Cyber attacks are getting bigger and smarter. Are you vulnerable?

Have you ever tried to buy tickets for a huge event and found that the seller’s website has collapsed under the weight of thousands of people all trying to do the same thing at the same time?

The ticket site falls over – usually temporarily – because the server is overloaded with traffic it doesn’t have the capacity for.

Criminal Distributed Denial of Service attacks – DDoS, for short – exploit the same principle.

When a DDoS attack targets a business, it floods it with internet traffic in an attempt to overwhelm the system and force it to fail.

This results in the business and its customers being unable to access services. That may trigger a temporary failure, or it could be more serious. Last year, the average DDoS attack lasted 50 minutes.

AI is making phishing scams more dangerous

AI chatbots have taken the world by storm in recent months. We’ve been having fun asking ChatGPT questions, trying to find out how much of our jobs it can do, and even getting it to tell us jokes.

But while lots of people have been having fun, cyber criminals have been powering ahead and finding ways to use AI for more sinister purposes.

They’ve worked out that AI can make their phishing scams harder to detect – and that makes them more successful.

Our advice has always been to be cautious with emails. Read them carefully. Look out for spelling mistakes and grammatical errors. Make sure it’s the real deal before clicking any links.

And that’s still excellent advice.

3 ways to protect your business email

Most cyber attacks start with an email.

So let’s show you three things you can do right now to make it harder for criminals to launch an email attack on your business.

Is your security focusing on the right things?

To protect your home from an intruder you make sure your doors and windows are all locked and secured. You might go further: build a fence around the perimeter, perhaps even get an angry-looking dog to stand guard.

But there’s no point going to all that effort if someone’s already broken in and set up camp in the basement.

Yet that’s the security policy of thousands of big businesses trying to protect their data from cyber criminals.

Getting to Grips with Email Security

Owners of small and medium-sized businesses often make the mistake of thinking that they aren’t on the criminals’ radar. But more than 40% of cyber attacks are aimed at small businesses – and email is usually the criminals’ way in.
Our new guide, ‘Getting to Grips with Email Security’, reveals why you might be vulnerable, what you need to look out for and what you can do to protect yourself.

Super-deduction ends soon

Did you know there’s a temporary tax relief called Super-deduction that limited companies in the UK can benefit from?

(BUT it runs out at the end of next month… that’s just 51 days from today)

When limited companies buy certain new equipment (including computers) they can claim 130% capital allowance.

So if you spend £1,000 on computers, it will reduce your corporation tax bill as if you had spent £1,300.

Young employees have different attitudes to cyber crime

If you employ anyone aged between 16 and 19, you need to pay special attention to the cyber security training you’re giving your team.

A new study has revealed that a host of worrying online behaviour has become almost normalised among many young people. And much of this activity is illegal.

We’re not talking serious cyber crime such as ransomware attacks or stealing data.

But one in three 16 to 19-year-olds have admitted to digital piracy; and a quarter have tracked or trolled someone online.

Most of these behaviours may not directly affect your business. But some are so commonplace that too many young people view them as a part of everyday life.

Take action to avoid a devious new phishing scam

Another day, another scam. And this is a sneaky one.

Cyber criminals are getting smarter. This recent malware threat is unusually smart. It impersonates a highly trusted brand name to get a foot in the door.

Targets receive a convincing looking email that appears to come from a widely used e-signature platform.

Attached to the email is a blank image that’s loaded with empty svg files, which are carefully encoded inside an HTML file attachment (stay with us here).

In short, it’s very clever and it’s tricking its way past a lot of security software.

When did you last have a health check?

How’s the January health kick going?

Lots of us take our health seriously – once a year, anyway – and it’s good to spend time thinking about whether you’ve been looking after yourself (and better still, doing something about it).

Your doctor would probably like to see you once a year for a health check, just to pick up any small problems and stop them getting worse.

It’s exactly the same principle with your technology.

So why not book in for an IT check-up, to make sure everything’s in great shape for the journey ahead?

You do this for yourself, you do it for your car, and it’s a good plan to think the same way about your workplace tech. Because it might have to work pretty hard in the year to come.

Getting everything checked out now will pay dividends later.

Are your younger employees experiencing ‘tech shame’?

It seems that Gen Z and even some Millennial employees are less tech savvy than many employers might expect. It’s an assumption that’s leading to a sense of ‘tech shame’.

Younger workers may have grown up using Snapchat, TikTok and Minecraft, but they’re not always equipped with the skills they need to adapt to the workplace.

A recent study has found that one in five employees aged 18 to 29 feel judged when they encounter technical issues at work. That’s compared to just one in 25 employees aged 40 or over.

The solution may lie in providing better training, not just for younger colleagues and first-jobbers, but for the whole team. Some Gen Z workers may have started their careers during the pandemic. That means they will never have experienced anything other than a digital working environment. Especially if they work remotely or in a hybrid role.