CDML Computer Services, Ltd.

🚨 PSA: CrowdStrike Software Update Defect on 7/19/2024 🚨

On July 19, 2024, a defect in a CrowdStrike software update caused BSOD errors on Windows systems, affecting both Microsoft and AWS infrastructures. CDML Computer Services does not use CrowdStrike solutions, so our customers are not directly impacted. However, your cloud services might be affected.

For more details, read our full blog post here:

Thank you for your continued trust in CDML Computer Services.

How Safe Is Your Digital World? Uncover the Anatomy of a Hack!

🚨 Are you aware of how modern cyberattacks begin and progress? From deceptive emails to the theft of sensitive information, hackers have sophisticated methods to breach security. Our latest post explains these tactics in detail and shows how you can protect yourself.
At CDML Computer Services, we're committed to keeping your data secure and your operations smooth. Check out our blog for more insights!
🔗 https://cdml.com/the-anatomy-of-a-hack-understanding-phishing-attacks/

Enhance your customer service with VoIP and UCaaS! These solutions offer advanced features like IVR, calling queues, voicemail to email, call recording, real-time analytics, CRM integration, and SMS-enabled VoIP DIDs. Provide personalized, efficient, and responsive service to your customers.
📊 Learn more about improving customer service: https://cdml.com/improved-customer-service-with-voip-and-ucaas

Attention trade professionals! 🚧🔧🔨
Discover how technology can transform your business operations, boost efficiency, and improve work mobility. From improved communication with VoIP and UCaaS to enhanced cybersecurity and cloud services, see how these solutions can streamline your work and protect your business.
Read our latest blog post to learn more: https://cdml.com/how-technology-can-streamline-operations-and-improve-efficiency-for-trade-businesses

Boost your business efficiency with seamless integration of VoIP and UCaaS! Integrate with CRM systems, email and collaboration tools, project management platforms, marketing automation platforms, and help desk software. Plus, enable SMS campaigns with VoIP DIDs and easily add or remove DIDs as needed.
📊 Learn more about the benefits of integration: https://cdml.com/integration-with-other-business-tools

Ensure your business communication is always reliable with VoIP and UCaaS! These solutions offer high uptime, built-in redundancy, backup mechanisms, and proactive monitoring. Plus, enhance your network's reliability with redundant ISPs and hot-spare firewalls.
📊 Learn more about the reliability and redundancy benefits: https://cdml.com/reliability-and-redundancy-of-voip-and-ucaas

Stay connected and productive from anywhere with VoIP and UCaaS! These solutions offer seamless communication across devices, from mobile apps to virtual collaboration tools, making remote work easier than ever. Plus, enjoy total freedom with wired or wireless headsets, handsets, speakerphones, and portable Bluetooth smart speakers.
📊 Learn more about enhancing mobility and remote work: https://cdml.com/mobility-and-remote-work-with-voip-and-ucaas

🚨 Major Data Breach: 3 Billion Personal Records Stolen 🚨
A significant breach at a background check firm has compromised 3 billion personal records. This is a stark reminder of the importance of strong cybersecurity measures.
CDML Computer Services provides tailored cybersecurity solutions for small and medium businesses. Ensure your business is protected – contact us at 718-393-5343 or visit www.cdml.com.
Read the full story on our blog: https://cdml.com/3-billion-personal-records-allegedly-stolen-from-background-check-firm-a-wake-up-call-for-all-organizations/

Unlock the potential of VoIP and UCaaS for your business! With features like IVR, voicemail to email, call recording, calling queues, and call routing, these solutions enhance your communication efficiency. Seamless integration with Microsoft Teams ensures your team stays connected and productive.
📊 Read our latest blog post to explore these features: https://cdml.com/enhanced-features-of-voip-and-ucaas

Is your business ready to scale? Discover how VoIP and UCaaS can provide the flexibility and scalability you need! Easily manage users, align costs with growth, and support business changes with advanced features like IVR, voicemail to email, call recording, calling queues, and call routing.
📈 Learn more about the scalability benefits: https://cdml.com/scalability-of-voip-and-ucaas-solutions

🔒 The Ticketmaster-Live Nation data breach has impacted 560 million customers, underscoring the critical importance of cybersecurity. Personal and payment information has been compromised, including partial payment card data.
CDML Computer Services is here to help your business stay secure with our advanced security solutions, including MDR services and employee training. Visit our blog to learn more about the breach and how to protect your organization from similar threats.
Read More: https://cdml.com/understanding-the-ticketmaster-live-nation-data-breach/

For more detailed advice, check out our previous blog post here: https://cdml.com/protect-your-digital-life-in-the-face-of-evolving-threats-moab-follow-up/

Transform your business communications with VoIP and UCaaS! These solutions offer significant cost savings, reducing infrastructure and call costs while minimizing maintenance expenses. Discover how VoIP and UCaaS can optimize your operations and boost your bottom line.
📊 Learn more about the cost-saving benefits: https://cdml.com/cost-savings-with-voip-and-ucaas

Why Your Organization Needs MDR and Employee Security Awareness Services

Cyber threats are becoming more sophisticated every day. To stay ahead, it's crucial to have both Managed Detection and Response (MDR) and Employee Security Awareness Services in place. Recent threats like GhostEngine malware highlight the need for continuous monitoring, expert threat analysis, and essential training for your team.
Read our latest blog post to learn more about why these services are essential for your organization: https://cdml.com/why-all-organizations-now-need-mdr-and-employee-security-awareness-services/
Stay secure and informed with CDML Computer Services.

Recent cybersecurity incidents like the Grandoreiro banking trojan highlight the importance of user training, email security, and comprehensive system monitoring. At CDML Computer Services, we offer solutions to protect your business.
Check out our latest blog post to find out more: https://cdml.com/user-training-email-security-and-system-monitoring
For more details, contact us at 718-393-5343 or [email protected].

Recent cybersecurity incidents like the Volt Typhoon exploit highlight the importance of system patching, upgrading old equipment, and comprehensive monitoring. At CDML Computer Services, we offer solutions to protect your business.
Check out our latest blog post to find out more: https://cdml.com/system-patching-upgrading-and-monitoring
For more details, contact us at 718-393-5343 or [email protected].

🔒 Important Security Alert for Dell Users! 🔒

A recent breach has compromised the personal details of millions of Dell customers. Be vigilant about unsolicited physical media like CDs or USB drives, which could contain malware. Educate your team on these risks and always verify any suspicious items with your MSP or Dell directly.
Read our full guide on how to protect your business from such threats: https://cdml.com/?p=2397
Stay secure and proactive!

🔒 Are You Prepared for a Cyberattack? Learn from Ascension’s Experience! 🔒
The cyberattack on Ascension healthcare showcases the urgent need for comprehensive cybersecurity measures. At CDML, we stress the importance of not just having strong defenses, but also ensuring your team is prepared to handle threats through regular training.
Read our latest blog for insights on how you can better protect your business: https://buff.ly/44EV3mh
Stay secure and proactive!

Protecting Your Personal Information in the Wake of the Change Healthcare Data Breach

While CDML Computer Services primarily offers IT solutions to businesses, we're committed to informing our community about potential cybersecurity threats. A recent data breach at Change Healthcare, a healthcare IT company, has exposed the personal information of millions of people. This data is now reportedly for sale on the dark web (https://twitter.com/DarkWebInformer/status/1780284353307611171). The data might include names, addresses, Social Security numbers, and even medical records.

The full scope of the breach is still being investigated, but we believe in taking a proactive approach to protecting personal information. Please help us spread the word to friends and family so everyone has a chance to safeguard their data. Here's what individuals should do to protect themselves:
• Monitor your credit reports.
You're entitled to a free credit report from each of the three major bureaus (Equifax, Experian, and TransUnion) every year. Carefully review these reports for any suspicious activity, such as new accounts you didn't open. If you find something amiss, contact the credit bureau immediately and file a dispute.
• Consider a credit monitoring service.
These services can alert you to any changes in your credit report, so you can catch fraudulent activity sooner rather later.
• Be cautious about phishing and smishing scams.
Criminals may use this data breach as an opportunity to launch phishing and smishing (SMS phishing) attacks. Such emails and text messages often appear to be from legitimate sources, such as your bank or credit card company. They may try to trick you into clicking on a malicious link or revealing personal information. Never click on links or attachments in unsolicited messages and be wary of messages that create a sense of urgency.
• Use strong passwords and enable two-factor authentication.
A strong password is at least 12 characters long and includes a mix of uppercase and lowercase letters, numbers, and symbols. Two-factor authentication adds an extra layer of security by requiring a second verification step, such as a code sent to your phone, when logging in to an account.

By following these tips, you can help protect yourself from the dangers of identity theft and fraud. If you suspect your information has been compromised, contact the Federal Trade Commission (FTC) at https://www.identitytheft.gov/ or by calling 1-877-FTC-HELP.

For additional resources on cybersecurity or help implementing these security measures in your organization, consider contacting a trusted IT professional like those at CDML Computer Services (https://www.cdml.com). Cybersecurity professionals can offer personalized guidance to help you safeguard your data.

Remember, protecting your personal information is an ongoing process. By staying vigilant and taking these steps, you can minimize your risk of falling victim to identity theft.

Is Your Small Business One Cyberattack Away From Disaster?
=========================================

Running a small business is tough enough without worrying about IT security. But one cyberattack can cripple your entire operation! Did you know that the Ponemon Institute reports that small businesses spend an average of $690,000 to recover from hacking attacks, while middle-market companies spend more than $1 million?

Here's the good news: A strong IT foundation is an INVESTMENT, not an expense. It safeguards your data, keeps your systems running smoothly, and helps you focus on what matters most - growing your business. ✅ According to a report by the National Small Business Association, spending a mere 5% to 10% of annual revenue on IT (including cybersecurity and communications) is sufficient for most SMBs.

At CDML Computer Services, we specialize in helping SMBs:
• Identify IT vulnerabilities with a FREE cybersecurity assessment.
• Implement solutions tailored to your industry's needs.
• Free up your time with a range of managed IT services, including VoIP management.

Don't wait for disaster to strike! Contact CDML today for a free 30-minute consultation and see how we can help your business thrive!

Comment below and tell us your biggest IT concern!
Like this post and share it with other small businesses who could benefit!

We are writing to inform you of a significant cellular service disruption that is currently affecting the New York City metropolitan area.

Major carriers including AT&T, Verizon, and T-Mobile are experiencing service disruptions. The issues began early this morning and have affected a large number of users. The disruptions include difficulties with sending texts, dropped calls, and slow cell service.

Please be aware that this may affect your ability to use certain services or communicate as usual on your mobile devices. We recommend using landline phones or internet-based communication tools where possible until the issue is resolved.

In the meantime, you can use applications like FaceTime, WhatsApp, Skype, Google Meets, or Facebook Messenger to make calls over WiFi. For our customers who use the CDML VoIP services, you can use your GoVoip App over WiFi or via a web browser to make calls and send text messages, provided you have the proper subscription.

AT&T has acknowledged the issue and is working towards a resolution. We will continue to monitor the situation and provide updates as necessary.

If you have any questions or need further assistance, please do not hesitate to contact us.

Best Regards,
Len Kaplan
CDML Computer Services
https://www.cdml.com
phone: 718-393-5343

Not very intelligent AI:
I asked Google Bard how to watch the Super Bowl today and was informed that I missed it by a week.

Protect your digital life in the face of evolving threats! (MoAB follow-up)

In the few days since the “Mother of All Breaches” was discovered we have already seen several clients whose accounts were compromised. I want to suggest some precautionary measures that you can take to prevent your identity & resources from being stolen.

1. Make sure that you turn on MFA (multi-factor authentication) for all your email accounts. This will prevent access even if someone steals your password.

2. Turn on MFA for all financial sites i.e. your banks, credit cards, investment accounts, mortgage accounts, loan accounts, etc.

3. Turn on MFA for popular shopping sites like amazon.com, macys.com, bestbuy.com, apple.com, etc. Some smaller shopping sites do not offer MFA, so you should consider removing your account from those sites.

4. Use a 3rd-party password manager to store your passwords, thus you will be able to create separate passwords for each of your accounts. I realize that it’s impossible to remember thousands of passwords, but a password manager makes it seamless. The product that I use (and CDML sells) is called LastPass (https://www.lastpass.com/pricing?pill=business).

Storing your passwords in your Google or Microsoft account is not nearly as secure as using a dedicated zero-knowledge password manager. Not only are these products designed as a secure information vault, but they also help by generating secure passwords for you and monitoring your exposure on the dark web.

5. Make sure that all your Internet-enabled devices have an active anti-virus subscription.

6. Enable biometric logins for every device you use to access email, conduct financial transactions or shop online.

7. Be mindful of password-reset scams. Do not click on links from email messages that urge you to verify or reset your password. Go directly to the service website and see if your password really needs to be reset.

8. Do not expose your personal information online, especially your SSN, EIN or Taxpayer ID.

9. Freezing your credit is a great way to prevent identity thieves from opening new accounts in your name. It's free to freeze and unfreeze your credit. Learn more here: https://support.nerdwallet.com/hc/en-us/articles/360059207631-How-can-I-deal-with-financial-fraud-or-identity-theft

10. Enable SMS alerts from your financial institutions, so that you may be immediately notified of any changes on your account or any unauthorized transactions.

11. Enable credit alerts and credit monitoring. Many financial institutions offer free credit monitoring services to their clients. Additionally, consider using a service like CreditKarma (https://www.creditkarma.com).

Remember, security is an ongoing process. Stay informed, stay vigilant, and don't hesitate to reach out! Our team at CDML Computer Service is here to help you navigate the ever-changing cybersecurity landscape. Contact us to learn more about our security solutions.

Len Kaplan, CEO
https://www.cdml.com/
718-393-5343

How to Deal with Third-Party Data Breaches

CDML Computer Services Ltd.
March 14, 2023

-------------------------------
What’s going on?
-------------------------------
Recently there were multiple high-profile data breaches that exposed a lot of sensitive user data. Some of the most notable of these are:
* December 2022: Uber
* January 2023: Norton Life Lock
* January 2023: MailChimp
* January 2023: T-Mobile
* January 2023: PeopleConnect
* February 2023: Google Fi
* February 2023: Activision
* February 2023: Eye4Fraud
* February 2023: Heritage Provider Network
* March 2023: Chick-fil-A
* March 2023: DC Health Link
* March 2023: AT&T

Below I will try to offer some advice on protecting yourself and your organization from the effects of a third-party data breach.

-------------------------------
Review email, phone, and calendar details.
-------------------------------
As with every data breach, you must review your email, phone, and calendar details to ensure they’re accurate and up to date. If you believe that your email, phone, or calendar information is out-of-date, do a fresh check. Be sure to check your email forwarding rules and access permissions.

There are third-party tools available as annual subscriptions to help you manage email-borne threats such as spam and phishing attacks. You should talk to your IT service provider about signing up for such services to protect your company email. Those subscriptions typically start at $2 to $4/user/month and include additional features and functionality.

-------------------------------
Monitor your data breach exposure status.
-------------------------------
Make sure to review your data breach exposure status regularly to ensure you haven’t overlooked anything. One free and easy way of doing this is by checking each email address in your organization against https://haveibeenpwned.com

You can also talk to your IT service provider about signing up for security monitoring services. Those subscriptions typically start at $5 to $10/user/month and include additional features and functionality.

-------------------------------
Monitor your credit score.
-------------------------------
Credit score updates are important, but it’s also important to check your credit report to make sure it’s accurate. These reports could indicate that malicious actors are using your data. Agencies that allow you to monitor and freeze your credit are:
* Equifax: https://www.equifax.com
* Experian: https://www.experian.com
* TransUnion: https://www.transunion.com

You can use websites like Credit Karma (https://www.creditkarma.com) to sign up for free personal credit monitoring. Businesses can sign up for programs with their banks and/or Dun & Bradstreet to help with credit monitoring.

-------------------------------
Be diligent about protecting your data.
-------------------------------
One of the most important things you can do to minimize the impact of your data being exposed in a data breach is to be prepared for such a possibility. Here are some useful suggestions:
* Make sure that you have safely stored copies of your important documents if identity fraud becomes an issue.
* Be sure that you have up-to-date cybersecurity defenses deployed across your whole IT infrastructure.
* Be sure to have a process in place for managing employee credentials.
* Use password managers and SSO (single sign-on) tools whenever possible.
* Change your account password often.
* Use biometrics for identity verification whenever possible.
* Use data security policies to prevent unauthorized distribution of sensitive data.
* Enable multi-factor authentication for all accounts that can accept it.

-------------------------------
Conclusion
-------------------------------
While there are many ways to reduce the impact of a data breach, having a procedure in place to promptly review your data and take any needed actions is always the best solution. This information can help you identify and remove any potential risks and ensure your data is secure. In the end, employees who are naive or careless about data breaches are more susceptible to being targets of attacks. A team of trained cybersecurity solution providers can help you mitigate the risk of exposure.

WARNING! Windows July update may break printing! Windows new update removed a feature that allowed non-compliant printers and scanners to work on your network. Non-compliant printer’s or scanners can mean that the printer is an older model, and the software is no longer supported by windows. On August 9th windows will be rolling out a security update that will affect all windows server versions forcing any network printer and scanner to be compliant. Please make sure to check all your network printing and scanning devices are windows compliant by that time. The best way to do so is to contact the devices manufacturer. If you have any questions or concerns, feel free to contact us here at CDML.
www.cdml.com

CDML – We Make Sure Your bits don't byte We make it our business to keep your business technology running without a hitch! We know how difficult andexpensive it is for smaller companies to maintain quality IT staff. Partnering with CDML removes that burden. Ourexperienced, trained and certified staff will help your organization with all as...

ZuoRAT Hijacks Asus, Cisco, DrayTek & Netgear SOHO Routers!



This RAT (remote access tool) has been lurking in the dark corners of the internet for almost 2 years and managed to avoid detection by security firms. “How?”, you may ask. Simply by attacking the business sector with the weakest cybersecurity protection – the SOHO market in Europe and North America. Most home and small business users don’t know to patch their routers!

The ZuoRAT was just discovered by the Black Lotus Labs team at Lumen. It turns out that this is quite a nasty and sophisticated piece of malware/spyware that was probably created by a state-sponsored agency. It attacks poorly protected SOHO routers (provided by ISPs or purchased off-the-shelf). The malware embeds itself in the router and examines all data traffic. It also attacks the computers that were supposed to be protected by that router. To sum it up, the victims’ computers and any data that they transmit fall under the control of the cybercriminals who manage ZuoRAT. So far, at least 80 compromised routers have been detected, but this is just the beginning.

If your organization or any of your employees/contractors who access your company data remotely use a basic router without a security subscription you may be at risk. This is a “red alert” level threat. We highly recommend that all network access be secured by such devices as those manufactured by SonicWall. These managed security devices offer different levels of protection, based on user needs.

The technical team at CDML computer services is experienced in rolling out a full range of security solutions, so please feel free to contact us with any questions.



Stay Safe!

Len Kaplan

CDML Computer Services, Ltd.

T: (718) 393-5343

E: [email protected]

W: www.cdml.com





References:

https://news.lumen.com/2022-06-28-Lumen-discovers-new-malware-that-targeted-home-office-routers-for-two-years

https://blog.lumen.com/zuorat-hijacks-soho-routers-to-silently-stalk-networks/

https://www.securityweek.com/soho-routers-north-america-and-europe-targeted-zuorat-malware

https://www.darkreading.com/remote-workforce/zuorat-hijacks-soho-routers-cisco-netgear

https://siliconangle.com/2022/06/29/new-zuorat-malware-targets-soho-routers-europe-north-america/

https://arstechnica.com/information-technology/2022/06/a-wide-range-of-routers-are-under-attack-by-new-unusually-sophisticated-malware/

A wide range of routers are under attack by new, unusually sophisticated malware Router-stalking ZuoRAT is likely the work of a sophisticated nation-state, researchers say.