Prioritizing Email Security in 2019 and Beyond

Prioritizing Email Security in 2019 and Beyond
Email Security

The future of tech has brought about dynamic advancements in how we do business. From CRM databases to enhancing interdepartmental collaboration, automation has made it easy to assume we live in a world where the risks of compromised data are a thing of the past. Unfortunately, despite significant improvements to antivirus software and firewalls, email security is still a vulnerability for many companies.

As we take a look back at the year in review, there’s much to be learned about protecting sensitive information and data through enhanced email security. AE Technology Group has paired down the highlights of email security in 2019. We’re here to make the goal of zero security breaches in 2020 a reality for our business clients.

Pinpointing the Vulnerability

Identifying the weakest link in your cyber security force is key to understanding and preventing data breaches. Many companies assume hackers will target the lowest echelon of employees first, making large businesses particularly vulnerable to compromised security at a departmental level. According to Mimecast’s 2019 State of Email Security Report, this assumption isn’t entirely correct.

While company wide security training is highly important, hackers tend to target members of the executive team in an effort to get their digital hands on the most valuable data and financial information. Mimecast found that a substantial 31% of executive level personnel sent sensitive data to the wrong person. Perhaps unsurprisingly given the aforementioned statistic, 40% of employees regarded their CEO as the weakest link when it came to cyber security and believed their CEO undervalued the impact of email security.

Assessing the Casualties

Now that we’ve all taken a moment to enjoy some humble pie, it’s time to take a look at the costs of a cyber attack. Of the companies survey, 39% reported data loss with financial data loss following close behind at 29%. 28% reported a decrease in their customer base, with 27% reporting job losses as a result of a large scale breach.

It’s easy to imagine that a data breach has a profound and lasting impact on a company’s reputation. Examining the strategies used to extract data and target vulnerabilities is the first step in preventing damage.

(Cyber) Criminal Minds 

As the realm of business technology grows and becomes more sophisticated every year, hackers are also becoming more advanced. According to our friends at Mimecast, 71% of organizations were victim to email-based malicious activity spread by an infected user in the last year alone. The most common types of fraud included wire transfer requests, requests for confidential data, impersonation of third-party vendors, and malicious email attachments.

Despite the substantial increase in cyber attacks as well as the improved strategies behind such threats, only 25% of companies routinely implement cyber security training for their staff. Of those who did train their employees, 62% included group sessions, 45% included interactive videos, and less than half (44%) were given formal online testing, reference tips, and one-on-one sessions. This means that employees are limited in their opportunities to learn, ask questions, and develop their knowledge of cyber security.

Looking to the Future

The statistics behind cyber crime and the consequences of a data breach can be a grim truth to process. Fortunately for proactive business owners, this information is also a guideline for improvement. 

As we move into 2020, the need to prioritize cyber security for large and small businesses has never been greater. Build a foundation of excellence by implementing comprehensive technology training, robust firewall and antivirus software, and state of the art data storage and disaster recovery programs.

Contact our experts today to learn more about equipping your New York business for the future.

State of Email Security for 2019

State of Email Security for 2019
State of Email Security for 2019

Email has been an irreplaceable blessing and a cruel curse to the cybersecurity of business over the years. Email connects the employees as well as the rest of the world. However, because email connects employees to the rest of the world, email has also come to be the largest vulnerability of any organization. In fact, recent studies report that 94% of companies will experience an email-related malicious attack. 

These attacks are generally phishing attacks such as emails requesting money transfers and fraud based attacks such as impersonation of third party vendors. Email is the easiest point of contact for other users, external or internal, to interact with employees and attempt malicious attacks. Reasons for improving email security are endless and companies are looking for solutions to remedy potential vulnerabilities in their systems.

Vulnerabilities are Increasing

The amount of email-based attacks towards a company has consistently seen a rise in recent years. As the world moves further and further along with the use of the internet and emails, this trend isn’t likely to see any change. IT departments are finding it increasingly difficult to protect the company and increase email security. In fact, 61% of businesses believe that they will likely or inevitably suffer an email-borne attack. 

Companies are continuing to promote email safety protocols and educate employees on the proper usage of email. Through these efforts, they hope to minimize security risks and improve vulnerability management. However, while these efforts to increase employee ability to spot cyber attacks have increased, only 25% of companies are providing training to actively increase email security. This training is commonly in the form of group sessions or informative videos. Some companies even go as far as having one on one sessions with employees to ensure that they understand the risk involved in email and that they keep the company safe while using it.

Effects of Attacks on Businesses

Many of these email-borne attacks have had direct effects on the functioning and profits of the organization. Specifically for email-based impersonation attacks, organizations have reported that:

  • 13% lost their position in the market
  • 26% loss of reputation
  • 27% had to cut back on employee numbers
  • 28% lost customers
  • 29% experienced direct financial loss
  • 39% experienced data loss

While 25% reported that they experienced no loss because of an impersonation email attack, this doesn’t mean that they didn’t suffer losses from some other form of attack. The chances are high that they did. 

More to Email Security Than Just Outside Threats

There’s more to email security than simply malicious user attacks. There are also human errors involved. 31% of C-suite level(CFO, CEO, CTO) employees have reported to had sent sensitive data to the wrong person. If this information is incorrectly sent to a fellow employee, the situation may not be so bad. However, if the wrong information is sent outside of the company, there is a chance that the information can be used to harm the company. Roughly 40% of employees at a given organization believes that the CEO undervalues the impact of email security.

C-suite level members of an organization are also the target of most cybercriminals. As C-suite level members often hold valuable information and have authorization to much of the company, cybercriminals highly target these individuals because they can profit the most from them. C-suite level employees, just as much as normal level employees, need to become better educated on email security.

Email security should be one of the many integrated security strategies seriously enforced to protect the company. For more information regarding the state of email security, contact AE Technology Group. We are well-versed in protecting the networks of companies and offer solutions that can prevent cyber disasters and increase vulnerability management including email security.

Microsoft Increases Protection From Junk Email in Office 365

Junk Email

Considering the extent to which many businesses rely on email, it is not surprising that the growing number of phishing and spoofing emails making it into people’s inboxes has become more of a problem than a nuisance.

Considering Microsoft is one of the largest email providers for commercial users, with over 120 million business users subscribing to Office 365, Microsoft saw an opportunity to provide an additional service to its customer base by enhancing email screening for its Office 365 users.

Here is a quick overview of what users need to know about this latest update.    

The Phishing Dilemma

In a recent blog post, Microsoft explained that phishing scammers who try to obtain sensitive information through email falsification has become a rampant problem.

They claim that businesses are particularly vulnerable to these types of attacks as only 9% of companies in the Fortune 500 have strong email authentication policies, which can leave the majority of businesses vulnerable to having their sensitive information hacked by phishers.

Unless a company’s email filter is able to detect scam email, phishing emails will be delivered to the end user potentially deceiving them.

Microsoft’s Solution

Considering the severity of the threat that phishing attacks can pose to commercial users of Office 365, Microsoft decided that it was time to improve Office 365’s email authentication as they determined that the risk of allowing dangerous emails through was greater than the risk of potentially losing legitimate emails to spam filters.

Previously, this anti-spoofing technology was only available to those organizations that had an Office 365 Enterprise E5 subscription or to those who had purchased an Advanced Threat Protection (ATP) add-on for their Office 365 subscription.

However, as of October 2018, Microsoft has extended this protection to a wider range of Office 365 subscribers who can now benefit from more secure email screenings.

Contact us to learn more about this change to Office 365 as well as to find out about additional steps your business can take to protect itself from phishing attacks.

Computer Tip of the Day – Using Yahoo Mail for Business

Yahoo Mail for Business
Yahoo Mail for Business

Do you use Yahoo Mail to stay in touch with your friends, acquaintances, or business contacts? Yahoo Mail, although not as popular as Gmail, is still a great method of communication. Here are some useful tips and tricks for using Yahoo Mail.

Delete All Mail At Once

If you want to organize your inbox after not doing so for a while, you may have hundreds of emails to delete. Unfortunately, with Yahoo Mail, you can only select 50 emails at a time. This can be frustrating, but there is a workaround. Just click on the “search” button at the search tab at the top of the page without typing in any search term into the bar. You can choose to search through all of your emails or through emails in a specific inbox. As long as you leave the search bar blank when you click “search,” all emails will appear, not just 50.

Forward Your Mail

What if people send emails to your Yahoo address but you’d rather read them in another email account? Simple: Just forward your mail to that account. Go to Yahoo Mail’s Settings menu and click on Options. Click on your email address and then click on Forward. You can then type in the email address you’d like your Yahoo Mail to be forwarded to (a verification link will be sent to that address).

Create a Mailing List

If you have a number of contacts you want to add to a specific list so that you can send emails to all of them at once, just go to Contacts and click on the Assign to Lists option. Of course, you have to create the list first, which you can do in the Contacts menu. This is useful when you want to send something to several employees at once. 

For more computer and IT help, contact us today. 

Computer Tip of the Day: Managing Your Emails

Computer Tip of the Day: Managing Your Emails

computer tip of the day

In the business world, one of the keys to success is knowing how to be organized. Whether you’re managing important files on your desktop, or are browsing through your web applications, always keep things organized. However, the same applies to your emails as well.

Sometimes, you receive important messages from your coworkers, while other times you’re bombarded with junk mail. What are some tips for managing your emails? Here are a few things to keep in mind for today’s computer tip.

One way to better manage your emails, is by setting up a spam filter. It catches all of your junk mail, which helps to separate the important emails, from the ones that are useless. However, you should also make sure to add any important email addresses to your “safe senders” list. While the filter is useful, it’s also known for catching important messages or ones that aren’t in your contact list. Adding your contacts to the “safe senders” list, prevents these emails from being regarded as junk.

Also, it’s important you clean out your inbox on a regular basis, discarding messages that aren’t needed. The longer you wait, the more your messages pile up, and it eventually becomes a jumble of businesses emails and unimportant junk. If nothing else, try cleaning out your inbox on a weekly basis. This helps to prevent things from getting too overwhelming.

For more information about the importance of managing your emails, contact us today at AE Technology Group. We look forward to hearing from you.