cybersecurity | Server And Hosting Blog

22 Dec

The Biggest Online Trends In 2021

Would you be surprised to learn that eCommerce represents approx. 23%-25% of all commerce in the U.S.? The current state of quarantine has greatly accelerated the move towards “online first” commerce.

With so many retailers making the move to online shopping, we are bound to see innovative online and eCommerce trends emerging in 2021.

AI (Artificial Intelligence) and AR (Augmented Reality)

Artificial intelligence is one of the most transformative technologies being used today and one that will strongly influence the future of mankind. With substantial amounts of data being collected today, the machine learning algorithms improve every year. Although the concept of “artificial intelligence” has been around since antiquity, the term was brought to life at the 1956^th Dartmouth Artificial Intelligence (AI) Conference, by a small group of scientists.

Today we can see AI being used everywhere from online retail to chatbots, CRM software, market forecasting, customer behavior analysis, and more. The use of artificial intelligence in the retail market is expected to reach $7.3 billion by 2022. Furthermore, Meticulous Research® estimates it will reach $19.9 billion by 2027.

Augmented Reality (AR) enhances user experience by allowing consumers to preview products online before making a purchase. Today we can see AR being used with virtual dressing rooms, interior design apps, even online marketplaces such as Etsy, which allows consumers to visualize wall art with augmented reality.

But the products that dominated the world of AR and are the most well-known to consumers are AR smart glasses. The concept first made the spotlight with Google Glasses back in 2014. Today, ABI Research estimates that over 120,000 stores around the world will be using AR smart glasses by 2022.

By implementing AI and AR online sellers can greatly enhance the eCommerce experience. This in turn could lower the return rates. Just imagine if you could see how that mid-century walnut dining table, that you had your eyes on for weeks now, fits in your living room before making the actual purchase. Pretty exciting right?

Omnichannel Shopping

Omnichannel shopping has the customer at the center. Omnichannel refers to retailers that have both an online presence and a physical one. In addition, it involves making use of various technologies such as, AI and robotics amongst others, to provide a seamless and unified shopping experience.

That means retailers need to optimize for both an online and offline customer experience. A recent study conducted by BigCommerce on nearly 3000 consumers reveals that when it comes to online shopping, website security concerns and a website’s loading speed are at the top of the mind for most users.

Voice Search Commerce

Hands-free shopping sounds pretty tempting. With the rise of AI and the introduction of smart home assistants, we are starting to see an increase in Voice Search.

As the name implies, Voice Search is a technology that allows users to conduct online searches using their voice. Introduced by Google in 2011, Voice Search is rapidly rising to the forefront of online retail and search marketing.

The popularity of Voice Search has dramatically expanded with Amazon’s launch of its smart speaker Echo and virtual assistant Alexa.

Think about it. How many times in the past month have you used voice messages on your phone, or asked Siri or Alexa for assistance?

In a 2018 study conducted by Hubspot and Lucid, on over 3400 participants across the US, UK, and Canada, 52% of the responders have used voice assistants on either their smartphones or smart speakers. Of those that use a voice assistant, 15% use it to shop online.

Voice assistant use is predicted to continue to grow in 2021, getting to as much as 8.4 billion voice assistants being used by 2024 according to Statista.

The Rise of Total Experience (TX)

Gartner introduced us last year to the concept of multiexperience (MX) when they made their predictions for 2020. This year they go a step further in their top tech trends for 2021 by bringing up the concept of Total Experience (TX).

This new concept will combine multiexperience (MX), customer experience (CX), employee experience (EX), and user experience (UX) to optimize across all processes and create a better overall experience. Gartner says, companies that get behind the concept of Total Experience will gain a “sustainable competitive advantage.”

Directly Shoppable Media

Directly shoppable media such as live streaming, social commerce, virtual consultations, and shoppable ad formats are set to be the future of online advertising in 2021, according to a recent report from the Interactive Advertising Bureau (IAB). Companies like YouTube, who earlier this year announced a direct response ad format, are already making the shift towards directly shoppable media. Facebook and Instagram have also rolled out online Shops and Live Shopping earlier this year to enable eCommerce across their apps and make it easier for consumers to shop in real-time.

“This is the biggest step that we’ve taken yet to enable commerce across our family of apps,” said Dan Levy, VP of Ads and Business Platform at Facebook.

Increased Focus on Cybersecurity

Over the past months, we have experienced a high increase in cyberattacks. Ransomware attacks are more complex every day with ransom demands that are in the millions. The number of cyberattacks increases weekly and cybercriminals are finding new ways to compromise the security of physical and digital devices.

The average consumer is becoming more aware and more educated on the several types of cyber threats and looking for ways to protect the security of critical data. As a result, 2021 will bring an increase in cybersecurity solutions and a focus on new practices such as “zero-trust.”

Gartner even goes as far as predicting a cybersecurity mesh that enables a more modular, scalable, and flexible security solution. In essence, the cybersecurity mesh will set a security perimeter around any “person or thing” ensuring thus secure access to any digital asset, regardless of one’s location.

At SoftSys Hosting we offer multiple security solutions including Acronis Cyber Protect for both local devices (laptops, PCs, smartphones) and virtual servers. Acronis Cyber Protect is a complete solution that includes integrated anti-malware, backup & recovery, vulnerability assessments, patch management, and more.

5G Technology

With the sudden increase in the remote workforce, brought by the effects of Covid-19, the need for a fast and reliable Internet connection has become more critical than ever. While 5G is already available in the US with large mobile carriers such as AT&T, T-Mobile, and Verizon, it is expected that the infrastructure will dramatically scale in 2021.

According to PwC, formerly PriceCoopersWaterhouse, by January 2021, almost 75% of the US population will have 5G coverage.

5G is the 5^th level of Internet communications, bringing increased download speeds compared to its 4G predecessor. According to OpenSignal, 5G is five to six times faster than 4G. Not only is it faster but with all the additional cell towers and mesh stations, it will cover a lot more ground than 4G.

5G Download Speed — Source: www.opensignal.com, 2020

Final Thoughts

With everyone being stuck at home during the pandemic, we are seeing an increased shift towards eCommerce. But while offering an online shop has its many advantages, businesses need to ensure they stay competitive and offer consumers a great overall experience.

Start by building a fast, scalable, and secure eCommerce store. Then take it a step further by incorporating new advertising approaches such as live shopping or virtual consultations or optimizing for voice commerce.

If you are looking for a platform to host your eCommerce store, please get in touch. We offer fast, reliable, and secure eCommerce hosting using nopCommerce or Enterprise Magento. Both solutions are optimized for superior performance. We would love to learn more about your business and provide a solution that will accelerate your online growth.

17 Nov

How to Keep Business Data Secure While Working Remotely

We can all agree 2020 has not been the year we had hoped for last December. Far from it!

From the way we live our daily lives, to the way we shop for groceries or do our jobs, everything has been disrupted. As more and more businesses move their employees towards remote work, online security is becoming an ever-growing concern.

What started out of necessity is turning into a new business model. And this has been the trend for years now.

According to an analysis performed by FlexJobs and Global Workplace Analytics (GWA), a research and consulting firm based in San Diego, California, between 2005 and 2017, there has been a 159% growth in remote work.

Remote Work Growth — *Source: “Remote Work Statistics: Shifting Norms and Expectations”, February 2020, accessed November 9, 2020 at www.flexjobs.com*

This trend has accelerated even more as a result of Covid-19.

According to a recent survey by the Global Workplace Analytics (GWA) and Iometrics, a workplace services firm based in Irvine, California, work from home during Covid-19 has increased from 31% to 88%.

Here at SoftSys Hosting many of our employees work remotely as well. I myself have been working remotely for 10+ years now. While more and more businesses are making the shift towards remote work, we are also seeing concerning increases in online security threats.

With this in mind, we have compiled a list of seven tips you should follow to keep your data secure while working remotely.

7 TIPS TO IMPROVE THE SECURITY OF YOUR DATA WHILE WORKING REMOTELY

Tip #1: Have a Cybersecurity Policy in Place
Tip #2: Secure Your Website With an SSL Certificate
Tip #3: Use Strong Passwords
Tip #4: Avoid Connecting To Public Wi-Fi
Tip #5: Keep Your Computer Secure
Tip #6: Beware of Social Engineering Attacks
Tip #7: Always Have a Backup Plan

ONLINE SECURITY TIP #1: HAVE A CYBERSECURITY POLICY IN PLACE

If you are a business owner, you need to have a data security policy for your organization. Your cybersecurity policy should provide you and your employees’ guidelines on how to keep your data and your customers’ data secure. It should also provide recommendations on how to manage cybersecurity risks.

A good place to start is the National’s Institute of Standards and Technology (NIST) Cybersecurity Framework which includes best practices to help businesses manage cybersecurity risks. The framework has been used by 30% of US organizations, according to Gartner, and the usage was projected to increase to 50% by 2020.

The Cybersecurity Framework consists of five high-level functions that are applicable to risk management in general, including cybersecurity risks. The five core functions depicted are: Identify, Protect, Detect, Respond, and Recover.

Start by assessing your organization’s ability to maintain data security. What data is being collected in your company, how are your data stored by your employees (on local devices, on internal company systems, in the cloud, etc.)?

Ensure that your employees are following workplace security policies. There are some self-evident rules that should be followed in any company (don’t use your work computer to access sites unrelated to your work) but you need to state them in a documented cybersecurity policy.

Once you have documented the policy, share it across your entire organization, and make sure your employees understand and comply with the rules.

ONLINE SECURITY TIP #2: SECURE YOUR WEBSITE WITH AN SSL CERTIFICATE

A Secure Socket Layer certificate (SSL certificate) does exactly that! It will encrypt, or conceal if you will, your data from hackers and bad actors. It’s basically a small data file that will digitally bind an encrypted key to a company’s details.

In addition to encrypting data between your browser and the end server, the SSL certificate will also authenticate the server. In other words, it makes sure that your information is shared with the correct server hosting the website and not with a hacker who tries to steal your information.

While there are some free SSL certificates, such as Let’s Encrypt, we generally recommend a commercial SSL for any website that collects sensitive information. There are several reasons for that, but one good reason is free SSL certificates such as Let’s Encrypt offers no warranty if something goes wrong. All commercial brands will include a warranty. The vetting performed for a commercial SSL is also much more stringent.

At SoftSys Hosting we offer several trusted SSL certificate brands including Comodo, GeoTrust, Symantec and more.

Bottom line, if you collect sensitive information on your website, make sure to protect your customers’ data by using a trusted SSL certificate. By the same token, pay attention what website you and your employees are accessing. These days most browsers will show a warning if a website is not HTTPS secure.

ONLINE SECURITY TIP #3: USE STRONG PASSWORDS

Most of us dread setting up a password. We have so many of them and often times, out of convenience, we tend to either use a common word for a password (like our pet’s name) or use the same password for multiple systems.

According to a study performed by Digital Guardian on password security habits, 10.8% of the responders reuse the same password across all their accounts.

*Source: Uncovering Password Habits: Are Users’ Password Security Habits Improving? (Infographic), 2020, Accessed November 11, 2020 at digitalguardian.com*

However, I’ve heard of numerous cases where online systems were hacked due to weak passwords. According to a 2020 research by PreciseSecurity.com, 30% of ransomware infections in 2019 were caused by weak passwords.

I myself have been the victim of this when a hacker got into my Netflix account and changed my password. I guess the need to binge-watch Netflix can drive people to do strange things?? Luckily, I was able to fix that issue within minutes and none of my data was stolen.

I got lucky that time. Lesson learned!

Both NIST and the FBI recommend using passphrases over passwords for enhanced security.

“A passphrase is a memorized secret consisting of a sequence of words or other text that a claimant uses to authenticate their identity. A passphrase is similar to a password in usage but is generally longer for added security.” NIST Special Publication 800-63 Revision 3, Digital Identity Guidelines

As a business you need to ensure your employees use passphrases or long passwords with at least 8 characters in length, when accessing your systems. And if you have a lot of passwords, like I do, you might want to use a password manager. Some examples of password managers are 1Password, KeePass and BitWarden.

ONLINE SECURITY TIP #4: AVOID CONNECTING TO PUBLIC WI-FI

You can work remotely from anywhere if you have a quiet place and a good internet connection. Access to public Wi-Fi has been an enormous aid to remote employees these days. You can find free public Wi-Fi in coffee shops, restaurants, hotels, sometimes even in outdoor public spaces. But the truth is they’re not always secure. Sometimes though you might have to travel for work, and you might not have any other options but to use a public Wi-Fi.

In those cases, try to avoid Wi-Fi networks that don’t require a Wi-Fi Protected Access (WPA) or WPA2 password. Between the two WPA2 is more secure. You should also ensure that you have logged out from your systems when you finish working.

If you regularly use public Wi-Fi you can have a secure connection, even when using public Wi-Fi, by using a VPN service. A VPN can be configured in multiple ways. One popular way to configure a secure VPN service is as a Remote Client VPN (also known as Remote Access VPN).

This type of VPN configuration will encrypt traffic between your local device and the system/business software that you are accessing. Note that a Remote Client VPN won’t encrypt everything that you access through your computer. Only those specific systems for which the VPN has been configured will be secured.

The VPN will create a secure tunnel all the way, regardless of what Wi-Fi connection you are using.

There are multiple popular VPN solutions like SiteLock VPN, VyOS, Vyatta, OPNSense, and more.

SoftSys Hosting customers can activate a high-speed secure VPN with military-grade encryption. Using our high-speed VPN solution you will be able to:

hide your IP for secure anonymous browsing.
access blocked websites in 40+ countries.
protect your data when using public Wi-Fi.
watch streaming services anywhere & more.

Be aware though that some VPN providers might be the target of cyberattacks themselves. That is the case with unpatched Pulse Secure VPN servers who have been the target of malicious attacks.

ONLINE SECURITY TIP #5: KEEP YOUR COMPUTER SECURE

In today’s technological world we use our computers, laptops, smart phones every single day. In fact, what are you doing right now?

Most of us store work-related information on our local devices: client proposals, website descriptions, accounting information, login credentials, you name it! Hackers, scammers and other bad actors are becoming more and more clever these days. It’s almost as if their only purpose in life is to find new ways to steal your data.

From malware and ransomware to spyware, hackers will try anything to get their hands on your credit/debit cards, PayPal accounts, and other sensitive information.

According to a survey by Positive Technologies in the last quarter of 2019 credit/debit card information made up 32% of all information stolen. In other words, one-third of the information stolen by hackers was payment card information!

*Source: Cybersecurity threatscape: Q4 2019, Figure 1. Attackers’ motives, Accessed November 11, 2020, at www.ptsecurity.com*

What can you do to prevent hackers from gaining access to your sensitive data? Start with an antivirus. Some popular antivirus solutions are Malwarebytes, Avast, and Bitdefender. You should set up regular automatic full system scans using a reliable antivirus solution.

But an antivirus is not enough! It will not protect your computer against malware and other types of malware attacks. You need a solution that’s specifically designed for that.

At SoftSys Hosting we have partnered with Acronis to bring you Acronis Cyber Protect, a security solution that integrates backups, disaster recovery, a next-generation anti-malware and cybersecurity into one single affordable and easy-to-use solution. The Acronis Cyber Protect solution can be enabled on any local computer, mobile device (Android/iOS), Virtual Machine, cPanel/Plesk Web Hosting Servers and more.

Lastly, when thinking about the security of your local computers you should make sure all your software is up to date. Software vendors often time include critical security patches when releasing a new software version. If you use software that’s no longer supported or End of Life (EOL) as it is often called, you are only increasing the risk of getting hacked.

A social engineering attack is a type of email that aims to manipulate users into giving up sensitive information like passwords or bank account information. It typically aims to create a sense of urgency, fear, or manipulate emotions, and prompts the user to take some sort of action. This action could be clicking on a link or downloading a file on your computer.

Two common types of social engineering attacks are:

1. Phishing – where the attacker pretends to be a legitimate business, like your bank or a popular retailer.

The term “phishing” was first used on January 2, 1996, and it’s an analogy to the popular sport of “fishing” because the attackers try to “lure” users into disclosing sensitive information. Since Covid-19 phishing emails have been on the rise as well.

In April 2020 Google disclosed that they’ve blocked over 18 million phishing emails and malware per day!

2. Email spoofing – is similar to phishing, except the attacker will “spoof” the email header. The email could appear to be from your bank, except the email domain will not be the bank’s email domain. In other words, the sender’s email will not match the sender’s name.

The Ohio Graydon-Toole Group has a great comparison between the two.

As a rule of thumb, your bank will never ask you to provide sensitive information via email. Most of these bad actors also have a lot of grammar errors, so pay attention! Most importantly you can configure an anti-phishing solution. If you use a commercial email service such as Microsoft 365 (formerly known as Office 365) there are multiple solutions available including Microsoft Office Advanced Threat Protection (ATP).

ONLINE SECURITY TIP #7: ALWAYS HAVE A BACKUP PLAN

You should always have at least one backup of your critical data! I cannot reiterate enough how important this is.

Most of us live hectic lives. There are so many things on our daily to-do lists, we often time forget (or ignore) the really important ones. Having an automated backup solution is not something that should be taken lightly!

But I never had a backup before and nothing happened! Why should I get one now!?

I’ve read about and seen countless cases of people losing their data and they would give ANYTHING to get it back. There are some fortunate cases, where they might find an old backup amongst their files, but I’ve also seen situations where everything has been lost.

If you get so unlucky to fall victim to a ransomware attack you might lose years’ worth of work if you don’t have a backup.

At SoftSys Hosting we offer Acronis Cyber Backup both as a standalone solution or bundled with our managed service package. Acronis Cyber Backup is a trusted backup and recovery solution that allows you to configure automated backups with an hourly/daily/weekly/monthly retention. And because backups are incremental you can take more backups without running the usage/costs high.

If you are interested in a managed backup solution, contact sales@softsyshosting.com.

21 Oct

Increase the Security of Your Linux Servers With BitNinja Server Security

We are pleased to announce that we have partnered with BitNinja to bring you the ultimate server protection against WordPress, Joomla, and Drupal infections.

The BitNinja server security solution has been around since 2014. It started as an in-house project when its CEO George Egri wanted to protect their own hosting company against malicious threats and cyberattacks. Today the company protects over 20.000 servers worldwide and their WAF has blocked over 40 million HTTP attacks.

What Is BitNinja and How Can It Take Your Server Security to the Next Level?

Security breaches can put your business at risk. Stolen databases, password hacks, malware, SQL injections, malicious scripts that can change your user’s passwords and gain access to your user’s accounts, you name it!

Today’s digital world is full of security threats that can impact your business’ revenue and reputation.

BitNinja server security helps you maintain a successful business by taking 100% responsibility of keeping your Linux server clean.

“We were in search of an enterprise-grade security tool to provide all-round protection to our customers’ business servers. BitNinja turned out to be the perfect partner to help us address the ever-growing security vulnerabilities and hacks. We tune and tweak BitNinja based on our customers’ specific requirements and we are happy to say it has provided 100% protection! We are beyond excited to have partnered with BitNinja!” Ruchir Shastri, President & Founder @ SoftSys Hosting

BitNinja Will Significantly Increase the Security of Your Websites!

Here’s how BitNinja can help: it’s an all-in-one security solution that provides one of the BEST server security defenses available on the market today! It’s supported on all popular Linux distributions (CentOS, Debian, Ubuntu, etc.) and requires zero changes to your server.

Backed by machine learning technology that adapts to the latest threats, BitNinja combines a set of integrated defense modules into a single security suite that provides complete protection at the application layer, prevents your server from becoming part of a botnet, and protects you from incoming and outgoing DoS and DDoS attacks.

Being a layered security system, BitNinja blocks server attacks at any threat level automatically, allowing you to protect your websites from unforeseen security threats and focusing on growing your business.

Easy to install and use BitNinja offers the following benefits:

Improves your server’s load.
Reduces spam.
Protects your web application.
Scans your web files for malware.
Protects yourself from viruses (including email-based viruses).
Detects and blocks port-scans.
Protects yourself from Distributed Blacklists such as DNSBL.
Proactively monitors malicious scripts & more.

Protect Your Business and Customers from Security Breaches. Get Started with BitNinja Server Security Solution Today!

Achieve system stability and reduce the server load by activating the BitNinja proactive security defense shield and fixing your IP reputation for good.

The BitNinja security solution is available to SoftSys Hosting customers who own a Linux based VPS (fully managed or unmanaged) or a Linux-based dedicated server.

The service can be added to a new or existing VPS account for as low as $16 USD per month. To help you get started we offer a 7-day free trial with full functionality. During this period, you can test it and see doing its magic. To get started with your free trial, please contact us at sales@softsyshosting.com.

Once the service is activated, our team will install BitNinja on your server and provide you access to a dedicated dashboard where you can configure and manage your server’s security.

If you’re not a SoftSys Hosting customer, and want to protect your business from hacks, data theft, IP blacklisting & more get in touch with us as well.

We’d love to help keep your business secure and profitable!