Category: Thursday Tech Bytes

How to Reinstall macOS on Your Computer

If your Mac has been having problems or behaving erratically as of late, it might be time for a fresh install of macOS using Recovery mode and Disk Utility. A new install may also be useful if you have plans to give away or sell your Mac. In this case, you’ll want to remove your personal data and conduct a factory reset before your Mac leaves your possession.

Here’s how to go about reinstalling macOS on your computer using Recovery mode and macOS Utilities.

How Do I Reinstall macOS?

Important: Should You Back Up Your Data Before Reinstalling macOS?

Even if you’ll be keeping your computer in your possession and won’t be wiping data, it’s always a good idea to back up your Mac before reinstalling macOS. That way, in the event of an error, you can be sure your private documents, pictures, and more will remain safe. Backups can be performed using either a separate hard drive or the cloud.

Before Your Begin: Which macOS Version Do You Want Reinstalled?

The following instructions will help you reinstall the latest macOS version that’s been installed on your Mac. Please note that if you prefer to install the latest compatible version of macOS or alternatively, the first version of macOS that originally came with your Mac, you should search for those specific instructions.

Follow These Steps

Step 1: Start by entering Recovery mode on your Mac. To do this, navigate to the Apple icon in the top left corner of your screen, and click “Restart…”. This will shut down your computer and immediately start it back up again. As soon as you hear your computer start to come back on, press and hold down one of the following key combinations:

• On Intel Macs: Command + R
• On M1 Macs: Power button*

*Hold the power button until you see a startup window appear with options available, and click “Options” and then “Continue”.

Step 2: You’ll see the macOS Utilities window open. For those wiping their disk, navigate to “Disk Utility” and then click “Continue”. If you do not plan to wipe your disk, pause here and move on to Step 8.

Step 3: Erase the desired volume. For Macs with any operating system older than Catalina, simply delete the volume titled Macintosh HD. For Macs that have Catalina or any operating system that came after Catalina, you’ll be required to delete the following two volumes:

• Macintosh HD
• Macintosh HD-Data

First, delete Macintosh HD-Data. Next, delete Macintosh HD.

Step 4: If your current macOS version is Catalina, Mojave, Big Sur, or (in most cases) High Sierra, select the format APFS. If your current macOS version is older than these, select the macOS Extended (Journaled) format.

Step 5: For the Scheme, choose GUID Partition Table. Keep in mind that if you only have the volume selected, the Scheme won’t be something you have to worry choose.

Step 6: Select “Erase and wait”.

Step 7: Press Command + Q to quit. Alternatively, select “Disk Utility” and then click “Quit Disk Utility”.

Step 8: Looking at the Utilities window before you (note: if you’ve just wiped your computer following the above steps 2-7, the Utilities window will be appearing for the second time). In either case, select “Reinstall macOS” and wait until the process has completed.

Use the steps above to reinstall macOS on any Mac. Keep in mind that this process should be completed during a time in which you can devote your full attention to it. While you won’t have to stare at your screen throughout the actual reinstallation process, you should be nearby in the event that any troubleshooting is needed.

Key Insights From Cybersecurity Trends and Stats for 2021

Cybercrime is a hot topic that makes news headlines and attracts the corporate world and individuals’ attention. According to the Federal Bureau of Investigation (FBI), there was a 75 percent increase in breaches since the Covid-19 health crisis started through June 2020.

On the other hand, Google reported more than 19 million phishing attempts daily. It blocked these email attacks during the onset of the coronavirus outbreak. Cybercriminals targeted businesses and individuals by impersonating prominent organizations, such as the United Nations and the World Health Organization (WHO).

These trends show a persistent rise in cybercrime activities globally in recent years. Bad actors are increasing their activities in tandem with the growing number of businesses establishing an online presence.

Hence, decision-makers need to analyze critical 2021 cybersecurity statistics. Doing so makes it easier to understand the evolution of the threats and implement robust countermeasures.

Tech experts urge companies to focus on three cybersecurity trends in 2021:

• Ransomware
• Cyberattack surface (internet of things (IoT) supply chain and remote work systems)
• Threats to IT infrastructure

A Closer Look at Cybersecurity Stats

Here is an overview of stats by type of attack and industry to give you a clearer picture of cybersecurity trends.

Malware and Ransomware Statistics

Criminals are continuing to increase the number of malware and ransomware attacks on businesses of varying sizes. If you fail to protect your business from these attack vectors, the financial cost and reputational damage can be significant. According to recent reports, organizations lost approximately $20 billion in 2020 alone.

Social Engineering Attacks

This attack vector is another problematic area with many breaches reported in 2020. Bad actors employ various techniques, including tailgating, baiting, and phishing.

Hacking Attacks

When it comes to hacking, cybercriminals were more active in 2020 than in the previous year. During the first quarter of 2020, Microsoft detected breaches of over 250 million sensitive records. Meanwhile, a Twitter account breach resulted in the loss of $130 million.

Industry-Specific Cybersecurity Statistics

Bad actors target companies in various sectors, with small businesses bearing a significant portion of the brunt. Up to 43 percent of small enterprises lack cyber defense measures to prevent attacks. Ignorance contributes to high levels of complacence by small business owners.

According to Comparitech, public companies that become victims of breaches lose approximately 8.6 percent of their value.

Healthcare

A healthcare data breach report published in the HIPAA Journal revealed that cybercriminals stole more than 9 million medical records in September 2020 alone. This figure represents a 300 percent increase when considering the monthly average in the healthcare sector.

Education Sector

A significant portion of attacks in this sector involves social engineering and ransomware. The Verizon cybersecurity report revealed that educational institutions suffered up to 228 breaches in 2020. Many employees in the sector failed phishing tests owing to the lack of cybersecurity awareness training.

Financial Services

The majority of attacks (71 percent) have a financial impact on the targeted institutions. Criminal activities result in losses of more than $18 million annually. Some attacks occur despite the presence of specialized threat detection teams. On the other hand, roughly 31 percent of employees in the financial sector failed a phishing test.

Threat Prevention

The ever-increasing variety of cyber threats require a holistic response to maximize threat prevention. Investing in advanced intrusion detection tools is vital to ensure network security. Also, consider deploying advanced malware protection measures and supplemental endpoint security to safeguard your systems.

Unlike in the past, over-reliance on perimeter security no longer provides maximum protection. For this reason, opt for advanced solutions that replace traditional antivirus programs and firewalls. Examples of advanced measures include:

• Next-generation intrusion prevention system (NGIPS)
• URL filtering
• Next-generation firewalls (NGFWs)
• Application visibility and control (AVC)
• Advanced malware protection (AMP)

These solutions play a critical role in securing the perimeter, providing robust protection against common threats. Leverage threat intelligence to enhance your cybersecurity technologies’ capabilities. A combination of visibility and protection measures makes it easier to thwart threats.

Threat intelligence helps your IT team determine whether unknown files are malicious or not. In the end, you increase the number of unknown threats that your system understands.

An additional way to improve cybersecurity measures and prevent hackers from compromising your systems is partnering with external IT service providers. Outsourcing bolsters your internal capabilities and contributes specialized technologies that enhance overall protection.

Here Is Why Windows Virtual Desktop Is Better Than Traditional Virtualization Solutions

Windows Virtual Desktop (WVD) allows your business to leverage either a multi- or single-user Windows 7 or 10 experience. The service also incorporates Office 365 ProPlus. You can count on WVD to help centralize monitoring and management functions. On the other hand, your organization’s system admins can use Azure Cloud to deploy and manage your company’s Windows servers, desktops, and apps.

WVD leverages Microsoft’s enterprise security solutions to maximize data protection. In turn, your organization scales virtualization requirements without worrying about security. The service provides a cost-effective solution, thanks to the subscription pricing model. Additionally, your team enjoys a richer virtualization experience than the Remote Desktop Services (RDS) platform.

Windows Virtual Desktop (WVD) Benefits

When it comes to traditional virtualization tools versus Windows Virtual Desktop (WVD), the latter provides several advantages over traditional solutions.

Here are the key benefits of switching to Windows Virtual Desktop (WVD).

Reduces Costs

Migrating your organization’s apps and desktops to Azure using the Windows Virtual Desktop service is a viable way to reduce costs. The service enables savings by improving the utilization of critical, cost-intensive resources. Session-based desktops operating on Azure Virtual Machines are more cost-effective.

Microsoft simplifies licensing by eliminating the need for an additional client access license to use Windows 10 via WVD. Server operating systems typically require additional licenses.

Enhanced Compatibility With Office 365

By switching to Azure via Windows Virtual Desktop, your organization benefits from a comprehensive array of cloud-based applications and resources. The best part is that WVD ensures improved integration with wide-ranging Office 365 products. Enhanced compatibility helps improve overall performance in virtual desktop environments.

The boost in performance also applies to additional apps that need reduced latency. Graphics processing capability allows graphics-intensive apps to function optimally in the virtual desktop environment.

Improved Flexibility

Cloud-based solutions like Windows Virtual Desktop simplifies various tasks for end-users and IT staff. Teams benefit from improved flexibility by conveniently accessing the business apps and desktops from any device, browser, or location. Office 365 applications integrate seamlessly with the service, enriching the user experience.

On the other hand, migrating to the cloud reduces IT staff’s workload as they no longer spend increased time managing local networks and physical machines. WVD also makes desktop applications easier to manage, thanks to Windows 7 and 10. Thus, Tech experts create personal and persistent desktops using desktop images.

WVD enhances scalability and flexibility by storing apps and user profiles in different containers.

Persistent and Non-Persistent Desktop Virtualization

With Windows Virtual Desktop, you can take advantage of support for persistent and non-persistent states. The service also supports multi-session and dedicated modes. In addition, users enjoy application and full desktop virtualization experiences.

Stateful VDI or persistent virtual desktop infrastructure allows individual users to operate a dedicated virtual desktop with personalized settings. This state benefits users due to the consistency of custom settings and desktop functionality. In turn, your team members adapt to the virtual desktop environment faster.

However, persistent VDIs are storage-intensive due to the extensive customization and sophisticated desktop image management. It simplifies image management using a centralized portal.

When it comes to non-persistent virtual desktop infrastructure, the system deletes user settings and data at the end of each session. As such, all new sessions deploy a new desktop image. This state minimizes the storage requirements and simplifies image management. You can opt for the non-persistent VDI if you need advanced security and want to reduce storage requirements.

Both persistent and non-persistent VDIs provide a more user-friendly experience. Non-persistent systems rely on FSLogix technology to mimic the user-friendliness of persistent VDIs. Additionally, you can count on non-persistent VDIs to link user profiles to specific computing environments. It attaches the profiles dynamically.

Windows Virtual Desktop Use Cases

With WVD, you find it easier to comply with regulatory requirements and standardize operations. Furthermore, the service allows you to boost workforce flexibility and handle specialized workloads more efficiently. A wide selection of businesses rely on Azure WVD to enhance their remote and office-based teams’ operations.

Windows Virtual Desktop provides a unified solution capable of serving the needs of call center staff, organizations with BYOD policies, and remote staff. The service ensures flexibility by allowing the workforce to use different types of devices. It also helps companies in highly regulated sectors, such as finance and healthcare, meet specific compliance requirements.

Transfer or Backup Google Authenticator in Few Easy Steps

Two-factor authentication (2FA) plays a critical role in mitigating cybersecurity risks posed by bad actors. This method bolsters access controls by requiring a two-step identity verification when signing into applications. Google Authenticator simplifies this process by enabling users to verify their identity using a smartphone.

When switching to a new phone, you need to transfer the keys. The app maximizes security by ensuring that keys are specific to one device. On the other hand, it does not come with a backup function. By doing so, Google mitigates the risk of cybercriminals gaining unauthorized access to the codes.

However, the lack of a backup function can create significant issues when your smartphone gets broken or lost. With the Google Authenticator app empty, you cannot access specific websites or apps using the two-factor authentication.

Backup Options

Thankfully, you can still take advantage of alternative backup options. Here are viable ways to backup Google Authenticator codes.

Write Down the Code

One practical way to backup the code without compromising security is by writing it on a piece of paper. This method eliminates the need for a printer or another mobile device. On the downside, this approach is nonviable on websites that only show the QR code.

Take a Screenshot

Taking a screenshot is another backup option that allows you to store the code on a separate device. This approach makes it easier to re-enter or rescan the code when visiting specific websites that require two-factor authentication.

This method’s advantage is that it is quick and easy, but hackers may still find and compromise the file on your computer. To store the Google Authenticator code securely, consider moving the file to a USB stick.

Backup Code Using a Separate Device

If you have an extra phone, use it to store the code by either scanning or manually entering the QR code. The additional mobile device can be your old phone, your partner’s smartphone, or a work device. This option allows you to backup the codes easily. However, if you backup using a device that you regularly carry while on the go, it is possible to lose both phones resulting in a problem.

Transferring Google Authenticator to a New Phone

To transfer Google Authenticator easily and conveniently, take advantage of the app’s transfer tool. For this process to work seamlessly, ensure that the source and target devices have the latest Authenticator version.

Start the process by tapping the menu icon on the source smartphone before selecting Export accounts and entering the PIN code. Once you verified your identity with the PIN code, select the accounts you intend to transfer and tap Next.

On your target device, open Google Authenticator and tap Get Started before selecting Import existing accounts. You can find this section at the bottom of the screen.

Proceed to the next step by selecting Scan QR code. If the source device has multiple codes that require scanning, simply follow the prompts to complete the transfer process. The system confirms all successful transfers.

If you transfer Google Authenticator from an iPhone, you need to complete additional steps to move the codes successfully.

Transferring Codes Without the Google Authenticator Transfer Tool

In the event that the transfer tool fails to move the accounts, you can resort to the traditional method. This approach entails transferring Authenticator manually by moving accounts one by one.

For this process to work, you should install the application on your new device. Sign in to your Google account via the multi-factor authentication website. You must visit the site using a desktop device. Once you have logged into the account, grab both your mobile phones to begin the transfer process.

In the Authenticator app section, select the Change phone option before entering the type of mobile phone. After that, follow the prompts. Once you complete this stage, scan the code on Google’s authentication website via the application. Verify that the transfer worked correctly by entering the six-digit code. If everything goes well, the codes on the source mobile device become invalid.

You should repeat the same process with all accounts that use Google Authenticator, such as Amazon, Apple, and Facebook. Avoid removing the app from the source smartphone until you have transferred all accounts to the new device. Deleting the Authenticator application before completing all transfers can result in getting locked out of the remaining accounts.

How to Onboard Remote Employees More Efficiently

As more companies switch to remote work, employers need to embrace the best onboarding practices to enhance new hires’ experience. Alignment involves updating various tools and processes to ensure seamless onboarding. Additionally, organizations are working tirelessly to leverage productivity hacks for remote teams.

Onboarding new employees remotely change the entire experience for both sides. Hence, the company’s approach to onboarding new hires makes a significant difference. A recent Price Waterhouse Coopers (PwC) survey in the US revealed that more than 30 percent of managers found coaching and onboarding new employees more challenging since that pandemic started.

This reality compels companies to adopt viable policies and approaches to resolve remote onboarding challenges. Resolving these issues is critical, given that the remote work trend will continue into the foreseeable future.

On the other hand, streamlining the remote onboarding process comes with significant benefits. These advantages include reducing training or coaching time and increased retention rates. New hires are more likely to stay on the job if the onboarding process helps them understand roles and responsibilities. Well-planned remote onboarding enables new team members to build a connection with colleagues.

Remote Onboarding Best Practices

Onboarding remote employees involve a relatively different process than the traditional procedure. When handled appropriately, the virtual process helps new employees feel a sense of belonging. Thus, schedule several virtual meetings to ensure effective communication. Interactive seminars and training courses help familiarize themselves with organizational processes.

Here are the best practices to onboard remote workers more effectively.

Invest in the Right Technology

The first step to ensuring a smooth onboarding process is to invest in the right technologies, such as Microsoft Teams and Zoom. These tools provide a reliable and secure connection when conducting training and interactive seminars. They provide chat and video meeting functionality to suit your organization’s needs. However, you should ensure that the new hires know how to use these communication tools.

Set Onboarding Goals

Unlike in-person onboarding processes, virtual introductions require more than just a warm welcome. You need to create a comprehensive list of objectives and procedures to enhance the new employee’s experience. Onboarding virtually may make some individuals feel uncomfortable asking questions. Thus, share the onboarding plan before the scheduled video call. In doing so, you ensure that the new team member knows what to expect.

One of the best ways to prepare for the sessions is to compile a detailed checklist of tasks and objectives. For instance, you can plan to complete human resources paperwork, set up Microsoft Teams accounts, and liaise with relevant stakeholders by the end of day one. You can also target to conduct security training and help the new employee get a feel of various tools by the end of the first week.

Host Virtual Introductions

Hosting a meeting between new hires and the rest of the team helps new members feel welcome and break feelings of isolation. Scheduling the video calls allows you to explain the team structure and generate enthusiasm. In the end, the entire team gets a sense of shared goals.

Help the new staff members remember people’s names easily by providing resources to refresh their memory. One way is to present them with a document listing the team members’ names (including photos), contact details, and position in the company. The document can also outline the organizational structure. Update the resource regularly to ensure accuracy.

Meeting people via video call makes it difficult to remember the names of team members. The process can be overwhelming.

Integrate Company Traditions Into the Onboarding Process

If your company has longstanding traditions that enrich the onboarding process, find ways to integrate them into interactive seminars and virtual training sessions. For instance, you can give new hires gift cards to local eateries if your company provides complimentary lunches on specific days. Likewise, you can host happy hours via video conferencing platforms like Microsoft Teams.

Assess Employees’ Feedback

Once the new hires complete the onboarding process, ask them for feedback. You can achieve this objective by asking the new team members to complete a short survey. In the survey, they can highlight likes and dislikes about various aspects of the onboarding procedures. In addition, encourage the employees to share ideas on how to improve remote onboarding.

Schedule Ongoing Check-Ins

Regularly checking in with the new staff members allows you to identify any issues and resolve them. Doing so ensures that the new hires feel connected to the onboarding process. Also, pair new team members with carefully selected mentors. This approach allows the new remote staff to avoid feeling isolated.

Has Your Organization Been Breached By Solarwinds Malware?

Although mainstream media coverage of the massive Solarwinds hack seems to indicate the danger is over, the sophisticated hackers may still be hiding in plain sight.

Microsoft recently uncovered at least three strands of malware deployed by the alleged Russian hackers. This new revelation raises alarms across industries that the Solarwinds attacks may not be over. The question business professionals need to be answered is whether their network has been breached and if cybercriminals are actively copying and selling digital assets on the dark web.

What Is The Solar Winds Hack?

Highly skilled cybercriminals reportedly penetrated a Solarwinds system known as “Orion.” These stealth hackers managed to insert malicious code into its software products that were inadvertently dispersed to the outfit’s 33,000 customers in the form of updates.

This code created secret backdoors that allow digital thieves and spies to infiltrate wide-reaching networks, including government agencies such as the Department of Homeland Security and Treasury Department, among others. The so-called Solarwinds attacks were not limited to government targets. Malicious code has been identified in private sector organizations, and the full breadth of the cyberattacks remains unknown.

So pervasive and potentially destructive is the Solarwinds attack that congress held hearings to get a handle on its business and national security implications. Under intense questioning by lawmakers, an official from the Solarwinds reportedly blamed the breach on an intern who ignored the corporation’s cybersecurity protocols. According to news reports, the intern used the weak password “solarwinds123” and posted it online. Cybersecurity experts attribute upwards of 95 percent of breaches to human error.

Who Has Been Impacted By The Solarwinds Attacks?

To say the attacks blindsided private businesses and government agencies would be something of an understatement. Government-vetted firms such as FireEye were compromised due to the sophisticated methods used to hide the malicious code in software updates. The widespread embarrassment from organizations previously considered among the most secure has led many to believe critical information continues to be withheld. Much of the information released about the devastating breaches fails to identify the organizations that have been breached.

On the one hand, working with Solarwinds as a vendor or customer does not necessarily mean that an organization suffered a breach. But by that same token, the supply chain nature of the cyber-attack suggests that outfits outside direct Orion software users could be infected right now. That’s largely because congressional hearings and investigative reports indicate the hackers possess heightened skills, appear well-funded, and demonstrate a determination to hide in networks as long as possible to pilfer off digital assets and valuable personal data. Solarwinds appears to be an ongoing cybersecurity nightmare that should worry industry leaders.

How To Know If You Suffer A Solarwinds Breach?

As Microsoft and others continue to ferret out malicious strands of code, cybersecurity responses are being developed. Industry leaders who are concerned their organization may have been compromised enjoy access to open-sourced CodeQL queries. These are being rolled out by Microsoft to investigate incidents of Solarwinds Orion Malware laying hidden in networks.

Microsoft offers concerned parties free access to its cybersecurity software that was crafted to hunt down this malware. Decision-makers would also be wise to take the following proactive measures to ensure the integrity of their digital assets.

• Enforce Strong Password Policies
• Use Multi-Factor Authentication For Employee Login
• Backup Data To Cloud & Offline Resources
• Monitor Third-Party Controls & Interactions
• Develop A Company-Wide Cybersecurity Policy
• Require Employees To Undergo Cybersecurity Awareness Training
• Maintain Enterprise-Level Firewalls & Virtual Private Networks

The Solarwinds attack highlights how clever, well-financed hackers can infiltrate seemingly impenetrable defenses such as the Department of Homeland Security. That’s why it’s essential for organizations to harden their cybersecurity defenses and deter emerging threats. However, the average business with even sound cybersecurity protections in place was no match for these Russian hackers. If you are concerned your network has been compromised through the Solawinds supply chain or by other threat actors, contact a cybersecurity expert and have your system analyzed and penetration tested.

Can You Automatically Record Microsoft Teams Meetings?

If you’ve ever been annoyed by the fact that every time you start a new meeting with Microsoft Teams, you have to manually enable the program to record the meeting for later use, you’re not alone.

A quick Google search will show you that this question — and the frustration that goes along with it —is all over the Internet. Moreover, with Microsoft Teams being used more now than ever before because of COVID-19, the issue has become even more pressing.

The truth is most people who use Microsoft Teams want to be able to automatically record their meetings, and why wouldn’t they? Recorded meetings can be used for follow-up studying when teaching virtual classes, and they’re often needed for legal reasons in order to ensure industry compliance. Plus, some people just like to have their recorded meetings on file in case they need to go back and revisit a topic or concern that was already discussed.

So, let’s get to the question at hand: Can you automatically record Microsoft Teams meetings?

Well, you’re probably not going to like the answer we have for you.

If you’re looking for a way to automatically record Microsoft Teams meetings, you are unfortunately out of luck. Alternatively, you’re simply going to have to wait because this feature doesn’t currently exist.

Why Can’t You Automatically Record Microsoft Teams Meetings?

This is a question we can’t quite answer, but if you do ever find out the reason why Microsoft Teams has not allowed users to automatically record meetings, please let us know.

Otherwise, you’ll have to ask Microsoft and their engineers about it.

Manual Meeting Recording: The Struggle Is Real

Naturally, the fact that you can’t automatically record Microsoft Teams meetings is a problem for many people. Even though recording is still an option if you do it manually, it’s easy to forget to set this feature up before starting the meeting. When this happens, you’re completely out of luck. Indeed, there’s no way to go back in time and record a meeting that’s already happened.

The Internet at large is frustrated with this. Any company or individual user who uses Microsoft Teams on a regular basis has probably wondered about this feature. Many of these individuals and employees have voiced their concerns on Reddit and Microsoft Teams forums. You can find lengthy back-and-forths between everyone from tech experts and software engineers, to professionals and laypeople — all trying to figure out the best way to code in this feature or use a third-party program that will enable the automatic recording.

What Should You Do if You’re Frustrated by Teams’ Lack of Automatic Recording?

For many, the only alternative is to use a different video conferencing program like Zoom.

Zoom came on the scene relatively quickly after COVID-19 caused basically everyone to start working and video conferencing from home. Many people like its easy-to-use interface and modern features — one of which is the ability to automatically record meetings.

You can go into the settings on Zoom and predestine all video conferences, meetings, classes, and sessions to be recorded. Alternatively, you can choose only certain types of meetings, conferences, etc. to be recorded.

If you like Microsoft Teams, however, or if your company or organization uses Microsoft Teams and doesn’t want to change, there’s really nothing to be done right now. You simply have to wait for Microsoft to catch up and add this feature to the program. A few commenters have hinted that there’s talk of adding the auto-record feature at Microsoft. Unfortunately, nothing firm or official has been released as of now.

For most of us, therefore, we’ll probably just continue to leave sticky notes on our screens that read “don’t forget to record the meeting!” Until the next update … fingers crossed!