Infinet

The three Titans, Google, Microsoft and Apple address security issues with KRACK.  

Just when everyone thought Wi-Fi was safe, that illusion was recently shattered.  Security researcher Mathy Vanhoef has discovered a vulnerability that he’s calling “KRACK.”  The flaw is in the WPA2 protocol, and everyone’s Wi-Fi network is at risk of being hacked.  The vulnerabilities include HTTP content injection, packet replay, decryption, TCP connection hijacking and more.  Hackers could gain access to credit card numbers, photos, passwords, and emails. The WPA2 woes will have an impact on both home users and business users.

Apple, Google, and Microsoft

Microsoft was the first Titan to respond to the news. “We have released a security update to address this issue, says a Microsoft spokesperson in a statement to The Verge.  Customers who apply the update, or have automatic updates enabled, will be protected.  We continue to encourage customers to turn on automatic updates to help ensure they are protected.  Microsoft says the Windows updates released on October 10^th protect customers, and the company withheld disclosure until other vendors could develop and release updates.”  Apple is also on top of its game.  Patches and fixes for tvOS, watchOS, macOS, and iOS are in beta and will be released in a software update shortly.  Google is scrambling to fix the issue and will do patches on any affected devices over the next few weeks.

The new security flaw has been described, innovative and unprecedented, and it’s really up to the Titans to properly address the problem.  Apple, Google, and Microsoft are fully aware that once they fix this vulnerability, another one will be on the horizon.  Cybercriminals will always find and exploit vulnerabilities.  It’s always an endless cycle.

Other smaller tech companies have also responded to the KRACK security bug.  “Cisco also said it had published a security advisory to detail which products are affected, and a blog to help customers better understand the issue.  Fixes are already available for select Cisco products, and we will continue publishing additional software fixes for affected products as they become available,” a spokesperson said.  “Intel confirmed it was working with its customers and equipment manufacturers to implement and validate firmware and software updates that address the vulnerability.  It also released an advisory.”

What Consumers Should Do About the KRACK Security Bug

All Wi-Fi users should take steps to protect themselves and their devices. They must manage their router patches and settings.  In addition, consumers should avoid using public Wi-Fi networks.  Any security updates provided by Apple, Google, and Microsoft should be installed on both routers and devices. Norton offers a Wi-Fi vulnerability alert and privacy.  It will encrypt traffic and protect against identity thieves.  Your information will be invisible to hackers.

Public Wi-Fi is a top target for cybercriminals.  It’s important to note that these Wi-Fi access points aren’t well secured.  Airports, coffee shops, shopping centers, and hotels are prime hunting ground for hackers trying to steal personal information.  KRACK is just another tool in the cybercriminals arsenal.

For consumers whose smartphones, PCs and routers don’t yet have updated solutions, there are still some steps that can be taken to protect online privacy.  VPN software can offer protection since it encrypts all traffic.  Although changing a Wi-Fi password won’t specifically prevent a KRACK attack, it’s still advisable.

How do attackers implement KRACK?  There are several conditions that must be met.  First, the cybercriminal must be within physical proximity of the user. Second, the user’s device must be wirelessly enabled.  Third, the cybercriminal executes a man-in-the-middle to intercept traffic between the user’s device and the wireless access point.

Decades to Uncrack KRACK

It will take decades to uncrack KRACK.  The challenges go way beyond a mere patch and are not limited to just tech devices.  For example, the company Netgear took immediate action after the KRACK attack.  Fixes were available for dozens of router models.  But, the company makes over 1,000 router models.  Each needs to be tested, and the company will need partners to do a full fix.  How long will that take?  These challenges aren’t unique to Netgear either.  It just underscores how ill-prepared the industry is in this type of calamity.  This just covers routers, too.  What about Wi-Fi IoT devices?  The KRACK vulnerability could affect security cameras, garage doors, and even appliances.

Keep in mind that “There is no evidence that the KRACK vulnerability has been exploited maliciously, and Wi-Fi Alliance has taken immediate steps to ensure users can continue to count on Wi-Fi to deliver strong security protections, read a statement published by a Wi-Fi industry trade group.  This issue can be resolved through straightforward software updates, and the Wi-Fi industry, including major platform providers, has already started deploying patches to Wi-Fi users.  Users can expect all their Wi-Fi devices, whether patched or unpatched, to continue working well together.”  That should keep consumers and businesses from panicking.

All around, the key to fighting a cyberattack is in the hands of the top three Titans and other major players in the technology industry.  New defensive strategies must be employed, and the public needs to be educated and updated on current threats when using technology for home or business.  However, with Google, Apple, and Microsoft at the helm, we should all be in good hands.

Is Your Charitable Organization at Risk?

If tomorrow’s headlines read your non-profit organization’s data and donor info was breached, what would be the ramifications?  Are you taking enough appropriate steps to stop cybersecurity threats?

Is Your Charitable Organization at Risk?  Cybersecurity Tips for Non-Profits

Almost weekly, we hear about an internet or computer security breach at a large retailer, bank, or recently, a major credit reporting service.  These breaches create problems for not only the companies involved but for their customers.  Personal information is often exposed, and the carefully crafted reputation a company may have built for years or decades can be destroyed.

As of yet, we haven’t heard of any major breaches at a non-profit organization.  The key words are “as of yet.”  Non-profits often store a significant amount of data about their board members, employees, volunteers, donors, corporate supporters, and more.  A security breach for a non-profit will not only be embarrassing but it could have significant adverse effects on future funding. These are some of the reasons non-profits should be proactive in taking steps to button up computers and online security.  Here are nine cybersecurity tips of which non-profits should take note.

1. Increase the difficulty of your passwords and change them at least quarterly. If your organization is using simple passwords because it is “easier”, you should keep in mind it also makes it easier for others to gain access.  Many experts agree that the most secure passwords should be a random series of eight letters and numbers with at least two capital letters included in the sequence.  With the frequent turnover in staff members and volunteers, passwords should be changed at least every three months.  Don’t allow staff to write their passwords on Post-It notes attached to their computers.    It happens.
2. Set security protocols for staff and volunteers in writing.  Don’t assume those around you know about phishing and spear phishing and the dangers lurking behind pop-up ads and downloads. Many non-profit organizations have older volunteers who may not be aware of the latest dangers and tactics being used to gain access to data.  Having staff and volunteers sign off on a one-sheeter acknowledging they understand basic security guidelines can demonstrate they are aware of the potential problems.
3. Upgrade security software. Of course, non-profit budgets are tight but they will get much tighter if there is a breach in your data and donors feel their information is not secure.  Make it a point to get security software from a major supplier that you can feel comfortable with and keep it updated.  Providing a secure firewall or malware protection after experiencing a cybersecurity attack will do little to build confidence in your organization.
4. Upgrade computers and hardware.  The older your equipment is, the more likely it is susceptible to a cybersecurity threat. Board of directors may not be willing to invest in new computer systems just because of the bells and whistles they include.  If the security of their sponsor and donor data is at risk, however, it may get their attention and provide support for new equipment.  If your non-profit has not looked into TechSoup for deep discounts on software and hardware, it should.  The application process can be a bit tedious but the savings are significant.
5. Make sure your online donation processing is impregnable.  It is critical your donors have absolute confidence when making online donations. While services like PayPal are simple and relatively easy to set up, they may not instill the confidence of a more robust payment system.  Giving donors payment options can also help facilitate more and more frequent donations.
6. Limit access to important files and data. One of the benefits of working for a non-profit is that there is often a team atmosphere, with staff and volunteers working toward a common goal.  Unfortunately, this can lead to sloppy security and over-sharing of files and data.  Computers may be left unlocked when not in use and unnecessary personnel may have access to sensitive files.  Limiting access will not only protect your information in-house but will help in limiting external access.
7. Back up data on an external drive.  How quickly can your organization restore current data and software if you had a significant hard drive crash? Computers are generally more stable than ever, but this can lead to a false sense of security and even complacency about backing up data.  Make sure data is backed up regularly and frequently and the back up is kept off-site.  This can be done in the cloud, on a CD or on an external hard drive.  If the hard drive on your computer or server were to irretrievably crash today, what would the ramifications be?  If you don’t know or if the word “disaster” comes to mind, create an off-site backup and restoration plan.
8. Get professional assistance.  If you are not confident in the steps you are taking in keeping your organization’s data secure from threats, get the advice of someone experienced in the field. Discuss cybersecurity with other profit and non-profit organizations you may come in contact with and ask for recommendations.  Cybersecurity doesn’t have to be that complicated when it is made a priority but if you are not comfortable taking it on, get the help of an expert.
9. Document the steps your organization takes to protect the security of its data. In the event of a cybersecurity attack, it won’t take long for fingers to be pointed and blame to be placed.  This is why it is important to have a security plan in place and document what is being done.  This can demonstrate, even after the fact, that your organization was aware of the possibility and was taking proactive steps to keep its computers and data safe.  This should include how your social media is handled and who is responsible for it.

Make cybersecurity a priority, get everyone involved, and document your plan and processes. Greater awareness can go a long way in protecting the data of your non-profit organization.

Microsoft Word is an incredibly powerful tool for office productivity, but you’re probably not using all of these fabulous time-saving features.  Get the scoop!  

There are few software packages that are as pervasive in a variety of different industries as the Microsoft Office productivity suite that includes Word, Excel, PowerPoint, and Access.  The ability to quickly and easily edit, share and distribute documents is a massive draw for organizations, schools, and students, but few people fully master these powerful programs. Most people use only a small percentage of the tools that are available, which is unfortunate. There are significant productivity gains available to anyone who takes the time to dig deep and master the capabilities of these full-featured programs.  Ready to shave some time off your document editing or processing tasks?

Keyboard Shortcuts

The design of the ribbon across the top with commands also makes it straightforward to find the information that you want, with commands that are used regularly garnering spots in plain sight. Even with the ribbon available, there are repetitive tasks that could be simplified by using a keyboard shortcut.  There are plenty of options that will help you navigate through the system and make your work more efficient, here’s just a few that you may find yourself using on a daily basis:

• Ctrl+A – A great way to select all the text on the page
• Ctrl+Y – Redo or Repeat your last action, to quickly apply formatting as you work through a document
• Ctrl+K – Insert a link to the document at the point of your cursor
• Ctrl + DEL – Delete word to the right of the cursor
• Ctrl + Backspace – Delete word to the left of the cursor
• Ctrl + Home – Move cursor to the beginning of the document
• Ctrl + End – Move cursor to the end of the document
• Ctrl + 1 – Single-Space Lines
• Ctrl + 2 – Double-Space Lines
• Ctrl + 5 – 1.5-Space Lines
• F7 – Run spell check on any selected text or the entire document
• Shift + T – Insert the current time
• Shift + D – Insert the current date

If you’re spending a big part of your day editing within Word, these keyboard shortcuts alone could save you time, effort and frustration!

Section Breaks

Part of the beauty of Word is the ability to create well-structured documents that make it easy for users to find what they need quickly and easily.  All it takes is a little planning and foresight — and a solid understanding of sections and styling — to output Word documents that your users will be pleased to use and that are ready for publishing in print or online.  Sections in Word allow you to differentiate between areas of the document, such as the title page, table of contents, main document and any appendices.  Create a section break in Word by accessing the Page Layout menu, and look under ‘Breaks’.  A section break allows you to change formatting, almost like having a mini-document inside your main document.  If you’ve ever struggled with setting different page number styles on your Title page than on interior pages, this tip alone will be a lifesaver.

Working with Large Documents

When you’re editing a book, school paper or other large documents, it’s important that you apply the correct styling to ensure consistency of design and structure.  If you need specific fonts, font sizes, paragraph styles or another formatting, it makes sense to take the time to edit your styles before you even start typing.  You can begin defining your styles for the entire document by editing the presets under Heading 1, Heading 2, Heading 3 and Normal text — all of which can be found in the Style menu in the ribbon.  Select the style you’d like to edit, and making the change is as simple as making changes in the pop-up window and saving your adjustments. When you wish to apply that particular style to a block of text, select the text and then choose the level of style you would like to apply.

Using styles allows you to make universal changes to your documents.  For example, your boss wanted you to use Comic Sans font for all headers, but then when they realized how difficult that font was to read wanted it all changed back to Arial.  If you’ve properly applied and used your styles, this is the matter of a few clicks to update the entire document.  Styles are also very helpful when you’re creating a Table of Contents, which you can do by clicking on the References tab and then clicking Table of Contents to insert your selection.  Header levels are translated immediately into levels in the Table of Contents, saving you valuable time and clicks.

Track and Compare Changes

It’s not unusual to need to review someone else’s Word document, whether you’re in a contract review or simply editing out some sections of a marketing document.  The handy ‘Tracked Changes’ feature in Word provides you with a way of seeing exactly the changes someone else made in your document and allows you to accept or reject each change — and even add comments.  Access this feature by going to the ‘Review’ tab and clicking ‘Track Changes’. Changes are highly visible and tagged to the user who made the adjustment.  What happens if you forgot to turn on tracked changes before you sent a document?  Don’t despair, the ‘Compare Changes’ feature allows you to compare two documents with ease.  Click ‘Tools’, ‘Track Changes’, ‘Compare Documents’, and the modifications will be listed for your easy review.

Need to upgrade your Microsoft Office installations or considering moving to Office 365 in the cloud?