FREE LIVE WEBINAR  •  Sept 23, 1:00 PM EDT   You Don’t Have to Be an AI Expert: 5 Client Conversations MSPs Can Lead
d :
h :
m :
s

FREE LIVE WEBINAR  •  Sept 23, 1:00 PM EDT

d :
h :
m :
s
BSN Blog 5 14 2020

Microsoft Teams & GIFs

BSN Blog 5 14 2020

“Why do I always have to update my software?”

“What is a patch update and why is it so important?”

As an MSP, you know that it is hard enough to emphasize to every one of your clients and their employees the importance of strong security.  You also know that keeping track of what they are using in regard to software and hardware is difficult, and even more so with almost everyone working remotely as of today. Having software updates deployed automatically – and not deferred – is something that you’re likely already doing, but if employees are responsible for performing those updates on their own, for example, if they’re using a personal device for work, are you confident they’re doing so? As we know, new threats pop up every day, and there is no room for lax cybersecurity measures.

“I keep rescheduling the update, I don’t have time to wait while it installs and reboots.” 

Take for example the recent discovery by CyberArk on the Microsoft Teams application.  Here we have a widely use platform from a software giant, and it was discovered to be susceptible to hackers via GIFs.  The GIF function contained a security issue that would allow hackers to exploit its functionality and compromise a subdomain which would poison the GIF and allow access to a user’s account and data.  This wasn’t complicated, in fact, all a user had to do was view the GIF and they could have been an unsuspecting victim.  No clicking, no responding, just viewing.

After being notified by CyberArk on March 23, 2020, Microsoft quickly remedied the issue with a patch update.  Had a user not known about this, a very likely scenario, they would not have known to be mindful and could possibly have been hacked.

“I don’t need the new version”

This is a perfect example of showing how everyone is susceptible when it comes to possible hacking, including the giants of any industry.  And more importantly, users need to understand that when a patch is issued, it doesn’t always just mean a feature enhancement, but can likely include fixes to address bugs and security flaws.

With the ways that we engage changing daily, these types of communication platforms will likely become a regular target.  Now more than ever, we need to explain the importance of staying diligent and aware of cybersecurity.

Shield Wrapper

Start Your 30-Day Free Trial

No credit card. No contracts. Just a straightforward way to experience how Breach Secure Now helps MSPs educate, protect, and support the businesses they serve.

More on blogs

The AI Safety Debate Is Getting Louder. What Should Business Leaders Do Right Now?

The AI safety debate is getting louder, but businesses do not have to wait for future risks to take action. Shadow AI, unsafe data sharing,

What Are Nanos? Training Built for the Way People Learn Today

BSN Nanos are short, focused training experiences designed to make learning easier to consume, easier to access, and easier to fit into the workday. By

Password Managers: A Simple Tool for Solving a Very Human Security Problem

Password managers help employees create and store strong, unique credentials without relying on memory or risky password reuse. Learn how they reduce credential stuffing risk,
Take the First Step

Experience Training That Makes a Difference

during the demo you’ll:

Take the First Step

Experience Training That Makes a Difference

During the demo you’ll: