Today was a bad day in the IT world. Stryker, the giant medical device company based in Michigan was compromised by a group supported by Iran. Every computer and cell phone was wiped clean from an attack. You can read more about that here:
Medical equipment company Stryker reports cyberattack | AP News
This kind of thing can happen to any organization, not just the big ones.
Here are some cybersecurity tips on keeping safe with all your computers and IT.
Two-Factor Authentication
Anything and everything that you sign into needs to have two-factor authentication turned on. Stop putting it off, it needs to be done. It’s safe to assume that all services can potentially be compromised.
Please make sure you’re using an authenticator app – NOT the text code as that isn’t secure. Microsoft Authenticator, Google Authenticator, Authy are three of the most used.
Depending on the email service you’re using, make sure to report any suspicious emails to your provider. This helps tune the filters for everyone. If you’re using Microsoft 365 email (like you should be), this is the red shield in Outlook. Click and select “Report phishing.” Additionally, if something looks suspicious, don’t even think about it — just delete it. Don’t click on anything, just delete it.
If we’re providing your Microsoft 365, we’re making sure there isn’t any suspicious activity going on (along with Microsoft doing the same thing). But a couple of reminders:
• Microsoft will NEVER EVER EVER NEVER NEVER EVER email you to sign into anything. NEVER EVER.
• Microsoft will NEVER EVER EVER NEVER NEVER EVER email you to verify your account. NEVER EVER.
• If you receive anything like this, report it as phishing and delete it.
Another gentle reminder: free email is great, but it is providing ZERO protection from anything out there. Are you really wanting to risk your business because you couldn’t be bothered to spend $7 a month for secured, enterprise-grade email?
Microsoft Teams
Since Microsoft Teams is part of almost all Microsoft 365 subscriptions, it’s also being used as an opening to get into your systems.
If you receive a chat notification from someone you don’t know, DENY IT.
Computer and Device Security
If we’re providing your security solutions, we have multiple layers set up in your organization (like a cake). There isn’t just one magic solution, it takes a bunch of layers and user training (the most important!!!) to keep everything safe and sound.
Firewall
If we’re providing your firewall, all countries in some kind of conflict along with anyone using a VPN to mask where they are coming from are completely blocked from coming in to your organization. Another layer of protection.
Summing It All Up
The proper hardware, software and user training are the layers of the security cake. There are no one-size-fits-all solutions and no magic bullets. It takes the layers of the cake to keep your organization, your organization’s information and you safe. And if you have any questions, don’t hesitate to reach out today. We would love to help!