Tl;drSodinokibi requires administrative privileges to run; the ransomware uses either the logged-on account (if it’s an administrator) or escalation via CVE-2018-8453.Best mitigation is to follow good security practices;Don't log in with an administrator account, use UAC to escalate privileges on a per-user basisMicrosoft has provided a patch for CVE-2018-8453. Ensure you’re installing all Windows Updates.Travelex Cyber AttackAccording to a 2019 survey conducted by Datto, 1 in 5 SMEs fell victim…
With the festive season just around the corner, most of us are settling down for a well earned break over the holiday. Just picture it now, it's Friday and you're heading out of the office until the new year. You get home and realise you've forgotten something, out of office replies... But don't worry, we've got you covered! We've created some simple step by step guides to get you set…
Do you ever send information that you'd like to ensure only the intended recipient can read? If so, this is the blog post for you! We're going to explain why you should consider encrypting email content and just how you can implement it. If our content is useful to you, we’d love to hear about it, make sure you subscribe to our newsletter for instant access to all our content…
SME's come in many shapes and sizes, just as true of an Accountancy Practice as an IT Provider. Whilst on the surface it appears there isn't much that separates two SMEs in the same sector, we all know that couldn't be further from the truth. So, why am I writing this? I want to break down what we at bzb IT define as "Product vs Service", specifically how it can…
Supplying great IT services isn't just about technical skill and a pleasant demeanor during individual cases raised, although they are important! Every IT supplier worth their salt needs to have their clients back, guiding them through the maze that is IT and third party management is the most effective way to display just that.What is third party management?All businesses have operational processes outside of what their IT provider should reasonably support,…
As with most things in life, one size doesn't fit all when it comes to Cyber Security strategy. It's often difficult to know where to start with this topic, mainly due to the mountain of information available and the fact different advice is relevant in each individual case. Our tips here are just quick snippets that every business should, at the very least, consider but they in no way substitute…
We all should implement secure passwords for all the services we access as standard and there's no reason every one of us can't. Knowing what makes a password secure, that is resistant against cracking, bridges the gap between those with an 8 character minimum length password and the practically un-crackable 15 character phrase needed.So, let's start with the fundamentals...The best place to start - The Basics AAA - Authentication, Authorisation,…
Right, let's start with a good helping of honesty for those that have landed straight here - this post gets more SEO traction than any other on our site, I feel it’s long-overdue an update with useful content for those wishing to navigate the minefield that is AnyConnect configuration. If you benefit from the content, your feedback and interaction will genuinely be the difference between us making more of our…
