IT Tech Tips

Have you ever casually talked about a product or service while your phone was nearby and then suddenly started seeing ads for it on your social media feed? Your phone is listening. If that concerns you, this should really worry you: your devices are tracking you too! From the phone itself to the apps you download and access, there are multiple ways that your device can ping your location. Luckily, there are ways around allowing your phone to spy on you. In today’s article we’ll share why it’s so dangerous, the top six ways your phone is tracking you and how you can shut it down.  Why Is It Dangerous?  This data is a hot commodity for Internet marketers. The collected data is used to target you with the local and interest-based ads you’re most likely to be interested in. This digital “stalking” is legal as long as they give you the option to opt in or out. However, marketing execs aren’t the only ones interested in your data. Cybercriminals are too. Here are the reasons allowing your phone to track you is a no-go: 1. Privacy Invasion: Phone tracking allows apps, websites and third parties to collect extensive information about your location, habits and behaviors without your full knowledge. This constant surveillance can lead to a significant invasion of privacy, making users vulnerable to targeted advertising, data harvesting or even malicious tracking for more harmful purposes. 2. Identity Theft And Fraud: If your phone’s tracking data falls into the wrong hands – such as hackers or cybercriminals – it can be used to gather personal details and patterns. This data can enable identity theft, financial fraud or unauthorized access to sensitive accounts, causing financial and emotional harm. 3. Physical Security Risks: By sharing your real-time location data, phone tracking can expose you to physical security threats. For example, stalkers or criminals can exploit this information to track your whereabouts, compromising your safety. Publicizing your movements can also make it easier for bad actors to predict your routines or target you when you’re most vulnerable. How Your Phone Is Tracking You  1. Location Services: Your phone’s GPS and location services track your whereabouts in real time, recording where you are and how long you stay there. Using “Frequent Locations,” your phone makes assumptions about where you work and live based on when you visit and how long you stay. While this is helpful for finding directions or nearby restaurants, constant tracking can also reveal your movement patterns, leaving you vulnerable to privacy invasion. Both Apple and Android give you the option to turn this feature off. Exact instructions will vary by specific model and operating system; however, here are basic instructions: How to turn it off: 2. App Permissions: Many apps request access to your contacts, photos, microphone and camera, allowing them to track your activity, even when you’re not actively using the app, and collect more information than necessary. You can adjust this and should review it regularly to make sure you aren’t compromising your privacy. How to turn it off: 3. Wi-Fi And Bluetooth Connections: Your phone constantly scans for Wi-Fi and Bluetooth connections, allowing third parties to track your location based on the networks and devices you’ve interacted with. How to turn it off: 4. Browsing Activity: Web browsers and apps monitor your search history and the websites you visit. This data is used to build profiles about your preferences, feeding you targeted ads and potentially selling your behavior patterns to third parties. How to turn it off: 5. Ad Tracking: Your phone assigns you a unique advertising ID that companies use to track your behavior across apps and websites. This ID follows your activity, providing advertisers with insight into your interests to serve personalized ads. How to turn it off: 6. Social Media And Search Engines: Platforms like Facebook, Instagram and Google track your online interactions, searches and location to create detailed profiles of your habits and interests. They use this data for advertising and content recommendations, which can feel invasive. How to turn it off: By adjusting these settings, you can significantly reduce the amount of personal information your phone tracks, giving you more control over your privacy. Why This Matters For Business Owners:  For a business owner, protecting your personal privacy is just as crucial as securing your company’s sensitive information. The same tracking methods that follow your every move can also expose your business to risks. Hackers, cybercriminals and even competitors can exploit these vulnerabilities to gather valuable data about your business activities, customer interactions and confidential communications. By taking steps to limit how your phone tracks you and adjusting your privacy settings, you’re not just protecting yourself – you’re also safeguarding your business from potential data breaches, identity theft and targeted cyber-attacks. In today’s world, cybersecurity isn’t just a technical issue, it’s a strategic one, and staying ahead of threats starts with being informed and proactive. If you’re concerned about your business’s overall security, don’t wait for a problem to occur. Schedule a FREE Security Risk Assessment with our team today, and let’s ensure your entire network is protected from top to bottom. Our experts will identify vulnerabilities and recommend tailored solutions to keep your business safe. Click here or call us at 774-241-8600 to get started.

Software updates can feel like a nuisance, but skipping them is one of the easiest ways to leave your systems vulnerable to cyber-attacks. Hackers are constantly looking for weaknesses, and outdated software is like an open door to your network. But how do you know when it’s time to update, and should you always trust your computer to tell you? Here are five clear signs it’s time to update, plus tips on how to handle updates safely. 1. Your Software Is No Longer SupportedIf the software provider has stopped releasing updates for your current version, it’s a major red flag. Unsupported software often has known vulnerabilities that cybercriminals can easily exploit. Check for announcements from your software providers about end-of-life support and upgrade as soon as possible. Tip: Don’t wait for the software to “break” before updating. Plan ahead and migrate to newer versions while you still have full support. 2. You Notice Slower PerformanceA sudden slowdown in your software’s performance can be a sign that it’s out-of-date. Newer versions of software are optimized to run more efficiently, and skipping updates might leave you with buggy, sluggish software. Tip: If you notice performance drops, check the settings for pending updates or visit the provider’s website to manually download the latest version. 3. You Receive Security AlertsHas your antivirus or security software flagged vulnerabilities in an application you use? If so, an update is likely overdue. Cybercriminals thrive on exploiting security gaps in outdated software. Always pay attention to security alerts and take them seriously. Tip: Use a trusted antivirus tool that can integrate with your software and alert you when updates are needed. Make sure you verify the authenticity of any update alerts before clicking. 4. You Haven’t Updated In Over 6 MonthsIf it’s been more than six months since your last software update, you’re probably due for one. Many providers release updates on a regular schedule to patch vulnerabilities and enhance features. Tip: Set a reminder to check for updates regularly, rather than waiting for the computer to alert you. This is especially important for critical software, like operating systems and antivirus programs. 5. New Features Have Been AnnouncedSometimes updates come with more than just security patches – they also bring new features. If you hear about exciting new functionality that you don’t have, it’s a sign you’re behind on updates. Tip: Keep an eye on announcements from your software providers. Follow their blogs or sign up for notifications so you’re always aware of improvements. How To Update Safely While updating software is crucial, you should always be cautious about how you do it. Here’s how to ensure your updates are safe: – Verify The Source: Always download updates directly from the provider’s official website or trusted app store. Avoid third-party sites or suspicious links. – Back Up Your Data: Before any major update, back up important data to an external location. This ensures that if something goes wrong, you won’t lose critical files. – Restart Your Device: Once the update is complete, restart your computer to ensure that the new features and patches are properly installed. By staying on top of software updates, you’re not only improving performance but also protecting your systems from potential threats. Don’t wait until it’s too late – keep your software up-to-date and ensure your network stays secure. Need help managing your software updates? Call us at 774-241-8600 or click here to schedule a consultation.

Summer is a popular time for vacation travel. If you’re looking to squeeze in any last-minute travel, there is a scam circulating that you need to be aware of. As costs for everything from food to travel continue to increase, the logical step is to search for the best deals online to book a memorable trip without breaking your budget. According to Booking.com, cybercriminals have decided to capitalize on this need and are now using one scarily convincing, AI-generated phishing e-mail that can cost victims way more than their vacation fund. Booking.com’s CISO, Marnie Wilking, shared that the organization has seen a 500% to 900% increase in travel-related scams in the past 18 months using this malicious tactic. How are these scammers doing it? Phishing e-mails have existed since the dawn of the Internet, but AI tools like ChatGPT are making it increasingly easy to create realistic and professional scam e-mails that are more likely to trick readers. In the past, phishing e-mails were riddled with red flags such as spelling and grammatical errors. With the rise of AI, it’s easier for cybercriminals to pump out dozens of seemingly legitimate e-mails that often go undetected by software and readers. Here’s how they work: Scammers will use sites like Booking.com or Airbnb.com that allow people to list their places as short-term rentals. The scammers send out e-mails offering incredible rates or time-sensitive deals on nonexistent properties. After someone pays, the cybercriminals will either disappear with the money, leaving the renter without a place to stay, or use follow-up e-mails to collect additional “fees” or “charges” before vanishing. To be clear, these vacation-focused phishing scams are NOT new. The problem now is that, with AI, more people are falling for them because these e-mails are becoming more convincing. What can you do? Vacationers can take several key steps to ensure they’re not being duped. The most important thing is to stay vigilant. Analyze every e-mail offer you receive and follow cyber security best practices. Standard security software can help detect some of these scam e-mails, but often not all of them, so it’s important to be cautious and look for red flags. Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 774-241-8600 or click here to book a FREE 10-minute discovery call with our cyber security experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.

Each year on February 1st, we celebrate Change Your Password Day. While it’s not a holiday that gets you off work, it serves as a good opportunity each year to do a quick check-in and make sure you’re using strong passwords that will keep your accounts protected. The suggested ‘rule’ used to be to change your password every three months. With advanced tools like password managers and data encryption, experts now say the type of password you use is more important than how often you create a new one. We’re sharing up-to-date advice on how to create a strong password that will keep your account secure and hackers guessing. Make It Complex Aim for complexity by combining uppercase and lowercase letters, numbers and special characters. Avoid easily guessable information like birthdays, names or common words. The more intricate and unique your password, the harder it is for hackers to crack it. Longer Passwords Are Harder To Crack Long passwords provide an added layer of security. According to Hive Systems, brute-force hacking can crack an eight-character password in less than one hour! When creating a new password, aim for a minimum of 12 characters, and consider using passphrases—sequences of random words or a sentence—which can be both strong and easier to remember. A random passphrase would be something like: cogwheel-rosy-cathouse-jailbreak. This passphrase was generated from the website useapassphrase.com, which will auto-create a four-word passphrase for you if you’re stumped. Use Unique Passwords For Each Account Resisting the temptation to reuse passwords across multiple accounts is crucial. If one account is compromised, having unique passwords for other accounts ensures that the damage is contained. Consider using a reputable password manager to help you generate and store complex passwords securely. *Do NOT use Google or your browser’s password manager. If your Google account is compromised, all of your passwords will be too. Talk with your IT team about what password management tool they recommend for you and your organization. Update Passwords Yearly As long as your account hasn’t been compromised, you only need to change your passwords once a year to minimize the risk of unauthorized access. The only time a regular password change routine would be exceptionally helpful is if someone has access that you don’t know about. A frequent password change can make it more challenging for attackers to maintain access to your accounts over an extended period of time. Engage Multi-Factor Authentication (MFA) Implementing multi-factor authentication is another easy way to make your password bulletproof. MFA typically involves combining something you know (your password) with something you have (like a code sent to your phone). Even if your password is compromised, MFA significantly reduces the chances of unauthorized access. Set Up Strong Password Recovery Alternatives Leverage password recovery options like security questions or alternative e-mail addresses. It’s important to choose questions with answers that are not easily guessable or have publicly available information so “What’s your mother’s maiden name” is out! Use Password Managers You don’t have to try and remember every password, and you shouldn’t write them down on a sticky note on your desk. Instead, use a good password management tool that is secure and will handle keeping track of your passwords for you. Bonus points for turning off the auto-fill feature. Hackers can infiltrate sites and install a little bit of code on a page that creates a second, invisible password box. When your password manager autofills the login box, it will also fill in the invisible box, giving hackers your password. This isn’t overly common, but it still poses a risk. Regularly Review Account Activity Monitor your account activity for any suspicious logins or activities. Many online platforms offer features that notify you of login attempts from unfamiliar devices, allowing you to take swift action in the event of unauthorized access. It’s also always good to be aware of phishing attempts, never click suspicious links or attachments in e-mails, avoid public Wi-Fi and only use secure connections and educate and train your team on what to look for when it comes to cybercrime so they can protect themselves, you and the company. As cyber threats continue to evolve, mastering the fundamentals of cybersecurity, like creating strong passwords, becomes paramount. By making informed choices and staying proactive, you can significantly enhance your online security. However, as the leader of your organization, it’s important to remember that nothing is foolproof. Educating your team on cybersecurity best practices is essential, but mistakes can and will still happen. For most, it’s not a matter of if, but when. You must have a robust cybersecurity plan in place. The right IT team will make sure you have every protection in place to keep you safe and a crisis management plan ready if something goes wrong. To find out what gaps you have in your cybersecurity system, we’ll do a FREE Cybersecurity Risk Assessment. Click here to book yours now.

Long gone are the days when phones were simple devices used to make calls. Today our phones are advanced, handheld supercomputers that can do everything from pay a bill to order lunch for delivery to edit videos and more. But with more capabilities come more risks. Because our phones are computers and connected to the Internet, they are susceptible to the same security risks that any other computer would be. Worse yet, personal devices often contain private information like bank account numbers, which, if accessed by the wrong person, could result in dangerous and expensive problems like drained bank accounts, identity theft and so on. Still, despite the obvious risks, most people do not treat phones like the security threats they pose, making them easy, no-brainer targets for cybercriminals. To give perspective on how severe the problem is, Apple recently shared a study from MIT revealing a shocking 2.6 billion personal records were breached in 2021 and 2022 and were expected to increase in 2023. According to Kaspersky Security Network, in Q3 of 2023 alone, a total of 8,346,169 mobile malware, adware and riskware attacks were blocked, with adware being the most common tactic at 52% of total detected threats. The risks are even more serious for business owners. Does your organization have a mobile policy for employees? Are employees accessing sensitive work documents or accounts using unprotected devices? If you’re not sure, you need your IT department to look into this immediately. It only takes one entry point for a hacker to break into your network. There are a few ways to protect your devices now. Both Apple and Android have developed powerful security systems with advanced protective features you can start utilizing today. Apple: End-to-end encryption has been the default for Apple iMessage, iCloud Keychain, and Health data, but with a recent update, Apple rolled out Advanced Data Protection (ADP). This feature is an optional setting that offers Apple’s highest level of cloud data security by encrypting messages in iCloud, iCloud Backup, Notes, Photos, Safari bookmarks, Siri Shortcuts and more. Activating this setting protects your data in the event of a cloud-based data breach by only allowing trusted devices added by you to decrypt the information. Not even Apple can access your data. Here’s how to enable Apple’s Advanced Data Protection Setting: NOTE: If you don’t have a recovery contact or key set up, you’ll be prompted to do that first. NOTE: You may be asked to update other devices signed into your iCloud account before enabling end-to-end encryption (E2E). You can also remove devices with old software to continue the process. If your device is new, for security reasons, Apple might make you wait to enable the feature. If that’s the case, that timeframe will show on your screen during setup. Android: While Apple is known for having a robust security system that reduces vulnerabilities and protects users’ data, Android’s security features are not far behind. Google Play Protect analyzes every app before it’s available for download, and any new apps where a security risk is detected are unable to be accessed. The software also runs daily scans to help identify and disable malware and other harmful applications installed on your phone to protect your data. Furthermore, Android backups are regularly uploaded to Google servers and encrypted with your Google Account password for security purposes. How to keep data secure if you’re using an Android: If you’re using Google One, you can set up automatic backups on your Android device to ensure that if disaster strikes, your data is securely stored in the cloud: NOTE: If you get a message to install an app, update an app or change your settings, follow the onscreen steps. Then, go back to the Google One app to finish. NOTE: Google One backups may take up to 24 hours to complete. How To Protect All Of Your Devices: These features are not the end-all, be-all for phone security, but they will add a layer of protection for your data. To ensure every device on your network is secure, we recommend getting a third-party Cybersecurity Risk Assessment. This is a free, no-obligation assessment where one of our experts will examine your network and let you know if and where you’re vulnerable to an attack, including your mobile device policy. Schedule your assessment with one of our senior advisors by calling us at 777-241-8600 or going to https://centrend.com/contact/

The holiday season is in full swing, which means so are the cybercriminals! While you’re making holiday gift lists, they’re plotting and scheming new ways to take advantage of unsuspecting online shoppers. Holiday phishing scams have become an all-too-common threat, targeting customers to steal personal information, financial data and even identities. To help reduce the chances that a cybercriminal will ruin your much-deserved holiday fun, we’ve outlined a few of the most common and dangerous scams that you should be on the lookout for, how they work and tips to help you avoid becoming their next victim. Understanding Holiday Phishing Scams: Phishing is a deceptive technique cybercriminals use to trick individuals into sharing sensitive information such as passwords, credit card details or Social Security numbers. During the holiday season, these scams often take on a festive disguise, tricking victims with holiday-themed e-mails, messages and websites. Whether you’re ordering gifts for clients or friends and family, here are some common tactics used by holiday phishing scammers to be aware of: Recognizing and Avoiding Holiday Phishing Scams: Now that we understand how holiday phishing scams operate, it’s essential to know how to recognize and avoid falling victim to them. 1. Verify The Sender: Always check the sender’s e-mail address or domain. Be cautious of misspelled or suspicious e-mail addresses. Legitimate companies and organizations use official domains for their communication. 2. Don’t Click On Suspicious Links: Hover your mouse over links to see the actual URL they lead to. Be wary of shortened links or URLs that don’t match the sender’s domain. If in doubt, visit the website directly by typing the URL into your browser. 3. Beware Of Urgency And Pressure: Scammers often create a sense of urgency, claiming limited-time offers or imminent problems. Take your time to verify the authenticity of any claims before taking action. 4. Double-Check Websites: Before entering personal or financial information on a website, ensure it’s secure. Look for “https://” in the URL, a padlock icon in the address bar and a valid SSL certificate. 5. Use Two-Factor Authentication (2FA): Enable 2FA wherever possible, especially for online shopping and banking accounts. This provides an extra layer of security, even if your password is compromised. 6. Educate Yourself And Others: Stay informed about current phishing tactics and share this knowledge with friends and family. The more people are aware, the harder it becomes for scammers to succeed. 7. Protect Personal Information: Avoid sharing sensitive information via e-mail or text messages, even if the request seems legitimate. Use secure channels for such communication. While the holiday season is a time for celebration and togetherness, it’s crucial to remain vigilant against holiday phishing scams. Cybercriminals prey on the festive spirit and increase online activity during this time. By recognizing the signs of phishing attempts and following best practices for online security, you can protect yourself and ensure a safe and joyous holiday season for you and your loved ones. Business owners: If your staff will be ordering gifts online for clients, make sure they know how to spot a phishing attack and that your network is properly secured in case something slips through the cracks. You don’t want your organization to be negatively impacted by extending holiday goodwill. If you aren’t sure if you’re protected, please give us a call or schedule a 10-minute discovery session with our team. We can help give you peace of mind this holiday season. Click here to book now, and happy holidays!

There is one extremely common threat to our security that nearly everyone has witnessed but hardly anyone talks about – bad bots. These silent attackers are often thought of as annoying spam accounts posting computer-generated comments online. They are so common that most of us tend to scroll by them without noticing, but in reality, bad bots are much more dangerous, particularly for business owners. What Are Bad Bots? Bad bots are software applications that are programmed to run automated tasks with malicious intent, such as brute force attacks, data mining, ad fraud and more. These stealthy assailants are the tireless, automated “employees” of cybercriminals that help them wreak havoc at scale. And they are everywhere. A study by Imperva revealed that of all Internet traffic in 2022, 47.4% was made up of these automated bots. The activities of these bad bots can range from annoying to outright malicious. The most common ones we see that can affect any business are: Reputation Attacks: Bots can be configured to leave comments on your social media or website with malicious codes and links, post provocative or spammy comments, leave scathing reviews and so on, all of which affect consumer trust. Web Scraping: Bad bots can scrape your website for valuable data, such as pricing information or customer reviews, which they might use for various purposes, including undercutting your prices or selling your data to competitors. They could also use it to duplicate your website and set up phishing scams to trick visitors. This can be particularly dangerous for industries with sensitive data, like health care. Bots can scrape sensitive health information, such as patient records, medical history and insurance information, which is often later sold on the dark web for profit. Brute Force Attacks: These bots attempt to gain unauthorized access to your systems by repeatedly guessing passwords, making your accounts vulnerable to breaches. This is a popular tactic against financial services companies. If cybercriminals get access to accounts that contain sensitive financial information, they can open up new credit card accounts. Distributed Denial of Service (DDoS) Attacks: Bad bots can be used to launch DDoS attacks, overwhelming your website or online services with traffic and causing downtime. Ad Fraud: Some bots engage in click fraud, repeatedly clicking on online ads to deplete your advertising budget without delivering real human engagement. This will skew analytics and often lead to poor decision-making for the marketing department. Detecting bad bots can be challenging since they often mimic human behavior. The hardest ones to identify are evasive bots, which get their name from their ability to sidestep security by cycling through random IPs, rapidly changing their identities, mimicking human behavior and defeating CAPTCHA challenges. However, there are a few methods to help you identify bad bot attacks: Watch Traffic Patterns: Monitor website traffic patterns for irregularities, such as high traffic from a single IP address or a single region. Monitor All Comments Sections: Check in regularly on social media sites for spam comments or fake bad reviews and delete them. Use CAPTCHA Challenges: Implement CAPTCHA challenges or bot detection tools to filter out automated traffic automatically. Implement Anomaly Detection: Use anomaly detection algorithms to spot unusual behavior, like rapid data scraping or suspicious login attempts. Track Bot Signatures: Maintain a list of known bot signatures and compare incoming traffic against it. If you notice repeated issues, there are a few actions you can take, such as: Educate Your Team: Train your employees to recognize and report suspicious activities, as humans are often the first line of defense. Create a process that includes who to notify and what steps to take when each issue is noticed. Use Bot Detection Solutions: Invest in bot detection software or services that can help identify and block bad bot traffic. Maintain Regular Updates: Keep your software and security systems updated to patch vulnerabilities that bots may exploit. Implement Rate Limiting: Limit the number of requests an IP address can make in a given time frame to thwart scraping attempts. Hire An IT Professional: Bots are tricky. IT companies deal with them regularly and have advanced solutions that can help eliminate these annoying and dangerous issues for you. The impact of bad bots on business owners can be significant and lead to financial losses, reputational damage and legal complications. If you’re worried about bad bots causing a problem for your organization, schedule a FREE 10-Minute Discovery Call and we’ll help figure out where your company is vulnerable and how you can protect yourself and your business today. Click here to book now.

When you run your own business, it feels like there are never enough hours in the day. Even when you start early and end late, there’s always something else, another e-mail or task, nagging for your attention. If you want to be productive, and ultimately successful, it’s important to prioritize what tasks you’ll allow to fill your schedule. Not everything needs to be or should be done by you. Easier said than done. One of the issues we frequently see business owners struggle with is to delegate the tasks they don’t need to be doing. “It’s faster if I just do it” and “They won’t do it like I do” are two statements we often hear. For some tasks, that’s probably true, and those should stay on your plate, but when it comes to IT and technology, there are always several tasks business owners are doing themselves that they could and should hand off to someone else. Some are obvious, like security. Quality cyber security requires 24/7 monitoring, and it’s unrealistic for busy business owners to be able to handle that effectively. They simply have too much to do! Another mistake is when they hand it off to an employee, family member or friend to do for them. These people are typically not qualified to protect you correctly. However, there are dozens of other to-dos that you might not realize you can hand off to your IT team Here are 10 tasks you can delegate to your IT team so you can focus on running your business. And the list goes on. IT providers can also aid with HIPAA, CMMC and PCI compliance, file sharing for external/remote access users, data loss recovery plans, office relocation, cabling and so much more. Most business owners we consult with are surprised by the number of responsibilities a tech team can take on beyond cyber security. The best thing to do is book a FREE Network Assessment. During this assessment, our team will look at your entire system for areas of opportunity and improvement. We’ll conduct a full audit, provide you with a plan of action to optimize your business for productivity, efficiency and security, and answer any questions you have. Click here to book your Assessment now.