DRP will remain effective should a disaster occur. If you’re having a hard time figuring out how to go about the process of creating a DRP, then give us a call now and we’ll help you with the process.

Published with permission from TechAdvisory.org. Source.

March 7th, 2014

Productivity_Mar03_BWhen it comes to productivity, many business owners rely on to-do lists. However, writing an effective to-do list can be quite a challenging task. Though a lot of people jot down their tasks for the day or week ahead they don’t always fully realize the benefits of their list because it is either poorly crafted or even missing items. The result is decreased effectiveness. Hopefully our tips will help you create an effective way forward to boost productivity.

Here are 5 tips which will help you devise an effective to-do list:

Add a notes section

A notes section is a general area for all the tasks in your to-do list. Its main purpose is to provide you with space to add notes about your tasks. Or, instead you can use this area to type in challenges that you encountered when handling specific tasks.

On the flip side, it could also contain the best practices that you employed which enabled you to finish the task effectively and efficiently. These notes are important because by revisiting these jottings you can learn from them and be better able to optimize your way of doing things and your approach.

Prioritize

Ignoring client meetings because you’re supposed to be fixing your cabinet, for example, based on what’s written in your to-do list, is a sure fire way of negatively impacting your business.

Your to-do list needs to be devised in such a way that there is a clear sense of priority. The most important tasks should be added to the top most part of your list just to make sure that you don’t miss these and they are tackled and completed first.

Break down your tasks to bite-size activities

Can you imagine writing down ‘work’ in your to-do list? Having a to-do list with broad topics like this won’t help you in the slightest bit.

You need to break down your lists into more specific tasks so that they provide the clarity that you need to achieve. Here’s a good example of a well-constructed list:

  1. Send 20 outreach emails to prospects.
  2. Discuss with the team the concept of having a systems’ mindset.
  3. Review the offer of client X and decide whether to accept it or not.

Notice how the examples above are more tangible compared to simply writing down ‘work’? With a list like the one above, you should be able to comfortably tick each task with a clear idea of when it has been completed.

Add a deadline whenever possible

Adding a deadline helps you gauge your output. By being able to see whether you’re lagging behind you can make any necessary changes.

A deadline also prevents you from procrastinating since you’ll be more conscious of time and a definitive end point.

Be realistic

Adding a week’s worth of tasks to your daily to-do list will just discourage and frustrate you.
Be as realistic as you can when writing up your list. If you honestly think that you can’t finish all of the tasks within one day, then add some of them to the next. That way you won’t be frustrated with a long list of tasks that you haven’t completed at the end of each day.

If you are faced with productivity issues and are struggling to get the kind of output you’re hoping for in your business, then put giving us a call at the top of your to-do list.

Published with permission from TechAdvisory.org. Source.

Topic Productivity
March 6th, 2014

Security_May03_BEnsuring the security of your systems and computers can sometimes seem like a full time job and an uphill battle, especially with the increasing number of security issues being discovered. From bugs in software to malware, there is almost always some attack challenging the system security and potentially leading to a security breach. The other week a number of articles highlighted a bug in Apple’s systems that poses a potential security flaw.

About the bug

News broke on many security websites mid-February about a potentially critical security flaw in Apple’s systems following the company releasing an update to their mobile operating system, iOS.

The update notes released by Apple noted that the patch “provides a fix for SSL connection verification.” This is a fairly common update as it is aimed at improving the security of communications between websites and the device. However, security experts found out that without the update attackers who can connect to a network are able to capture sensitive information being sent in banking sessions, email messages, and even chat messages using what’s called an SSL/TSL session.

What exactly is SSL/TSL?

Secure Sockets Layer (SSL) and Transport Layer Security (TSL) are used in networks to essentially establish an encrypted link between a server and your computer. They are most commonly used to secure websites and the transmission of data. Take a look at some websites and you may see a padlock on the URL bar, or https:// in the URL. This indicates that the website is using SSL or TSL encryption to protect the data that is being transmitted e.g., your bank account information on a website.

In other words, SSL and TSL are used to ensure that information is exchanged securely over the Internet.

What was the problem and what software was affected?

It was found that there was a bug in the code Apple’s software uses to establish a SSL connection which causes the whole SSL system to fail, potentially exposing data that should have been encrypted to anyone connected to the network with the right tools.

According to security experts, this bug has been found to affect devices running older versions of iOS 7, OS X 10.8 and newer, Apple TV, and possibly iOS 6. It is important to note that the bug is only found in Apple’s SSL technology. Any app that uses Apple’s version of SSL could be affected.

Has Apple solved this?

Luckily, Apple has released updates to all of their devices that should solve this security exploit. If you have not updated your device or computer since the middle of February you could be at risk.

How do I prevent my systems from being affected?

The first thing you should do is to update all Apple related apps and devices, including all mobile devices. If you are unsure about whether your apps are secure enough, try using another app, especially another browser. The reason for this is because browsers like Chrome and Firefox all use a different SSL technology and are unaffected by this bug.

You should also remain vigilant and not connect to any open or public Wi-Fi connections or even secured Internet connections that could be easy to break through. Basically, as long as you update you should be fine. However, it may be worthwhile using another browser if you are really worried about whether you have a secure connection.

If you are looking to learn more about this security flaw, or how you can secure your business from threats like this, contact us today. We can help.

Published with permission from TechAdvisory.org. Source.

Topic Security