It’s that time of year again when ISPs (Internet Service Providers)  all around the world perform their yearly maintenance, call it “Spring Cleaning” if you will.

If you have been living under a rock and missed the stories on the news and the countless emails flying around for the last week or so, then this may come as a total surprise to you. Newcomers to technology may also be taken by surprise.

In the past, Internet Cleaning Day has taken place during a 24hr period, but due to new techniques, ISPs have managed to narrow it down to only 1 hour which they have conveniently scheduled for 12pm to 1pm in each time zone.

While normal analog phone systems are not going to be affected, VoIP systems WILL be… This is often overlooked! You should follow the same procedure if your business is using Voice over IP technology. If you are unsure, it is best to disconnect the cables and place in the same container as your network cables.

It is important that you apply these updates to your computers and servers in order to keep your network secure.

Let’s start with Adobe – Four Flash security holes have been plugged in Flash Player 11.6.602.171 and earlier across all platforms.  Yes, that means you Apple Mac and Linux users need to get the updated Player version 11.6.602.180 or newer. Failure to do so could result in code being executed on your computer that could give a remote user complete control over it.

Next up…. Microsoft!

Products with updates include Microsoft Internet Explorer, Microsoft Office Suite (Visio Viewer 2010, SharePoint Server 2010, OneNote 2010, Office Outlook for Mac) and Silverlight 5 for both PC and Mac computers have a multitude of issues, with four critical bulletins.

Again, these updates should be installed as soon as possible.

If you or your organization requires assistance, please let us know. We can assist here in Upstate & Greenville SC with all your desktop, server and network security needs. We are an authorized Microsoft Partner and provide sales, service and support of their entire line of offerings. We can keep your computers secure, and in the event they need a virus cleaned off or removed, we can assist with that too!

Businesses wanting to employ the use of a patch management system, which will collect information about desktops, notebooks and other devices on their network, and push out updates from an easy to monitor server should contact us for more information!

864-990-4748 or use the contact link on our website.

You should insure that updates are installed!

Should you require assistance applying these critical security updates to your computer or your entire network of computers, please call us at 864-990-4748. We specialize in providing computer and network service and support in Greenville, Spartanburg and Anderson South Carolina.

—

Here’s some reading for you regarding the Flash Windows and Mac Attacks:

http://securitywatch.pcmag.com/none/307887-adobe-patches-flash-windows-mac-users-under-attack

And the latest bulletin from MS:

********************************************************************
Title: Microsoft Security Advisory Notification
Issued: February 12, 2013
********************************************************************

Security Advisories Updated or Released Today ==============================================

* Microsoft Security Advisory (2755801)
  – Title: Update for Vulnerabilities in Adobe Flash Player in
    Internet Explorer 10
  – http://technet.microsoft.com/security/advisory/2755801
  – Revision Note: V8.0 (February 12, 2013): Added KB2805940 to
    the Current update section. 

Hopefully, you will be home, safe and sound yourself, but if you are not, and need assistance with your computer, server or network, please call or email us and we shall attempt to help remotely.

Be careful out there!

Eaton Power Products

As an Eaton partner, Homeland Secure IT offers Greenville and the Upstate of SC the full line of Eaton power protection products, from surge protectors to full UPS or Uninterruptable Power Supplies to keep your computers, servers, network and phone systems online even when the power is off.

Safely shut down during a power outage and never lose the document you are working on by using an UPS.

There is an Eaton product that is right for every installation senario you may have. From home, home office, to small business and even data centers.

For more information or a sales quote, please call us at 864.990.4748 or use our handy CONTACT form!

We’re two days into the new year – what do you think of 2013 so far?

We’re hoping this will be a fantastic year for Homeland and for our friends, family and clients!

If there is anything we can do to assist with your computer or network needs, please do not hesitate to call upon us!

Homeland Secure IT Alert

Microsoft didn’t forget you, in fact, they already have your Christmas present, which will be delivered in the form of patches on the infamous “Patch Tuesday”…

So, whether you have been naughty or nice… Please update your computers!

If you require assistance with managing updates for your personal computer, your server, or your entire business network in the Greenville and Upstate SC area, please call us at 864-990-4748.

Here’s the Microsoft Bulletin for your reading enjoyment:

********************************************************************

Microsoft Security Bulletin Advance Notification for December 2012

Issued: December 6, 2012

********************************************************************

This is an advance notification of security bulletins that Microsoft is intending to release on December 11, 2012.

The full version of the Microsoft Security Bulletin Advance Notification for December 2012 can be found at http://technet.microsoft.com/security/bulletin/ms12-dec.

This bulletin advance notification will be replaced with the December bulletin summary on December 11, 2012. For more information about the bulletin advance notification service, see http://technet.microsoft.com/security/bulletin/advance.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on http://technet.microsoft.com/security/dd252948.

Microsoft will host a webcast to address customer questions on these bulletins on December 12, 2012, at 11:00 AM Pacific Time (US & Canada). Register for the Security Bulletin Webcast at http://technet.microsoft.com/security/bulletin.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.

This advance notification provides a number as the bulletin identifier, because the official Microsoft Security Bulletin numbers are not issued until release. The bulletin summary that replaces this advance notification will have the proper Microsoft Security Bulletin numbers (in the MSyy-xxx format) as the bulletin identifier. The security bulletins for this month are as follows, in order of severity:

Critical Security Bulletins

============================

Bulletin 1

- Affected Software:

- Windows XP Service Pack 3

- Internet Explorer 6

- Internet Explorer 7

- Internet Explorer 8

- Windows XP Professional x64 Edition Service Pack 2

- Internet Explorer 6

- Internet Explorer 7

- Internet Explorer 8

- Windows Server 2003 Service Pack 2

- Internet Explorer 6

- Internet Explorer 7

- Internet Explorer 8

- Windows Server 2003 x64 Edition Service Pack 2

- Internet Explorer 6

- Internet Explorer 7

- Internet Explorer 8

- Windows Server 2003 with SP2 for Itanium-based Systems

- Internet Explorer 6

- Internet Explorer 7

- Windows Vista Service Pack 2:

- Internet Explorer 7

- Internet Explorer 8

- Internet Explorer 9

- Windows Vista x64 Edition Service Pack 2:

- Internet Explorer 7

- Internet Explorer 8

- Internet Explorer 9

- Windows Server 2008 for 32-bit Systems Service Pack 2:

- Internet Explorer 7

- Internet Explorer 8

- Internet Explorer 9

(Windows Server 2008 Server Core installation not affected)

- Windows Server 2008 for x64-based Systems Service Pack 2:

- Internet Explorer 7

- Internet Explorer 8

- Internet Explorer 9

(Windows Server 2008 Server Core installation not affected)

- Windows Server 2008 for Itanium-based Systems Service Pack 2

- Internet Explorer 7

- Windows 7 for 32-bit Systems and

Windows 7 for 32-bit Systems Service Pack 1:

- Internet Explorer 8

- Internet Explorer 9

- Windows 7 for x64-based Systems and

Windows 7 for x64-based Systems Service Pack 1:

- Internet Explorer 8

- Internet Explorer 9

- Windows Server 2008 R2 for x64-based Systems and

Windows Server 2008 R2 for x64-based Systems Service Pack 1:

- Internet Explorer 8

- Internet Explorer 9

(Windows Server 2008 R2 Server Core installation

not affected)

- Windows Server 2008 R2 for Itanium-based Systems and

Windows Server 2008 R2 for Itanium-based Systems Service

Pack 1

- Internet Explorer 8

- Windows 8 for 32-bit Systems

- Internet Explorer 10

- Windows 8 for 64-bit Systems

- Internet Explorer 10

- Windows Server 2012

- Internet Explorer 10

(Windows Server 2012 Server Core installation not affected)

Windows RT

- Internet Explorer 10

- Impact: Remote Code Execution

- Version Number: 1.0

Bulletin 2

- Affected Software:

- Windows XP Service Pack 3

- Windows XP Professional x64 Edition Service Pack 2

- Windows Server 2003 Service Pack 2

- Windows Server 2003 x64 Edition Service Pack 2

- Windows Server 2003 with SP2 for Itanium-based Systems

- Windows Vista Service Pack 2

- Windows Vista x64 Edition Service Pack 2

- Windows Server 2008 for 32-bit Systems Service Pack 2

(Windows Server 2008 Server Core installation affected)

- Windows Server 2008 for x64-based Systems Service Pack 2

(Windows Server 2008 Server Core installation affected)

- Windows Server 2008 for Itanium-based Systems Service Pack 2

- Windows 7 for 32-bit Systems and

Windows 7 for 32-bit Systems Service Pack 1

- Windows 7 for x64-based Systems and

Windows 7 for x64-based Systems Service Pack 1

- Windows Server 2008 R2 for x64-based Systems and

Windows Server 2008 R2 for x64-based Systems Service Pack 1

(Windows Server 2008 R2 Server Core installation affected)

- Windows Server 2008 R2 for Itanium-based Systems and

Windows Server 2008 R2 for Itanium-based Systems Service

Pack 1

- Windows 8 for 32-bit Systems

- Windows 8 for 64-bit Systems

- Windows Server 2012

(Windows Server 2012 Server Core installation affected)

Windows RT

- Impact: Remote Code Execution

- Version Number: 1.0

Bulletin 3

- Affected Software:

- Microsoft Word 2003 Service Pack 3

- Microsoft Word 2007 Service Pack 2 and

Microsoft Word 2007 Service Pack 3

- Microsoft Word 2010 Service Pack 1 (32-bit editions)

- Microsoft Word 2010 Service Pack 1 (64-bit editions)

- Microsoft Word Viewer

- Microsoft Office Compatibility Pack Service Pack 2 and

Microsoft Office Compatibility Pack Service Pack 3

- Microsoft SharePoint Server 2010 Service Pack 1

- Word Automation Services

- Microsoft Office Web Apps 2010 Service Pack 1

- Impact: Remote Code Execution

- Version Number: 1.0

Bulletin 4

- Affected Software:

- Microsoft Exchange Server 2007 Service Pack 3

- Microsoft Exchange Server 2010 Service Pack 1

- Microsoft Exchange Server 2010 Service Pack 2

- Impact: Remote Code Execution

- Version Number: 1.0

Bulletin 5

- Affected Software:

- Windows XP Service Pack 3

- Windows XP Professional x64 Edition Service Pack 2

- Windows Server 2003 Service Pack 2

- Windows Server 2003 x64 Edition Service Pack 2

- Windows Server 2003 with SP2 for Itanium-based Systems

- Windows Vista Service Pack 2

- Windows Vista x64 Edition Service Pack 2

- Windows Server 2008 for 32-bit Systems Service Pack 2

(Windows Server 2008 Server Core installation affected)

- Windows Server 2008 for x64-based Systems Service Pack 2

(Windows Server 2008 Server Core installation affected)

- Windows Server 2008 for Itanium-based Systems Service Pack 2

- Windows 7 for 32-bit Systems and

Windows 7 for 32-bit Systems Service Pack 1

- Windows 7 for x64-based Systems and

Windows 7 for x64-based Systems Service Pack 1

- Windows Server 2008 R2 for x64-based Systems and

Windows Server 2008 R2 for x64-based Systems Service Pack 1

(Windows Server 2008 R2 Server Core installation affected)

- Windows Server 2008 R2 for Itanium-based Systems and

Windows Server 2008 R2 for Itanium-based Systems Service

Pack 1

- Impact: Remote Code Execution

- Version Number: 1.0

Important Security Bulletins

============================

Bulletin 6

- Affected Software:

- Windows XP Service Pack 3

- Windows XP Professional x64 Edition Service Pack 2

- Windows Server 2003 Service Pack 2

- Windows Server 2003 x64 Edition Service Pack 2

- Windows Server 2003 with SP2 for Itanium-based Systems

- Windows Vista Service Pack 2

- Windows Vista x64 Edition Service Pack 2

- Windows Server 2008 for 32-bit Systems Service Pack 2

(Windows Server 2008 Server Core installation not affected)

- Windows Server 2008 for x64-based Systems Service Pack 2

(Windows Server 2008 Server Core installation not affected)

- Windows Server 2008 for Itanium-based Systems Service Pack 2

- Windows 7 for 32-bit Systems and

Windows 7 for 32-bit Systems Service Pack 1

- Windows 7 for x64-based Systems and

Windows 7 for x64-based Systems Service Pack 1

- Windows Server 2008 R2 for x64-based Systems and

Windows Server 2008 R2 for x64-based Systems Service Pack 1

(Windows Server 2008 R2 Server Core installation not affected)

- Windows Server 2008 R2 for Itanium-based Systems and

Windows Server 2008 R2 for Itanium-based Systems Service

Pack 1

- Windows 8 for 32-bit Systems

- Windows 8 for 64-bit Systems

- Windows Server 2012

(Windows Server 2012 Server Core installation not affected)

- Impact: Remote Code Execution

- Version Number: 1.0

Bulletin 7

- Affected Software:

- Windows Server 2008 R2 for x64-based Systems and

Windows Server 2008 R2 for x64-based Systems Service Pack 1

(Windows Server 2008 R2 Server Core installation affected)

- Windows Server 2008 R2 for Itanium-based Systems and

Windows Server 2008 R2 for Itanium-based Systems Service

Pack 1

- Windows Server 2012

(Windows Server 2012 Server Core installation affected)

- Impact: Security Feature Bypass

- Version Number: 1.0

Other Information

=================

Follow us on Twitter for the latest information and updates:

http://twitter.com/msftsecresponse

Microsoft Windows Malicious Software Removal Tool:

==================================================

Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

Non-Security Updates on MU, WU, and WSUS:

========================================================

For information about non-security releases on Windows Update and Microsoft update, please see:

* http://support.microsoft.com/kb/894199: Microsoft Knowledge Base

Article 894199, Description of Software Update Services and

Windows Server Update Services changes in content.

Includes all Windows content.

* http://technet.microsoft.com/wsus/bb456965: Updates

from Past Months for Windows Server Update Services. Displays all

new, revised, and rereleased updates for Microsoft products other

than Microsoft Windows.

Microsoft Active Protections Program (MAPP) ===========================================

To improve security protections for customers, Microsoft provides vulnerability information to major security software providers in advance of each monthly security update release. Security software providers can then use this vulnerability information to provide updated protections to customers via their security software or devices, such as antivirus, network-based intrusion detection systems, or host-based intrusion prevention systems. To determine whether active protections are available from security software providers, please visit the active protections websites provided by program partners, listed at http://www.microsoft.com/security/msrc/collaboration/mapp.aspx.

Recognize and avoid fraudulent email to Microsoft customers:

=============================================================

If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites. Microsoft does not distribute security updates via email.

The Microsoft Security Response Center (MSRC) uses PGP to digitally sign all security notifications. However, PGP is not required for reading security notifications, reading security bulletins, or installing security updates. You can obtain the MSRC public PGP key at https://technet.microsoft.com/security/bulletin/pgp.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications on http://technet.microsoft.com/security/dd252948.

********************************************************************

THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

********************************************************************

To manage or cancel your subscription to this newsletter, visit the Microsoft.com Profile Center at <http://go.microsoft.com/fwlink/?LinkId=245953> and then click Manage Communications under My Subscriptions in the Quicklinks section.

For more information, see the Communications Preferences section of the Microsoft Online Privacy Statement at:

<http://go.microsoft.com/fwlink/?LinkId=92781>.

For the complete Microsoft Online Privacy Statement, see:

<http://go.microsoft.com/fwlink/?LinkId=81184>.

For legal Information, see:

<http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by:

Microsoft Corporation

1 Microsoft Way

Redmond, Washington, USA

98052

If that doesn’t work… Call Homeland Secure IT at 864-990-4748 for real computer & server support and repair in the Greenville SC area!

What follows is a guest blog post from our friends at EPC, a company providing data destruction services for your end of life computer equipment.

What Does Free Really Cost?

You’ve met the “guy with the pick-up truck” that can take your PC in for free. All of us have. But where does your data on that PC “go?”

Even in a down economy, you have to take a longer look at what “free” means to you not only as a business, but personally. Every year, millions of dollars both outright and in reputation are lost by companies and people all over the world. What can you do to ensure that the data that makes you the company that you are stays safe? How can you protect the information, say from website transactions you make during the year, and trust that your data won’t fall into the wrong hands?

First things first: Let the guy in the pick-up truck drive off empty handed.

Data Destruction isn’t just drilling holes in hard drives or chopping them in half with axes. Today’s hacker can extract data from places you haven’t even yet imagined. It’s time to make sure that the data on your hard drives and electronic media are appropriately sanitized via a certified, NAID sanitation process;  this ensures all information on that drive is permanently  erased.

EPC, Inc. established in 1984, has been in the Data Destruction business for a long time, serving thousands of companies in North America. From the smallest Mom & Pop shop, to Fortune 100 industries, EPC, Inc. has not only the experience, but a proven track record of ensuring that the information that makes companies what they are never falls into the wrong hands.

Whether it’s our e-Steward-certified E-Scrap Processing Center, or our fleet of DDRV’s (Data Destruction Recycling Vehicles), EPC, will deliver the customized service to fit your Data Security needs.

Secure Data Erasure is the ultimate solution, but if your company is looking for another sound option in Data Destruction, EPC, Inc. features a series of HIPAA-compliant, NAID-certified processes that not only shred the materials to Department of Defense specs, but ensure that the materials go to the right place. EPC ensures responsible handling that adds even more security to a solution that will get you satisfied.

EPC, Inc. has recently teamed-up with John Hoyt of Homeland Secure IT, to offer customers in South Carolina a true solution to your IT Destruction needs.

Are you ready to do something different, that ensures the integrity not only of the data on your PCs, but also your reputation? Why not also help the environment at the same time?

It’s time to change the way you think about the end of your electronic assets inside and outside business. Let EPC, Inc. help you meet those needs.

Start your search for a solution now:  Call Eric Levy 636-443-1999
Or visit: http://www.epcusa.com

Our preferred remote backup solution provider is expanding in a big way!

Servosity, which is based right here in Greenville South Carolina, has made a commitment to create 30 new positions over the next 12 to 18 months. And these will be higher paying jobs with a much higher skill requirement.

We continue to use Servosity ourselves and provide their disaster recovery and backup services to our clients because they have one of the best offerings in the business. In addition to that, the money stays right here in the Upstate.

If you would like to find out more about how remote backup and disaster recovery solutions can protect your business data from catastrophic events, such as the recent hurricane that has pounded the East Coast this week, then please, give us a call at 864-990-4748 or use our contact form on the http://www.HomelandSecureIT.com website to arrange a free consultation.

We can protect one single desktop or laptop, or a Microsoft Exchange Server, or an entire network consisting of several servers and many computers with recovery of a lost system to new hardware possible within minutes!

For a price, you can have access to a Fortune 500 server and network according to an article on krebsonsecurity.com.

In the article, they explain hackers are creating a virtual services network of their own, using exploited / compromised / hacked systems sitting inside the corporate networks of Fortune 500 companies.

But it is not just the big corporations that are being compromised, it is businesses just like the one you work at or maybe own. The hackers are able to leverage holes in the operating systems of servers and weak passwords to gain full access, and then sell that access to others who might use your server to gain further access into your network, or simply setup a porn server, or a point where they can hack through your server to other servers elsewhere.

How do you protect yourself? Contact an IT professional who can assist you with an evaluation of your network.

Homeland Secure IT will work with you to help tighten up computer and network security as well as to help determine if your server has already been exploited. We can check your Microsoft Windows servers, RDP servers, firewalls and other common means of access for updates, apply them and determine the best way to keep your company network up to date without affecting your work flow.

Call us today at 864-990-4748 or use our CONTACT link on the website for more information.

You can read about the attack timeline and response here and the WSPA news article here.

If the State’s server can be exploited, what about you?

Do you host data on your company server and feel it is totally safe?

For instance, you have a Microsoft Exchange Server, which resides behind a firewall, and it does not host anything but email, so you feel it is safe?

Not so fast – An Exchange Server might be behind a firewall, but is that firewall up to date? It might be so old that the latest firmware and software cannot even be applied to it. More importantly, if your Exchange Server does not have all the latest patches to it, it might be vulnerable to attack, even though a firewall is present.

A large number of servers at businesses go unpatched, and unprotected, yet are exposed to the internet. It might be an FTP server, a web server, SQL database server, or Remote Desktop server.  They all require updates, patches and evaluation, to assure their continued security.

Should you have a question about the status of your Greenville or Upstate network’s security, please call us at 864-990-4748 and arrange for a consultation. We specialize in small and medium business networks, servers and computers and would be happy to work with you to discover what can be done to protect your business.  We’re also partners with some of the most respected security industry leaders, such as Cisco, Symantec, Trend Micro, WatchGuard, SonicWALL, and more!

Relying on Jesus for computer and network security will not protect you

I bet that title got your attention!

But according to a list of passwords examined, “Jesus” will not protect you, as it is on SplashData’s list of password’s that are considered unsafe due to the sheer usage of them. Obviously, “password” is the worst, followed by “123456″ and “12345678″.

I stole the following list of passwords from SplashData from the original article on cnet:

1. password (unchanged)
2. 123456 (unchanged)
3. 12345678 (unchanged)
4. abc123 (up 1)
5. qwerty (down 1)
6. monkey (unchanged)
7. letmein (up 1)
8. dragon (up 2)
9. 111111 (up 3)
10. bassball (up 1)
11. iloveyou (up 2)
12. trustno1 (down 3)
13. 1234567 (down 6)
14. sunshine (up 1)
15. master (down 1)
16. 123123 (up 4)
17. welcome (new)
18. shadow (up 1)
19. ashley (down 3)
20. football (up 5)
21. Jesus (new)
22. michael (up 2)
23. ninja (new)
24. mustang (new)
25. password1 (new)

If you are using any variation of these, we need to talk!  Honestly, if you are using simple passwords of this nature at all, then please call us at 864-990-4748 or use our contact form on the www.HomelandSecureIT.com website.

Business owners and those in IT departments of businesses in the Upstate / Greenville area of South Carolina can call us to schedule an evaluation of their computer and network security. We can help you secure your network, enforce user password strength and much more.  Please call us today and let’s take care of IT!

Apparently, hackers can turn your computer into a bomb and blow your family to smithereens.

If they can do this to your HOME computer, imagine what they can do with your more powerful work computer!  You better get updates on there, right now!

Seriously, if you need assistance with computer or network security for your Greenville or Upstate SC business or home office, let us know, we will be happy to evaluate your needs and take action that would keep you and your family from harm.

Not a pumpkin patch, but a Microsoft Patch!

Here we are, another Patch Tuesday, where Microsoft makes updates available to their products.

The Microsoft Security Bulletin Advance Notification for October 2012 indicates there are seven bulletins that will be addressed today.  They include:

1. Critical – Remote code execution – Affecting Microsoft Office and Microsoft Server
2. Important – Remote code execution – Affecting Microsoft Office
3. Important – Elevation of privilege – Affecting Microsoft Office, Microsoft Server Software, Microsoft Lync
4. Important – Remote code execution – Affecting Microsoft Office, Microsoft Server Software
5. Important – Elevation of privilege – Affecting Microsoft Windows
6. Important – Denial of Service – Affecting Microsoft Windows
7. Important – Elevation of privilege – Affecting Microsoft SQL Server

As always, we highly recommend these and *every* Microsoft related update be applied to your servers and workstations, without delay.

Please remember that failure to do so, leaves unpatched “holes” that can be leveraged to gain control of or access to your desktops and servers.

A network security evaluation should be performed frequently on your business network, and Homeland Secure IT will be happy to undertake this duty in the Greenville / Upstate SC area. Please give us a call at 864-990-4748 or use our contact form. We are Microsoft Small Business Specialists!

Here are a couple of common complains we hear, maybe one of these applies to you:

You have a wireless tablet (iPad, Android, Windows, etc), notebook / laptop, point of sale system, Voice over IP phone system, etc, and as you move around your business, you lose your wireless connection, momentarily bringing whatever you were doing to a complete stop until you connect again. Even the notifications about the loss of connection and connecting status drives you bonkers.

Your business is in a large complex, and has a number of wireless access points throughout the facility, but as you roam through the building or campus, your connection is momentarily lost and your device has to reconnect. During this reconnection or reassociation time, your phone call on a wireless VoIP phone is lost, or your connection from your iPad back to a hosted application is severed.

There is great coverage in certain areas of your building, but very poor in others, causing you to have to stand in just the right spot to keep your connection active. You might even have mental notes telling you not to walk into the break room while on the phone or you will lose your call.

The wireless network at your company is comprised of several access points, potentially from different manufacturers, each with different SSIDs and encryption keys, maybe one for each area of a campus, causing you to have several configurations in your wireless device and switch between them when you are in different areas.

Sometimes the problems are not as severe as outlined above, and sometimes there are not even considered a “problem”, because you are used to working around them, but if this sounds like something that affects you, causing you frustration in addition to lost productivity, then you will be happy to know, we can help with that situation!

We can put an end to lost and dropped wireless connections. No more delays as your device is handed off between one access point to the other.

We can consolidate your wireless network into one easy to manage unit, where configurations between access points are instantly updated (no need to log into 2, 3, or a dozen individual access points just to change a password).

We can increase your security by segmenting your work network from a GUEST network, allowing your visitors to have access to the internet, but not to your company files, keeping your data isolated, and you in compliance!

Wide area coverage? NO problem, we have a system  that is perfect for your business, larger corporation, hospital or health care facility and even school / college / university campus solutions!

We are partners with the biggest wireless equipment manufacturers in the business, including Aruba & Cisco!

Call us today at 864.990.4748 and put an end to your wireless troubles!

We would appreciate it dearly if you could be so kind as to refer your friends or business contacts to us, and if you have time, leave us a review on Google or even just keep us in your thoughts and prayers!

Ideal connections for us are small and medium businesses, from just a handful of people, to dozens of computers and even companies with multiple locations. Businesses who we work best with are law and medical offices, churches & non-profit organizations, manufacturing, and just about anyone with computers, servers, networks, voice over IP phone systems. We are even a great match for home based offices who rely heavily on their computers.

Know of a particular need?  A business considering a new server, phone system or maybe replacing a single computer or even a dozen of them? We’re perfect for that!

I know your time is valuable, but if you could help us out with a referral, I would appreciate it more than you know. Referrals and reviews help keep us busy and out of trouble.

Speaking of reviews…  When someone searches Google for “Greenville Computer Service” it doesn’t matter so much, but if they go to Google Places or search from something like “Greenville Computer Repair Shop”, they are presented with the local search listing, which DOES show reviews. A person who needs help will likely call the business with the highest number of reviews and the highest score.   Please help us by leaving a positive review for us.

You can find our reviews here:

https://plus.google.com/112683747267029712129/about?hl=en

In order to leave a review, you will have to convert your regular old Gmail account over to a Google Plus account (if you have not already), which is free, simple to do, and gives you a number of new networking tools to use yourself.  Once you have done so, you can leave a review.  Please consider marking us a “3″, if you have been happy with us!

If you already have helped with a referral or a review, you have my deepest gratitude!  THANK YOU!

John

If you are like most people, when everything is running well, you get comfortable and begin to do the job you were hired to do, so if you are the accounts manager and pull double duty as company IT administrator, chances are, you get back to doing what you do best – taking care of the accounts.  That is, until something comes along and throws a wrench in the works and your networking is not working.

But what about all those updates? Do you back-burner those until there is a good time to reboot the server? After all, rebooting the server takes everyone down, and causes your phone to light up with questions like, “When will I be able to access the X drive again?”.

During the time between updates, your server and other systems are vulnerable. It honestly may not be a matter of IF your network is compromised, but rather, WHEN.

Many non-dedicated IT admins will apply the updates but not reboot the server, or will wait until there are so many updates it may take 2 or three reboots to get everything applied. This is a very bad practice. Especially for servers facing the internet (Mail, SQL, Web).

What about backups?  You ARE backing up, and it does work properly, right?

Don’t get caught with your pants down.  Bring in an IT support company who can help you determine where you stand. Are you overworked and just unable to do it all? Consider an IT company who will provide you with a statement to that affect which you can provide to your manager or superior to document that there is additional work to be done.  Sure, you’ve told them time and time again, but maybe, just maybe, they might listen to an outside source.

Let Homeland Secure IT be that source of information. We’ll come in and take a look at the state of your network, provide suggested course of action, and can even quote the labor or upgrade of components (if required). Simply don’t have time to maintain all this gear and want to source it to someone who will be on top of it?  Then we’re on IT! Give us a call at 864-990-4748 or use the contact link above.

We provide complete IT service, sales and consultation to the entire Upstate of South Carolina. We’re your Microsoft, Cisco, Symantec, Trend Micro, Lenovo, HP partner, specializing in small and medium businesses (SMBs) just like yours!

“My computer is locked and a screen is displaying a message from the FBI saying I have to pay a fine in order to use it again”

“A window says I am in violation of the law for downloading media or port and says it is from the FBI”

One user in the know says, “I am infected with the Reveton FBI virus, can you remove it?”

Without question, this has been one of the more popular exploits we have seen so far this year.  It is called the Reveton virus, and is part of a Citadel malware payload that distributes a number of malicious software.

This is so popular that the FBI has had a “new internet scam” page up since August and this is an excerpt from that page that goes back to May 2012. (This is not new by any means):

The IC3 suggests the following if you become a victim of the Reveton virus:

• Do not pay any money or provide any personal information.
• Contact a computer professional to remove Reveton and Citadel from your computer.
• Be aware that even if you are able to unfreeze your computer on your own, the malware may still operate in the background. Certain types of malware have been known to capture personal information such as user names, passwords, and credit card numbers through embedded keystroke logging programs.
• File a complaint and look for updates about the Reveton virus on the IC3 website.

In addition to patching your systems, we recommend a bit of common sense, such as not visiting links which are sent to you in email that look suspicious. If it looks strange, it probably is.

—

National Cyber Awareness System
US-CERT Alert TA12-265A
Microsoft Releases Patch for Internet Explorer Exploit

Original release date: September 21, 2012 Last revised: –

Systems Affected 

* Microsoft Internet Explorer 6
* Microsoft Internet Explorer 7
* Microsoft Internet Explorer 8
* Microsoft Internet Explorer 9

Overview

Microsoft has released Security Bulletin MS12-063 to address the  use-after-free vulnerability that has been actively exploited this  past week.

Description

Microsoft Internet Explorer versions 6, 7, 8, and 9 are susceptible  to a use-after-free vulnerability. This vulnerability is being  actively exploited in the wild. Microsoft has released Security Bulletin MS12-063 to patch this vulnerability and four others.

This vulnerability was previously mentioned in US-CERT Alert  TA12-262A. Additional information is available in US-CERT  Vulnerability Note VU#480095.

Impact

A remote, unauthenticated attacker could execute arbitrary code,  cause a denial of service, or gain unauthorized access to your files or system.

Solution

US-CERT recommends that Internet Explorer users run Windows Update  as soon as possible to apply the MS12-063 patch.

References

* Microsoft Security Bulletin MS12-063
<http://technet.microsoft.com/en-us/security/Bulletin/MS12-063>

* US-CERT Alert: Microsoft Security Advisory for Internet Explorer Exploit
<http://www.us-cert.gov/cas/techalerts/TA12-262A.html>

* Microsoft Windows Update
<http://go.microsoft.com/fwlink/?LinkID=40747>

* US-CERT Vulnerability Note VU#480095
<http://www.kb.cert.org/vuls/id/480095>

Revision History

September 21, 2012: Initial release

—

As always, if you require assistance applying these security patches or have questions about your Greenville / Upstate, SC business computer and network security, please call us at 864.990.4748 or use the contact link in the menu above.

Look no further than Homeland Secure IT in Greenville South Carolina! We offer sales, service and support both home and business computers, servers and network components. We repair computers whether we sold them to you or not!

If you want to save money, bring your computer to us! People from as far away as Georgia and Knoxville, TN travel to our location for us to repair their desktop, notebook or other components. We have had computers shipped to us from the coast, and from the North East too!

By bringing your computer to us, we are able to reduce our rates to an unheard of 75.oo per hour. With FREE estimates.  Why so cheap? Because we do not have to dispatch a technician to your location to perform the service. However, if you are in the Upstate and need service, we will happily go to you.

Save some money, call us and arrange a time to come in.  We suggest you do not just stop by, because sometimes everyone is in the field performing service.

Call us at 864-990-4748 or use the contact form in the menu above.

We are partners with and offer for sale many different lines of computers too!  A few brands we sell and work with regularly are HP, Lenovo, Toshiba, Dell, Nexlink, Samsung, Acer, Asus, Sony, Microsoft, Cisco, Symantec, Trend Micro and a long line of others!

A few cities in the Upstate that people come from and we offer service to are Easley, Simpsonville, Six Mile, Clemson, Seneca, Duncan, Spartanburg, Anderson, Liberty, Taylors, Greer, Mauldin, Berea, Boiling Springs and anywhere within about an hour’s drive from Greenville.

• Initial outlay of cash
• Downtime during installation & migration
• Learning new software, time to train
• Double entry on two systems working simultaneously for a period of time
• Final migration to the new system after they see the new software working
• Lost revenue during this change-over

The list was actually longer than that, but I made it a little more concise in the interest of not boring you with details.

I then remembered a recent letter I received from one of our lending partners which says they offer Flex Plans, designed specifically to help out during times like this!

They can offer a 60 or 90 day “delay plan”, to keep cash flow at current levels until after the installation is complete.

That sounds like a winner to me! Maybe it can work for the client in question, and potentially someone reading this may have a similar concern and the knowledge that this is available could help.

Should your business be considering an upgrade of computers, servers or network equipment, please give us a call at 864-990-4748 or use the CONTACT link in the menu and let’s talk about what we can do for you!

It seems as though 400,000 user accounts and passwords have been exposed in the recently discovered breach, though it may be a while before the severity is truly known.

Our suggestion is to change passwords everywhere you might have used the same one as you used on Yahoo. In fact, just update your passwords.

If you are having a hard time keeping up with multiple sites, accounts and passwords, consider a password keeper or vault. Something like LastPass might work well for you.

Should you have questions about business computer or network security in the Greenville or Upstate SC area, please call upon us. 864.990.4748 or use the handy contact link above.

Greg received an email from a temperature sensor installed at a client’s location, exclaiming that it had hit the upper threshold that was set. It was over 80 degrees, very hot for a server room.

Greg logged into the monitoring system and determined that two sensors were both reading high, one indicated 82 degrees at the top of a rack, and one in the rack was still in the 70s, but climbing.

Without leaving his seat, he contacted the business, alerted them to the spike in temperature, which resulted in them quickly locating the cause and bringing the temp in the room back down.

The culprit was boxes stacked in front of the rack by another vendor, blocking the flow of air. Had we not been alerted, this situation would have quickly escalated beyond a simple inconvenience and into a full blown emergency. High temperatures can lead to component or even complete server failure, and costly downtime.

In essence, an temperature monitoring system that cost the client only a few hundred dollars, may have saved many thousands of dollars!

If you would like to be proactive and protect your network gear from disaster, please call us at 864.990.4748 or use our contact link above.  We can provide a full line of server and data room monitor products here in the Upstate and Greenville area of SC, along with installation and configuration. Temperature, humidity, air flow, intrusion, smoke, co2, water, video cameras and more are available!

Their advice is to change your password, and our’s is, if you are using the same login/password on multiple sites, then change all of those passwords too.

Corey Nachreiner over at our firewall security partner, WatchGuard, suggests the following actions:

• Change your password(s) after a security breach – If a site you use ever has a security breach where attackers gain access to passwords (hashed or not), change your password immediately.
• Use strong passwords – I believe passwords should be greater than 10 characters. One easy way you can create long passwords, with enough entropy, is by using passphrases, or more specifically something I call pass-sentences. WatchGuard’s Bud Logs In video talks about these concepts in more detail (and is good for basic end users).
• Use different passphrases on different web sites – This is crucial aspect of password security, especially when considering these types of web breaches. If you, like most people, use the same password for many different web sites, attacker could be able to gain access to all those accounts. If you have been using the same password everywhere, you should change it to a different password on every site. That said, many people find this advice hard to implement in practice; which brings me to the next tip…
• Leverage password vault software – Password vaults make it easier for you to manage multiple passwords securely. They are not perfect. If you use multiple machines and OSs, you may have trouble finding password management software that meets all your needs. Plus, password vaults become a single point of potential failure, as they almost literally store all the keys to your kingdom. It’s extremely important to use secure password vaults, and protect them. That said, they offer the only practical solution to managing multiple passwords today. This article suggests a few good ones to use (I have used 1password myself).

— Corey Nachreiner, CISSP (@SecAdept)

If you need assistance with password policies, password vault software or any other computer or network security related matter in the Greenville or Upstate, SC area, please call us at 864.990.4748 or use the CONTACT form above.