Click here to view our Product Storefront

Small Business owners - are you using free Hotmail or Gmail accounts for your business email?

Here are the legal reasons to switch

Why Microsoft 365 email is safer for your business than a free Gmail or Hotmail account

"Isn't email just email?"
Not quite. Free personal email accounts weren't built for business — and that gap becomes a real legal and financial risk under GDPR.

1. No formal agreement protecting your data

With Microsoft 365, Microsoft signs a legal agreement (a Data Processing Agreement) confirming they're handling your data as required under GDPR. Free Gmail and Hotmail accounts don't come with this — there's no contract, no accountability, nothing to show a regulator if something goes wrong.

2. You can't prove your security is "good enough"

GDPR doesn't just expect good security — it expects you to be able to prove it. With 365, we can enforce centrally managed multi-factor authentication and access controls across your whole team. With a free account, security settings are down to whichever employee owns that inbox — there's no way for the business to prove, or even guarantee, anything is switched on.

3. If something goes wrong, you have 72 hours to report it

Data breaches must be reported to the ICO within 72 hours. That means you need to know immediately if an account's been compromised. Microsoft 365 gives us the visibility to check that. A free personal account gives us nothing — we'd be relying on the individual to notice and tell us.

4. Customer data requests become manageable

If a customer ever asks "what personal data do you hold on me," we need to search mailboxes properly and demonstrate a proper process. That's straightforward on 365. On free accounts, it's essentially impossible to do professionally.

5. Control when someone leaves the business

With 365, when an employee leaves, we can instantly lock their mailbox and manage the handover. A free personal account belongs to that individual — not the business — so control walks out the door with them.

6. Retention and deletion, done properly

GDPR expects you to delete data you no longer need. 365 lets us set that up once, automatically, across the business. Free accounts rely on manual habits, which rarely happen consistently.

The bottom line

It's not that Gmail or Hotmail are "insecure" — they're just not built as a business tool. Microsoft 365 gives your business the contract, the controls, and the audit trail needed to actually meet your GDPR obligations, not just hope you're covered.

****** SPECIAL OFFER ******

We have a current offer to small businesses - for a £99 one-off payment, this will get you :

A two-year subscription to a .co.uk of your choice
Free creation of Microsoft 365 tenancy
Free creation of mailboxes and email addresses
One month free 1 x M365 Business Basic
Free maintenance of M365 tenancy for one year. This includes email maintenance, e.g., new users.
Free mailbox will incur a monthly fee after the first free month

Contact peter@prpcs.co.uk for more information.

This offer can be upgraded to Microsoft 365 Business Standard for a one-off fee of £107. All terms & conditions of the above offer apply.

Terms & Conditions

M365 licence is based on an annual Microsoft licence paid monthly
Only 1 mailbox free for one month per purchase. Additional mailboxes charged at current rate.
Domain name offer covers standard, available .co.uk domains only; it does not cover premium domains being resold at a premium price

Patch Management Service

We are now offering a patch management service for PC, laptops and Macs. Patch management is a critical defence against ransomware because cybercriminals actively exploit known software vulnerabilities to gain initial access to systems. By regularly applying vendor-issued security patches and updates, you close these security gaps, significantly reducing their attack surface and making it much harder for attackers to infiltrate your devices.

Essentially, in layman’s terms, your copy of Windows (or macOS) and all applications, including Office, Adobe, VLC Media Player, or any other software you use, require regular security patching. We can automate this process for you for a small fee per device.

Pricing :

1-4 Devices £2.50 per device per month

5-9 Devices £2.00 per device per month

10+ Devices £1.00 per device per month

How it works: We will install a small software agent on your device and will manage the patching remotely and discreetly. You will also receive regular reporting, including an initial device report and a regularly updated list.

If you are interested in this service, please let me know - It’s a small price to pay to ensure your devices remain compliant and secure.

Multi-layered protection: GravityZone uses machine learning, behavioral analysis, and heuristic scanning to detect and block threats, including zero-day attacks

Endpoint Detection and Response (EDR): Offers deep visibility into endpoint activity and advanced threat hunting capabilities.

Network threat prevention: Includes firewall, intrusion detection, and web filtering

Lightweight agent: Runs efficiently in the background without slowing down systems, which is a common complaint with McAfee and Norton

Should you backup your Cloud Data?

Today’s enterprises are increasingly reliant on cloud services, such as Microsoft 365 & Google Workspace, for efficient collaboration and productivity. But the looming question remains — should you back up your Microsoft 365 or Google data?

There are many opinions — as well as misconceptions — on this topic, but in this document, I will help you separate facts from fiction so you can make an informed decision on whether to protect this data. I’ll also provide some insight into how to protect Microsoft 365 or Google data with DropSuite Cloud Backup

Importance of Cloud Data Backup

Contrary to popular belief, your data in the cloud isn’t immune to loss. It’s susceptible to the same risks that your on-premises data faces. This makes backing up your cloud data not just an afterthought, but a business-critical necessity. Microsoft has also released their own Microsoft 365 backup solution available directly so this proves it is a priority.

Unmasking the Truth About Cloud Backup

So, why is it so important? Doesn’t Microsoft & Google already protect my cloud data in a standard license? These companies provide many great compliance tools to ensure your data is retained over a set period of time, they also ensure infrastructure uptime for service availability. However, it’s vital to recognize the distinction between these features and a comprehensive backup solution. The responsibility of protecting your data ultimately lies in your hands, and not entirely on Microsoft or Google.

Providers Responsibility vs. Your Responsibility

Microsoft has provided a Shared Responsibility Model to help their customers understand where Microsoft’s responsibility ends and theirs begins. The model clearly displays that the responsibility of protecting your data ultimately lies in your hands, and not in Microsoft’s. So, what does Microsoft provide? Microsoft & Google are responsible for maintaining the infrastructure of its services, ensuring it’s accessible and protected from service-side issues.

7 Reasons Why Backing Up Cloud Data Is Critical

• Accidental deletion: accidental deletion, modification or overwrites of data can be catastrophic. With a backup solution, you can quickly recover lost data and maintain business continuity.

• Retention policy gaps and confusion: Your providers retention policies can be complex to understand and implement correctly, leaving your data at risk of loss after the retention period expires.

• Internal security threats: the risk of internal threats, like disgruntled employees deleting essential data, is real and can’t be ignored. A backup solution provides a safeguard in these situations.

• External security threats: malware and ransomware can do significant damage to your organization’s data and reputation. Regular backups ensure an uninfected copy of your data is always available for recovery.

• Legal and compliance requirements: a robust backup solution can keep your company out of legal trouble by allowing you to retrieve data as required for legal and compliance purposes.

• Managing hybrid email deployments and migrations: the right backup solution should be able to handle hybrid email deployments, making the source location irrelevant.

Frequency of Data Loss Incidents

Data loss incidents are far too common. In a study by ESG, 53% of IT professionals admitted their organizations had experienced data loss or corruption in their SaaS applications. It’s worth noting that less than 25% of organizations are able to recover 100% of their Microsoft 365 data during a data loss incident, making the need for backup all the more pertinent.

Conclusion

Backing up Microsoft 365 or Google data is a smart business decision. It’s clear that there are many misconceptions, but it’s also evident that there are many vulnerabilities and data loss risks which can only be truly mitigated by having a backup. Moreover, the Shared Responsibility Model states that ultimately, it’s your data — you control it — and it is your responsibility to protect it. Make sure you protect your data with a comprehensive backup solution that provides the data security, data recovery and data freedom you need.

Qilin Ransomware Attack – What You Need to Know

The Latest NHS Data Breach and What It Means for You

In June 2024, another major cyberattack hit the headlines—this time targeting Synnovis, an NHS provider. The attack, carried out by the Russia-linked hacker group Qilin, resulted in the theft of sensitive patient data and the deployment of ransomware across Synnovis' IT systems. The impact? Thousands of cancelled operations and tests across London hospitals, making it one of the most disruptive ransomware incidents to ever hit the UK healthcare sector.

What Exactly Happened?

Ransomware is a type of malware that locks up files using encryption, preventing access unless a ransom is paid for a decryption key. In this case, Qilin reportedly demanded a staggering £40 million to restore access to the compromised data.

These types of attacks typically follow a double extortion model, where hackers threaten to release stolen data if the ransom isn’t paid. While Qilin claims the attack was politically motivated rather than financially driven, the reality is that NHS patient data has already surfaced on the Dark Web—suggesting that no ransom was paid.

Given the scale of the disruption and the sheer volume of leaked data, this breach is already being called one of the worst cyberattacks to hit the UK.

What Data Was Stolen?

The hackers made off with a 400GB trove of sensitive information, reportedly including:

Patient names
Dates of birth
NHS numbers
Blood test details

However, the full extent of the breach is still under investigation, and individuals affected may not yet know what personal details have been exposed.

What’s Next?

If your personal medical data is floating around on the Dark Web, it’s understandable to be concerned. The real risk now is that cybercriminals will use this stolen information in targeted scams, known as spear-phishing attacks.

Scammers could, for example, send emails pretending to be from the NHS, using stolen details like your name and NHS number to make their messages look legitimate. These emails might then direct you to fake NHS websites designed to trick you into providing even more sensitive information—such as financial details.

How to Protect Yourself

Be skeptical of unsolicited emails, texts, or calls, even if they seem to reference real NHS details.
Avoid clicking on links or downloading attachments from unexpected messages.
If in doubt, contact the NHS directly using official phone numbers or emails found on your NHS paperwork or their website.
Stay informed—we (and others) will keep you updated on any scams linked to this breach.

Cyber threats are evolving, and staying aware is key to protecting yourself. If you suspect any suspicious activity related to this attack, report it immediately to the appropriate authorities.

The New Age of Identity Theft in 2025
How AI is Changing the Game – and What You Can Do to Stay Safe

Protecting your identity used to be as simple as shredding bank statements and keeping your National Insurance number private. But in 2025, those old-school methods aren’t enough. Identity thieves have upped their game, using artificial intelligence to create deepfake voices, craft highly targeted phishing scams, and gather personal data with alarming accuracy. Even the most tech-savvy individuals—and their loved ones—can fall victim to these sophisticated attacks.

A stolen digital identity can wreak havoc on your life. Hackers can drain your bank accounts, take out loans in your name, and leave you dealing with the fallout for months or even years. That’s why understanding modern threats and taking proactive steps to protect yourself is more critical than ever.

The New Reality of Identity Theft in the AI Era

Identity theft isn’t what it used to be. Thanks to AI, cybercriminals can now exploit vulnerabilities faster and more effectively than ever before.

AI-Powered Voice Cloning: With just a short audio clip—maybe from a social media video or voicemail—fraudsters can create eerily accurate voice replicas. These can be used to deceive family members, scam businesses, or bypass security measures that rely on voice authentication.
Cross-Platform Identity Harvesting: Cybercriminals piece together data from past breaches, public records, and social media to build detailed profiles of potential victims. This allows them to launch incredibly convincing scams.
Healthcare Data Breaches: Medical records, insurance details, and prescription information are being targeted at an unprecedented rate. Criminals use this data for insurance fraud, illicit drug purchases, or even blackmail.
Synthetic Identity Fraud: This is one of the most concerning developments. Hackers combine real personal details (like a National Insurance number) with fake information to create entirely new identities. These identities can be used to open credit lines and commit fraud for years before detection, making resolution incredibly difficult.

How to Protect Yourself

With identity theft evolving, you need a multi-layered defense strategy. Here are the best ways to stay ahead:

Use Continuous Monitoring: Credit monitoring alone isn’t enough anymore. Services like Bitdefender’s Digital Identity Protection offer real-time alerts when your personal data appears in unexpected places.
Implement Strong Authentication: Biometrics and hardware security keys provide far better protection than passwords alone. If a service doesn’t support these methods, use a password manager to store unique, complex passwords.
Control Your Digital Footprint: Data brokers collect and sell personal details without your knowledge. Privacy tools can help you find and remove this data to reduce exposure.
Secure Your Home Network: Every connected device—laptops, smart speakers, security cameras—presents a potential entry point for cybercriminals. A robust security solution can protect all your devices from threats.
Use AI-Powered Fraud Detection: Since cybercriminals are using AI to target victims, the best defense is fighting AI with AI. Bitdefender’s security systems detect suspicious activity patterns, alerting you before major damage is done.

The Real-World Impact of Identity Theft

According to Cifas, identity theft cases continue to rise each year in the UK, affecting thousands of individuals. Victims spend hundreds of hours dealing with fraudulent transactions, making calls, and filing paperwork. The stress and violation often linger long after the financial issues are resolved.

Rather than reacting after the fact, the key is proactive protection. Bitdefender offers a suite of identity protection tools that make safeguarding your personal data easier—no industrial shredders or endless password resets required. With features like dark web monitoring and AI-driven fraud prevention, you can stay ahead of cybercriminals and keep your digital identity secure.

Explore Bitdefender’s identity protection solutions today and take control of your online security before it’s too late.

To Whom It May Concern

26 June 2023

Dear Valued Partner,

In our previous letters, Hikvision committed to providing you with the latest updates on the conversations the company is having across the UK and Ireland to clarify misconceptions about our products and operations.

We wanted to share with you that today (Monday 26 June 2023 at 8PM), BBC Panorama intends to broadcast a programme which purports to investigate Chinese companies operating in the surveillance industry. We have been engaging with the producers of this programme, and have grave concerns regarding the integrity and content of the broadcast.

The BBC will broadcast a ‘hack’ of a six-year-old Hikvision camera to exploit a vulnerability that was identified in 2017, but was patched and publicly disclosed less than one week after it was brought to the company’s attention. To claim that this stunt has uncovered a security breach or an intentional backdoor in June 2023 is farcical. It sensationalises a problem that was already fixed to universally recognised CVE standards. Furthermore, this test has not been conducted on a typical network, but rather an unsecured one. This test simply cannot be characterised as representative of ‘the cameras lining our streets today’, which would be much better defended than the camera in this so-called ‘test’ the BBC have run.

Hikvision was not given any information in advance about the specifications of the hack to be carried out.

We repeatedly asked the BBC for more information about its planned ‘hack’, but were ignored until we asked our lawyers to intervene. Indeed the BBC repeatedly refused to clarify the following: which camera model and serial number would be used; what version of firmware was installed; whether the camera included was UK firmware; whether the camera would be tested on a closed circuit or connected to a network; how any network would be secured; if the hack would include port forwarding; if the camera was still being sold in the UK; and, how the camera was obtained.

We now know that the camera was in fact supplied by, and compromised with the collaboration of IPVM, an organisation with a vendetta against Hikvision.

Hikvision’s conduct with regards to this vulnerability has followed all internationally accepted standards of best practice. When made aware of the vulnerability in March 2017, Hikvision patched it in less than one week. The vulnerability – and Hikvision’s patch – were subject to further scrutiny in the US with the then-Chairman of the US House of Representatives Small Business Committee noting in a public hearing that Hikvision’s work with the US Department of Homeland Security on this vulnerability meant that any continuing issues resulting from unpatched equipment would lie with ‘small businesses that do not engage with the government or the DHS regularly’.

Going further, the Deputy Assistant Secretary for the US Department of Homeland Security Office of Cybersecurity and Communications said they ‘worked with the company’ to resolve the problem and that ‘standard practice was followed’.

There is no reason to believe that circumstances would be any different in the UK. After all, the vast majority of public sector organisations have processes in place to respond to vulnerabilities and regularly update their firmware. It is virtually certain that every public sector organisation in the UK has patched its cameras since 2017 and therefore no reason to assume there is any risk today.

The BBC had all the information above ahead of broadcast. The BBC has been misled by IPVM and will now, in turn, mislead others.

Hikvision knows that you, as surveillance industry professionals, will understand this test simply cannot be taken seriously. It is not representative of the security of Hikvision cameras on the market today. However, the general public may not understand.

As we seek redress for this egregious and irresponsible broadcast, we continue to reserve all of our rights, including legal action. Please accept my apologies for any inquiries you receive from your customers or the public at this stage. We are working tirelessly to dispel these untruths with both the media and government, and if you need any help whatsoever in reassuring your own stakeholders, please do not hesitate to contact me, and we will render any and all assistance that we can.

Your support and continued business at this time is deeply appreciated.

Yours faithfully,

Justin Hollis

Marketing Director – Hikvision UK & Ireland

Microsoft disarms push notification bombers with number matching in Authenticator

Jeff Burt - The Register

Microsoft is hoping to curb a growing threat to multi-factor authentication (MFA) by enforcing a number-matching step for those using Microsoft Authenticator push notifications when signing into services.

Starting this week, Redmond is putting some muscle behind a number-matching feature that it began talking about last year. It said there were rising numbers of cyberattacks using MFA fatigue, also known as MFA push spamming and push bombing.

Two-factor authentication (2FA) and MFA are strategies for verifying users trying to log on to websites, accounts or services, and are part of the larger drive for zero-trust architectures, which take the position that anything or anyone trying to climb onto a network can't be trusted or given access until verified.

MFA can come in the form of a one-time code you enter, or an app on a linked device that pops up a notification asking if a login attempt is legit. If someone is trying to login as you, you can decline access. If it's you trying to get in, you can approve the login.

Attackers are finding ways around MFA protections, such as through phishing, and, in this case, MFA fatigue, a social engineering effort in which attackers use stolen credentials to try to sign into a protected account quickly and repeatedly, overwhelming potential victims with push notifications asking for login approval.

Initially the targeted individual will likely hit the prompt to indicate it isn't them trying to sign in, but may be worn down in the spamming onslaught and eventually accept the login to stop the harassment. Essentially, MFA is supposed to thwart those using stolen login credentials, but in reality, the protection measure can be bypassed by exploiting the human element: spamming users with notifications on their devices until they assume it's a bug and hit accept. At that point, the miscreant is in your account.

It's a threat Microsoft, among other vendors and security pros, has been tracking for a couple of years. Redmond saw almost 41,000 Azure Active Directory Protection sessions with multiple failed MFA attempts in August 2022, compared with 32,442 a year earlier, and noted that such attacks had "become more prevalent."

MFA fatigue also is one of any number of reasons Microsoft is leaning on in an industry push – and that of others, including Google and Apple – to do away with passwords entirely as a verification tool.

There were some high-profile attacks last year that featured MFA fatigue schemes. The Yanluowang ransomware gang used it in an strike against Cisco while the Lapsus$ group leaked 37GB of source code stolen from Microsoft after compromising an employee via MFA fatigue. Uber was also hit by Lapsus$ via such an attack, it's reported.

In October 2022, Microsoft introduced number matching as an option, as well as other security features like location and application context, in Microsoft Authenticator. Now, number matching is automatically being enabled for all push notifications in Authenticator.

"As relevant services deploy, users worldwide who are enabled for Authenticator push notifications will begin to see number matching in their approval requests," the vendor wrote in an Azure support note this week. "Users can be enabled for Authenticator push notifications either in the Authentication methods policy or the legacy multifactor authentication policy" as long as notifications through the mobile app is enabled."

The note also said that number matching doesn't support push notifications for Apple Watch or Android wearable devices. "Wearable device users need to use their phone to approve notifications when number matching is enabled," Microsoft wrote.

When it's enforced, Authenticator users responding to a MFA push notification will be presented with another number that they'll need to type into whatever app is being logged into to complete the process. Authenticator users will not be able to opt out of the feature. It effectively adds a one-time code element to the push notification approach.

Some services will begin deploying the changes starting this week and "users will start to see number match in approval requests. As services deploy, some may see number match while others don't. To ensure consistent behavior for all users, we highly recommend you enable number match for Authenticator push notifications in advance."

The number matching also will work in other scenarios with Authenticator, including self-service password reset (SSPR), AD FS adapters (on support Windows Server versions), and combined MFA and SSPR registration when setting up Authenticator.

For Windows users who don't use Authenticator, their default sign-in method won't change, according to Redmond. ®

Does Copying & Pasting Message “Bypass” Facebook’s Algorithm?

By Craig Haley
https://www.thatsnonsense.com/does-copying-pasting-message-bypass-facebooks-algorithm-fact-check/

A message on Facebook claims that because of a recent “new algorithm”, Facebook users are limited to seeing the same 25 or 26 friends appear on their newsfeed. The message goes on to urge readers to copy the same message to their own timeline in order to “bypass” that algorithim and see more users on their newsfeed.

FALSE

The message has been spreading since 2018. Examples of it can be seen below –

Hello! Thanks for the tips to bypass FB…it WORKS!! I have a whole new news feed. I’m seeing posts from people I haven’t seen in years. Here’s how to bypass the system FB now has in place that limits posts on your news feed. Their new algorithm chooses the same few people – about 25 – who will read your posts. Therefore, Hold your finger down anywhere in this post and “copy” will pop up. Click “copy”. Then go your page, start a new post and put your finger anywhere in the blank field. “Paste” will pop up and click paste. This will bypass the system. Hi new and old friends! Missed you!

Collected November 2018

Fixed my blocked posts I wondered where everybody had been! This is good to know: It’s ridiculous to have 516 friends and only 25 are allowed to see my post. I ignored this post earlier, because I didn’t think it worked. It WORKS!! I have a whole new news feed. I’m seeing posts from people I haven’t seen in years. Here’s how to bypass the system FB now has in place that limits posts on your news feed. Their new algorithm chooses the same few people – about 25 – who will read your posts. Therefore, Hold your finger down anywhere in this post and “copy” will pop up. Click “copy”. Then go your page, start a new post and put your finger anywhere in the blank field. “Paste” will pop up and click paste. This will bypass the system.

Collected October 2019

Thanks for the tip to circumvent Facebook… Works!! I have a whole new profile. I see posts from people I didn’t see anymore. Facebook’s new algorithm picks the same people – around 25-who will see your posts. Hold your finger anywhere in this post and click ” copy “. Go to your page where it says ” what you’re thinking “. Tap your finger anywhere in the empty field. Click paste. This is going to circumvent the system. Hello new and old friends! Drop a single hello, thanks

Collected June 2020

Thanks for the tip to circumvent Facebook…OO5251839 Works!! I have a whole new profile. I see posts from people I didn’t see anymore. Facebook’s new algorithm picks the same people – around 25-who will see your posts. Hold your finger anywhere in this post and click ” copy “. Go to your page where it says ” what’s on your mind”. Tap your finger anywhere in the empty field. Click paste. This is going to circumvent the system. Hello new and old friends!Hello Drop a single hello, thanks! PLEASE SAY HELLO IF YOU SEE THIS. Hello to all!

Collected May 2021

To be clear, the above messages are entirely nonsense, and just a spin-off from similar, older messages that were also inaccurate.

Facebook’s newsfeed is designed to show you more content from friends you engage with regularly, and less content from friends you engage with rarely. That’s been the case since the early beginnings of the social media platform. This doesn’t mean you’re being “limited” to the number of friends you can see, instead it means that Facebook places a higher priority on certain types of friends that the platform assumes you’ll be more interested in.

Consequently, there is no “new algorithm” from Facebook, much less an algorithm to “bypass”. You’re not limited to 25 or 26 friends (this number appears entirely arbitrary).

And even if Facebook did introduce some friend-limiting new algorithm into the newsfeed (they haven’t) you wouldn’t be able to somehow bypass it simply by copying some random warning message.

The roots of this hoax started in 2017 when the same claim (about being limited to 25/26 friends) began to circulate. Those earlier hoaxes differed slightly by asking readers to comment with an emoji or type “hi”. Those messages were based on the hazy reasoning that because Facebook looks for engagement between friends when deciding who appears on whose newsfeed, typing “hi” as a comment should suffice. The problem, however, is that Facebook looks for meaningful engagement, meaning such posts were unlikely to have any significant effect.

However, by 2018, the messages had evolved (to the examples above) and were simply claiming that you could “bypass” a “new algorithm” simply by copying and pasting a message (the request to type a comment now omitted.)

That is, of course, entirely nonsense. There is no special attribute or quality that any of the messages above possess that would allow them to bypass any type of algorithm that will result in more people appearing on a person’s newsfeed.

As we always say, if you want a particular friend (or friends) to appear in your newsfeed more often, you should engage with them on Facebook, which could mean speaking through Messenger, commenting, liking or sharing each other’s posts or tagging each other in photo or video.

Users who speak with lots of friends will see more friends appear on their newsfeed. Users who interact with only a small number of friends on a regular basis will see fewer friends on their newsfeed. It really is that simple

Twitter Now Charging For SMS Two Factor Authentication

By Craig Haley
https://www.thatsnonsense.com/twitter-now-charging-for-sms-two-factor-authentication-in-the-news/
February 18, 2023

Twitter users be aware – unless you’re coughing up the monthly fee for the Twitter Blue subscription service, you will no longer be able to use SMS-based two factor authentication to secure your online account.

We’ve long been recommending that our readers always enable two-factor-authentication (2FA) for all their important online accounts. It’s a security measure that adds another layer of security to your account by requiring more than just the password to gain access. In most cases you also need a separate code or PIN that is sent to (or generated by) a device that you own, such as your phone.

This means that even if crooks get a hold of your password (either by malware, data breaches, social manipulation or phishing attacks) they still can’t access your account. (More on two factor authentication here.)

So it’s perhaps a little perplexing that Twitter has announced this week that it is scaling back its two-factor-authentication features by only allowing its paying subscribers access to the most popular 2FA method – SMS 2FA. SMS-based 2FA means having a text message sent to your phone with a PIN, which needs to be entered along with the account password to login.

Twitter vaguely claimed in a blog post on its site that the method was being exploited by “bad actors”.

Twitter users using SMS 2FA will have until March 20th of this year to switch to a different 2FA method (or, of course, become a paying “Twitter Blue” subscriber) else face the 2FA feature of their account being automatically disabled altogether.

Twitter users are being asked to remove SMS 2FA from their accounts

That’s not a particularly great move, of course. It’s estimated that around 75% of Twitter users with 2FA enabled are using the SMS option. While many will choose to change their 2FA approach, the bottom line is that on March 20th Twitter will be rendering a hefty number of accounts on their own platform less secure.

So what are the other 2FA options? Well you can use a physical security key, which is a far less popular option, or you can install an authentication app on your mobile device. An authentication app generates a code for you that you can type in when logging in, instead of a code being sent using SMS.

We strongly recommend securing your account with 2FA. It really is one of the most effective security measures you can take. And unless you’re paying Twitter a monthly subscription, this will now likely mean using an authentication app.

Protect your email with DropSuite

Are you one of thousands of people who have a false sense of security that your cloud data is safe and sound? Many people think that if they use a platform like Microsoft 365 or Gmail/GoogleDrive that it doubles as a data backup.

Cloud storage and cloud backup are two very different things. When you’re syncing with a cloud platform like OneDrive, files are “live,” meaning they can be edited or deleted.

Cloud backup, on the other hand, takes a snapshot of all your files and securely stores them by backup date. This allows you to restore files as they were on a specific moment in time.

51% of companies have reported they’ve lost data in the cloud. Data loss can mean thousands of dollars in losses and lost productivity trying to recreate data that you didn’t save. In the case of cloud data, companies can feel even more of an impact these days because most have migrated a majority of their data to the cloud. It’s vital that you don’t leave cloud data out of your company’s backup and recovery strategy, or you cloud be left with a major loss that could impact your business for years to come.

Cloud Providers Recommend You Back Up Data

Cloud providers aren’t impervious to outages or server crashes, which means you could be without your data if they’re having a problem. Even large cloud application providers recommend that users back up data that is stored in their platforms. For example, the Microsoft Services Agreement states, “In the event of an outage, you may not be able to retrieve Your Content or Data that you’ve stored. We recommend that you regularly backup Your Content and Data that you store on the Services or store using Third-Party Apps and Services.”

DropSuite is a great product that backs up your entire M365, Google Workspace, Exchange Online or Gmail accounts for a small cost per month.

Email me for a quote or more information

Microsoft announces global price rise

Consistent global pricing for the Microsoft Cloud

05/01/2023 | Microsoft Reporter

Today, we are announcing that Microsoft is taking several steps to align the pricing of our Microsoft Cloud products globally, meaning customers will have consistent pricing reflecting the exchange rate of the local currency to the US dollar (USD). Starting April 1, 2023, pricing for Microsoft Cloud products will be adjusted in the following currencies:

GBP: +9%
DKK, EUR and NOK: +11%
SEK: +15%

In the future, Microsoft will assess pricing in local currency as part of a regular twice a year cadence, taking into consideration currency fluctuations relative to the USD. This will provide increased transparency and predictability for customers globally and move to a pricing model that is most common in our industry.

The Microsoft Cloud continues to be priced competitively, and Microsoft remains deeply committed to the success of its customers and partners. We will continue to invest to enable customers to innovate, consolidate and eliminate operating costs, optimize business performance and efficiency and provide the foundation for a strong security strategy that customers around the world have come to rely on.

Common Sense will help avoid a cyber disaster
Common sense may actually not be so common after all, especially in the digital world, where millions of consumers get conned every day. (click arrow to continue reading)

Phishing for users’ personal information via email, texts, and phone calls has become part of our daily lives. However, applying sound judgment online stops fraudsters from stealing your data and money.

In cybersecurity, common sense dictates that you should:

Stop and think before clicking on links or attachments you receive at random - if you don't know the person who sent it - delete it
Anything that sounds too good to be true probably is, including job offers, investment opportunities, and giveaways that sneak into your social media feed, Inbox or other online platforms
Stick to what you know and don’t visit unfamiliar websites
Don’t click on pop-up warnings that appear on your screen, no matter what critical security issue they tell you about
If the email looks suspicious - check the email header and body for badly written names, domains and grammar errors
Ignore emails that attempt to panic you and urge you to do particular tasks such as sending money immediately, log in to your account or give out other sensitive data
Don't ever provide confidential information to people who contact you out of the blue via email, text or phone calls. Ask yourself: why am I being asked to give out this information? Do I know this person?
A government agency, bank, police department or legitimate organization will NEVER contact you to ask for sensitive data such as your credit card number, passwords or PIN number

Using common sense can save you in a lot of trouble online. Be aware - Be cautious and be sensible!

PR PC Support - Protect

'Protect' from PR PC Support is made up of 3 products and is designed to give your Microsoft 365 subscription the ultimate protection from malicious attacks, ransomware and phishing attacks.
If you don’t backup your Microsoft cloud data your business could be at risk of massive exposure for the simple reason that Microsoft does not provide the ability to recover data that has been accidentally or maliciously deleted or corrupted.

The recycle bin is fine for short-term and item-level recovery, but doesn’t provide the ability to perform a point-in-time recovery of lost or corrupt data.

As data storage services, SharePoint and OneDrive are not only prone to sync errors, and accidental or malicious data loss, they’re also at risk from malware and ransomware such as CryptoLocker.

Get in touch for more information or a quote.

Page updated

Google Sites

Report abuse