The news about the impact of ransomware on small to midsize businesses is grim to say the least. Datto’s third annual Global State of the Channel Ransomware Report found that smaller companies are victimized more by ransomware than any other form of cyberattack.

Nearly half of employed Americans now work from home at least part of the time. However, one of the key pieces of technology enabling this workstyle may be creating significant security issues that reach beyond the home office and into the enterprise network.

Cloud adoption among small to midsize businesses (SMBs) continues to increase because cloud capabilities and applications line up nicely with the business goals of smaller companies. The cloud is cost-effective and mobile-friendly, and it allows organizations to automate business and IT functions across the organization to boost productivity.

In the previous post, we discussed the fact that many organizations are creating security risks by handing out local admin rights to too many users. The goal is to keep users happy by providing them with more control of their devices and reduce reliance on IT, but the convenience factor shouldn’t outweigh the security risk.

In a previous post, we discussed why access control isn't just about restricting network access to users with legitimate credentials. Access control should also restrict access to sensitive systems and data to specific users. When employees have free rein across the network, it’s like opening up a buffet for hackers who steal credentials.

Most organizations have some kind of mechanism in place to determine who is allowed to access their IT systems and to authenticate that access. But many organizations give little thought to the type of data that users are allowed to see. Although access to some sensitive data, such as financial or private customer data, tends to be restricted, the average user with legitimate credentials will be able to view, modify, copy or delete a large proportion of data across the IT environment.

Products featuring the latest version of the Wi-Fi security suite will soon be hitting the market. Devices that support the new Wi-Fi Protected Access 3 (WPA3) protocols will feature significant security upgrades, including stronger password protection, more robust authentication, and increased cryptographic strength for both public and private Wi-Fi networks.

The traditional username-and-password for authentication is a prime example of how organizations are making a hacker’s job much easier than it should be. It’s not just about people using weak passwords or the same passwords for multiple accounts, and it’s not just about companies failing to enforce password best practices.

People tend to think of identity theft as a consumer problem, but it’s a business problem, too. Businesses are more attractive targets, not only because they have more money and higher credit limits, but because vital information that’s required to be public can easily be stolen and exploited.

The city of Atlanta is still feeling the effects of a March ransomware attack that disrupted city government operations for days. News reports indicate that the city has already spent more than $2 million cleaning up from the “SamSam” virus attack, and city officials have estimated that they may need another $10 million over the next year.