Four items from the past week that matter to businesses running networks, phones, cameras and AV on the Gulf Coast. Short on hype, long on what to actually do.
Data & Compliance
A certificate provider disclosed a breach of business customer contact data
DigiCert, one of the largest SSL/TLS certificate authorities, disclosed that an internal archive left reachable after a migration exposed business customers' contact information, and the access went unnoticed for an extended period.
What it means for you: Expect convincing phishing emails that look like certificate renewal or validation notices. Renew certificates only by logging in to your provider directly, never from an emailed link.
Source: SecurityWeek
Data & Compliance
More breaches are starting at the vendor, not the business
A consumer brand notified customers in the US, UK and Australia after a third-party marketing software vendor gave an unauthorized party access to customer data. It is part of a steady pattern of incidents that begin with a supplier's system.
What it means for you: Make a short list of every outside platform that holds your customer data (email marketing, POS, booking, CRM) and turn on multi-factor authentication for each. Remove access for vendors you no longer use.
Source: Tech Insider
Industry & Product News
Wi-Fi 7 is moving into everyday gear, and it changes the cabling
Wi-Fi 7 routers are now shipping in mainstream residential kits, and enterprise access points are following. Several higher-end Wi-Fi 7 access points need 802.3bt PoE to run at full capability, and current guidance treats Cat6A as the baseline for new access point drops.
What it means for you: If you are building out or renovating in the next year or two, pull Cat6A to ceiling access point locations and size switch PoE budgets for 802.3bt now. It costs far less than re-cabling later.
Source: Extreme Networks, The Gadgeteer
Data & Compliance
HIPAA Security Rule update: still proposed, still coming
The major update to the HIPAA Security Rule has not been finalized, and published timelines for the final rule vary. The proposal does not exempt small practices and includes regular vulnerability scanning, annual penetration testing and yearly compliance reviews.
What it means for you: Medical, dental and therapy offices do not need to change anything today, but this is a good time to document your network, confirm backups are tested and know who your business associates are. It will make the eventual deadline painless.
Source: HIPAA Journal
Insights & News is a weekly roundup from Destin Enterprise Systems. Questions about anything here? Call 850-502-8567 or book a quick call.