Cyberattacks are Happening Faster with Less Time for Early Detection

 In what sounds like a positive shift, cybersecurity experts have announced their research has found that cyberattacks are spending less time on the networks they infiltrate. Unfortunately, this isn’t such a clear-cut positive. Today, we’ll discuss “dwell time” and how less of it is a problem. 

What Is Dwell Time?

Dwell time is a term that’s used a lot in technology. Typically, it is used to measure how long a user stays on a particular webpage, but in this context it is the duration a threat comes in contact with the network’s filter before it is detected by the software or a technician. You may be surprised to learn that in the latter context, the median dwell time for malicious code is 24 days. This may seem like an eternity, but just 10 years ago the median dwell time of a threat was well over a year at 416 days.

It’s reasonable to assume that since people are more cognizant of web-based threats and therefore are investing more time and money into cybersecurity initiatives, that the number would shrink rapidly. It stands to reason that the shorter the dwell time is, the more apt a program designed to catch cybersecurity threats would be able to quarantine and eliminate the threat, right? Unfortunately, it’s not so simple. 

New Threats Complicate Things

Many of the attacks we see today are far more sophisticated than they were a decade ago. Threats like ransomware, for instance, are now used more today, and dwell time isn’t as big of an issue. In fact, while your average attack method has a dwell time of 45 days, ransomware’s average is just five before it is deployed and causes you to be locked out of your files or systems. Ransomware doesn’t sit on the network, it is deployed and devastates quickly.

Ransomware Is More Sophisticated

Today more hackers are deploying more ransomware than ever and it’s a major point of emphasis that every network administrator should understand. Not only that, ransomware tactics are becoming more aggressive. Now there is a situation called a “multifaceted extortion” where ransomware is deployed and instead of deleting or stealing the data, they threaten to publish it publicly. Most organizations would do anything to keep their intellectual property and the sensitive information of their clients, vendors, and workers confidential.

It’s Not Just Ransomware

Network administrators need to be aware that it’s not just ransomware they have to be on the lookout for. Unpatched software exploits have exponentially risen recently. In fact, over one-quarter of all hacks (29 percent) happen because hackers find an exploit in a business’ network. Phishing, which is often cited as the most dangerous hacking method only accounts for 23 percent. 

Prepare Your Business’ Network

With the threat landscape the way it is, it is important that you diligently patch your software, keep your tools updated and actively train your employees to help you keep threats off your network. At Net It On, we can help. Give us a call at (732) 360-2999 to learn more about how to ensure your business can navigate through the minefield that’s out there today.

YouTube Can Help Take Your Business Where You Want It to Go

 I think if you took a deep look at it that you are probably paying too much to train your employees. If you account for the cost of the resources and the time it takes to properly train someone, you are talking a substantial amount of money. There is a way to use YouTube to subsidize your training practices and get the information you need your new employees to see more cost-effectively. 

YouTube and Your Business

Let’s not take a lot of time telling you about YouTube. If you don’t know what YouTube is you are in for a rude awakening once you see it. YouTube has billions of videos and that is a good thing for people. You can learn how to fix your car, care for your houseplants, or format that screenplay that has been in your OneDrive for the past ten years. For this reason, it is a great resource for business, as well as something that you need to keep an eye on.

YouTube can end up costing your business quite a bit too.

Anyone that has been on YouTube knows that there are literally millions of hours of videos about any topic important to any human being. It’s a lot of content. In fact, according to Google, the parent company of YouTube, nearly five billion videos are watched on YouTube every day. This is why many organizations have chosen to block or limit the use of YouTube. 720,000 hours of new video content is updated every day, and a lot of it is video game and movie reviews.

So, How Can I Use YouTube to Improve My Business?

There are many ways to use YouTube to your business’ benefit, but we’re not going to get into marketing and content creation here. Really, all we want to impress on you is that no matter what your business does, there is a literal library of content out there that, if you use it properly, can be beneficial to your business. 

Using existing YouTube content can help you educate your staff about your type of business goals, your culture, your market, the services you provide your customers, customer relationships, physical and cybersecurity, and much more. To do this, you’ll have to learn how to make a playlist. 

How Do I Make a Playlist?

Just as you would if you were making a music playlist, YouTube provides the ability to put together a playlist of videos. By choosing videos that can help improve the knowledge base of your staff, you can get them to quickly learn what you need them to learn to do their jobs more proficiently. Here’s how to do it:

1. You find a YouTube video you want to add.
2. Directly under the video, you will click the Add to button.
3. There will be a dropdown menu. Choose Create new playlist.
4. Enter a name for the playlist.
5. Choose any privacy settings you want to enact for the playlist. For businesses, we suggest unlisted.
6. Click create.

That’s it. Then you can add to the playlist by clicking on the Add to button under a video and placing it on the corresponding playlist. You will quickly find that the hardest part about building a playlist is watching content. Once your playlist is finished, however, you will reap the benefits as your staff will become more knowledgeable and start asking the right questions about how to do their jobs better. 

The Lessons to Learn from Coca-Cola’s Insider Trade Secret Theft

 In today’s business, your data is your number one asset. For this reason it is important that you take steps to protect it. One case that accentuates this is the case of Xiaorong You, which is currently playing out in a Tennessee court. The accused is charged with stealing trade secrets and committing corporate espionage, as she is accused of allegedly stealing almost $120 million worth of BPA-free technologies from several companies, among them the Eastman Chemical Company and Coca-Cola.

Let’s take a look at how these two companies deployed their threat detection systems and the effect they had on the companies. 

You’s Story

Xiaorong “Shannon” You, a naturalized US citizen and Ph.D. in Polymer Science and Engineering, has worked at several companies since the early ‘90s. From December of 2012 to August of 2017, she worked for Coca-Cola as a principal engineer for global research, moving to the Eastman Chemical Company to work as a packaging application development manager from September of 2017 until June of 2018, when her employment was terminated.

During her tenure at both companies, You was given access to many trade secrets that only a handful of employees were privy to. In the indictment, You is charged with retaining these secrets (despite affirming that she hadn’t in writing) and then handing them over to the People’s Republic of China in an attempt to qualify for its The Thousand Talents program. This program has been used before to introduce advanced technologies to China, with the Department of Justice having prosecuted some cases similar to You’s.

Her modus operandi was that she retained this information by simply uploading data to her personal Google Drive account or captured especially sensitive information on her smartphone. Once she captured this data, You worked with a Chinese national named Xiangchen Liu to form a separate company in China that went ahead to use these trade secrets to begin revenue generation. They allegedly used an Italian BPA-free manufacturer to incorporate the stolen technologies onto their own products.

The theft of this information impacted several companies, including Coca-Cola and The Eastman Chemical Company, AkzoNobel, Dow Chemical, PPG, TSI, Sherwin Williams, and ToyoChem. This led to the charges she currently faces.

How You’s Employers Could Have Stopped Such Activities

There were stark differences between the way that Coca-Cola and The Eastman Chemical Company handled these issues. You left Coca-Cola in August of 2017, but her indictment states that the crimes she’s charged with didn’t happen until 2019. This means that Coca-Cola had no knowledge of the theft until after she had been exposed by her later employer. 

This fact is indicative of two reasonable hypotheses:

1. Coca-Cola lacked the tools to detect such activities in real-time, making it far more difficult to prevent protected and sensitive data from successfully leaving the corporate environment.
2. Coca-Cola also lacked the policies that could have prevented non-authorized devices from entering the workspace or otherwise being kept in proximity to sensitive company data or infrastructures. While old-fashioned, the concept of taking photographs of such information is no less effective for its age.

If you compare that to You’s sudden dismissal from the Eastman Chemical Company, you would have to consider that they had the data protection standards implemented to catch would-be thieves pretty rapidly.  If they hadn’t, the $120 million in trade secrets could have been substantially more. 

This just goes to show that any business can have the right idea about security, but not pay close enough attention to the details. Coca-Cola is a massive brand, but it couldn’t stop You from allegedly raking the company over the coals. 

Smart Technology Can Actually Help You to Streamline Your Business

 A lot has been made about smart technology over the past few years with one major takeaway: it is far too risky to deploy. Security problems with Internet of Things (IoT) devices have been widely discussed and it has kept organizations from deploying technology that can really help their business. Let’s take a look at some of the technologies that your business can use to streamline your operations.

Smart Technology Gets Smarter Through AI

Before we get into specific business solutions, we should mention that many of today’s smart technologies utilize some form of AI to help them be effective in business situations. AI typically does one thing extremely well: fuels successful automation. Obviously, this benefits both the operational-level workforce and the business as a whole. The whole point in deploying these smart technologies is as a subsidy to your current workforce to help them do their jobs better and focus on the right things to help generate revenue. 

Security

One of the best ways to invest in smart technology is to use it to enhance the capabilities of your security systems. Not only are there smart physical security tools that typically come with door, window, and motion sensors that alert business owners and managers immediately when there is unauthorized activity, there are also technologies that are built to alert decision makers when HVAC systems aren’t working optimally. Additionally, AI can be used to improve your operational cybersecurity as well as using the same general principles. 

Utility Management

Businesses can save up to 15-to-20 percent on their utility bills with the use of smart thermostats and lighting. These technologies can be set on a schedule or even detect usage and modulate electricity consumption. With more businesses going to more flexible work schedules, they are a great way to save some money without having to constantly pay attention to the in-office environment. 

Digital Assistants

I know what you’re thinking: “You're not going to tell me that Alexa can help my business.” That’s exactly what I’m saying. These apps may not be all the way there now, but they do offer some pretty solid features. They are probably most effective as a hub to manage all the other smart devices you may use, but they can also be used (with integrations) to schedule meetings, set up correspondence, and quickly access information.

Other Internet of Things Devices

There are all types of innovative devices that have been produced over the past few years that are designed to help people manage their tasks. From wearable devices like smartwatches to connected devices inside your printer that tell you when your ink/toner is low, to RFID tags that can help manage inventory, the IoT can fuel a culture of efficiency in and around your business.

Technology is Changing the Way We Look at Productivity

 The concept of productivity isn’t what it used to be. It has evolved significantly over time. In fact, it wasn’t until the late 16th century, where subsistence living was less frequent, where the term started to mean what we know it to mean today. Today, we’ll take a look at how the modern definition of productivity came about.

Changes in Technology Fueled a Reimagining of Productivity

The life of a worker in the late 16th and 17th centuries wasn’t always so much to bring home a paycheck, it was to sustain their lives and the lives of their families. With no refrigeration, no electricity, food had to be acquired and prepared in short order. Even after people started moving to cities and forgoing the subsistence life, most of their time was trying to secure shelter and food. 

Birth of Modern Productivity

By the end of the 18th century, global trade had created demand for new goods and services. This is when you first start to see productivity mentioned regularly. In Adam Smith’s Wealth of Nations, he describes labor as:

• Productive labor, which produces added value
• Unproductive labor, which produces no additional value

Shortly thereafter, the polymathic Benjamin Franklin developed his own philosophy of productivity that asked the questions that modern productivity is centered around:

• “The morning question, What good shall I do this day?”
• “Evening question, What good have I done today?”

These questions and the development of new technologies that would change the world went a long way toward creating the definition of productivity that we know today. In fact, one could say that the more technologically advanced society has become, the more apt people are to reference productivity. Take into account that initially slave labor was used and then for half a century low-wage workers (many of a very young age) toiled in unsafe conditions before labor unions pushed for protective measures.

The Shift to Modern Productivity

After the turn of the 20th century, what could only be described as the predecessor of today’s efficiency guru was born. Thought leaders such as Franky Winslow “Speedy” Taylor and Frank and Lillian Gilbreth (yes, the ones from Cheaper by the Dozen) started a movement that has since grown into a massive industry of management consultants. 

For much of the early 20th century, productivity was looked on as a patriotic duty as workers toiled through the first two World Wars and the Great Depression. This expanded productivity to women, who up until this point, were looked on more as domestic caretakers than workers. 

Food, which was the major driving force behind work just centuries ago, has transformed to adjust for more productivity elsewhere. The TV dinner was developed in the 1950s and the invention of the microwave oven only made those prepackaged and easy-to-make meals more of a mainstay in homes. This also revolutionized the ability for food chains to make food quickly. This led to the explosion of fast-food chains starting in the mid-1970s.

The Development of the PC

Computers changed the world. With the development of computers that you can use to expand productivity, and then computers that you could take on the go, you’ve seen a complete shift in the way that people categorize productivity. 

Where to Go from Here

Now that we have superior tools to be productive with and new applications that are using technologies like artificial intelligence to automate tasks that people are slower to accomplish, productivity should be higher than ever. It has plateaued in many instances, however. This can be explained by the amount of distractions available to the average worker. If it wasn’t for automation, we’d probably be falling deeper into recession. 

Productivity Reexamined

Getting back to the definition shift of productivity, there is currently a shift prioritizing value over the core metric of output. This is because workers today are extremely undervalued by many organizations and they need to establish guidelines to lure workers into being more productive than in previous generations. Workers want to be productive, but they also don’t want to work for as long and as hard as the people they’ve replaced. That’s why value is so important in today’s workplace. 

Don’t mistake this shift for one that doesn’t measure output. Output is still important, but value of work is much more important with the technological options available to companies today. Businesses are more focused on doing the right things over doing a lot of things that don’t add value to the workers, the executives, and most importantly, the customers. 

The Journey, Not the Destination

Today’s productivity standards aim to balance the means with the ends. Today, it’s all about the experience, whether that be at work or as a customer. In a way, it builds meaning to the work that is being done and makes this work more tolerable to people who have shorter attention spans.

Collaboration

One of the biggest shifts we’ve seen in productivity is that most things today are approached as a team. Since people enjoy their work more when they aren’t being micromanaged, companies have structured work environments that require contributions from many people instead of a few. Essentially it is an assembly line where people are in constant contact with each other. Building trust with your team goes a long way toward giving modern workers the fulfillment they need out of a job that takes over a large portion of their waking hours. 

Tip of the Week: Reducing the Impact of Blue Light Exposure

 With each day, it seems that we all have a new threat or risk to worry about. Lately, there’s been a lot said about the dangers of blue light exposure, with lots of things to buy that supposedly help fix the problems it can cause.

Wouldn’t you know it, but blue light actually can create some issues that could negatively impact your health and wellbeing. Let’s discuss it, and what you can do to address it.

What is Blue Light?

Let’s start off with some basic science: what we see as “light” is just what our minds perceive it to be. There are actually many different kinds of light rays that all interact to provide us with what we see each day. We could go into a lot more detail, but we’ll leave that to the real professionals.

One kind of light ray—blue light rays—has the highest energy levels of the bunch, paired with the shortest wavelength. Blue light rays occur naturally in sunlight, and also come from a lot of indoor sources: LED and fluorescent lighting, electronics, televisions, computers, and the mobile devices we’re all so fond of.

Now, the human eye is naturally suited to help filter out certain types of light, ultraviolet light included. Blue light isn’t included.

So, while blue light can help to improve some cognitive functions like alertness and memory while promoting wakefulness and healthy amounts of sleep, it can also be a detriment in some ways (particularly in terms of its contributing to eye strain and macular degeneration).

Where Our Devices Come into This

Historically speaking, the sun and other natural forms of light were the only way that humanity got any exposure to blue light at all for most of human history. It really wasn’t until incandescent light was created that there was another option available.

However, as we’ve surrounded ourselves with more and more artificial light sources, we’ve exposed ourselves to more blue light than ever. In doing so, we’ve shifted the balance… and it certainly doesn’t help that our modern lights contribute more blue light than any incandescent bulb ever could.

In terms of blue light’s impact, this could prove to be serious. Let’s consider what a Harvard study observed about blue light exposure compared to other kinds when exposed for the same amount of time. After six and one-half hours of blue light exposure, enough melatonin (the hormone that dictates the body’s circadian sleep patterns) was suppressed enough to shift these circadian rhythms by three hours. In comparison, the same exposure to green light only caused an hour and a half shift—literally half of what blue light did.

These effects can be compounded, not only decreasing sleep time, but also increasing the risk of depression, diabetes, and cardiovascular issues.

Fixing the Blue Light Problem

Clearly, blue light can be a real problem if it isn’t managed. Fortunately, there are simple ways to minimize its effects, like:

• Avoiding brighter screens within three hours of bedtime
• Making sure you’re getting plenty of exposure to other kinds of light to help regulate your circadian rhythms
• Using red lights over blue lights for nighttime light, helping to avoid melatonin suppression
• Investing in blue-light filtering glasses or time-controlled filtering apps

Furthermore, modern devices increasingly come with settings to help you accomplish some of these things.

In Windows, accessing your Settings and going to System > Display > Night Light Settings allows you to Schedule your device’s Night Light configuration, either based on Custom times or from Sunset to Sunrise.

Macs offer Night Shift, which is customizable from System Preferences > Displays > Night Shift.

Is Your Business Ready For What’s Coming?

 When the pandemic hit early in 2020, many business owners didn’t understand the situation they were about to face. Many businesses didn’t have the technology in place to support remote work, and the ones that did likely had employees that weren’t prepared for the responsibilities that come with working from home. Now, as millions of people are getting vaccinated and governments are slowly lifting restrictions, the question becomes: What now?

Work Strategies

A lot has been made about remote work. Business owners didn’t think it would work for them, then in a blink of an eye, they were forced to make it work for them, but the general consensus among business owners is that they would like to return to “normal” as soon as they can. “Normal” may not be possible, however. One study found that over 70 percent of workers who worked remotely during the pandemic are expecting more flexibility, even if nearly half of those same workers are looking forward to getting back into their respective offices.

How does this make sense?

Like many things that have happened during the global health crisis: it’s not supposed to. Basically, workers, like business owners, have mixed feelings about working remotely. At first, there was excitement, but as time went on, sitting for hours in video conferences, kids running around, and trying to ignore the giant pile of laundry just off the field of view of your webcam, took its toll. That’s not to say that they would trade it completely, but you may be surprised to find out that many employees who are working remotely aren’t doing as well as you’d think.

One major issue is that a majority of polled business leaders say they are thriving right now while their subordinates are largely struggling. Many workers pride themselves on their ability to be productive regardless of the situation, but some of them are overburdened with the increased digital intensity of their jobs. If someone who works in an office is having troubles in their life, especially the type of troubles that have an effect on mental health, most of the time someone will notice. Working from home, however, management tends to assume that everything is fine unless they hear otherwise. 

So, while decision makers are also largely working from home, they are making more money, developing better relationships, and being able to take a lot of their vacation time, while production workers are feeling largely overworked, underappreciated, and left to fend for themselves working for organizations that tell them that developing a team (or family) atmosphere is a priority.

Remote-Fueled Stagnation

Remote work doesn’t just negatively affect workers, it can negatively impact the course your business takes. When people are in one location there is a tendency for them to communicate better, more ideas to get thrown around, and decisions to be made with direct input from everyone. After a year or more of video conferencing, people just resign to completing the tasks on their schedule and have a tendency to dislike video conferencing more and more. 

This lack of interaction breeds complacency and a stalling of forward movement in a business. Some more company-centric administrators may disagree, but anytime an organization is resigned to groupthink, that business is in trouble. 

The Hybrid Office Experience

The fact is that businesses, especially smaller businesses that find themselves completely leveraged as restrictions phase out, are going to be looking for their people to be the most productive they can be, but they are also going to ask many of them to come back to the office. Some people are looking forward to it, but others are not. Regardless, expect for many businesses to remove the need for people to report to the office everyday. 

This is great, right? Not so fast.

How many days are you going to expect to have to go into the office? Well, it depends who you ask. According to one study 68 percent of polled executives would like to see their staff at work at the very least three days a week. Workers, on the other hand, said that it should be a maximum of three, but less depending on an employee’s responsibilities.

What’s strange is that 22 of U.S. executives consider bringing back their employees to be a major point of emphasis, while similar companies in Canada, Germany, Japan, and China don’t find this to be a major issue at all. In fact, less than five percent of polled executives consider this a strategy.

One thing is certain about the hybrid work model: nothing is certain. Will it help or hurt company culture, productivity, retention rates, and other metrics that aren’t just numbers to a business, but dollars and cents? Would it be better to just choose one over the other? Nobody knows, because every business is different.