There are over 300 million fraudulent sign-in attempts to Microsoft cloud services every day.
More than 15 billion stolen account credentials are up for grabs on the Dark Web, with 5 billion of them considered unique, meaning that they haven’t been offered for sale more than once, according to research by Digital Shadows.
There are many valuable tips for keeping your business email secure, such as using strong passwords, security awareness training for your employees, avoiding public Wi-Fi, and utilizing effective antivirus software. Here are some additional tips that can add an extra layer of security for your organization.
1. Enable MFA:
Many people use the same password across multiple log-ins. Multi-factor authentication prompts a user for an additional form of identification upon sign-in such as a numerical code sent via text.
Even if a hacker has your email and password, they would need access to this code in order to log in.
2. Disable automatic forwarding to external email addresses:
This could be a big security risk. Let’s say a hacker has an employee’s email and password. They log into Microsoft 365 and set up the forward function to send all these emails to their personal Gmail account. Yikes!!
Think about the implications this could have with HIPAA laws or regulatory compliance not to mention data privacy.
3. Backup Microsoft 365 and Google Workspace:
M365 and Google Workspace do not provide protection against data loss due to hackers, ransomware, malware, malicious insiders, or departing employees.
An attacker may attempt to gain administrative access to your Microsoft 365 account via phishing and hold your data hostage. Make sure you have proper backups of your email to prevent data loss.
4. Disable International logins:
Another way to improve email security is to block logins from other countries. Hackers are global. At minimum block all countries except those that you do business with or have business travel to/from.
Everyone uses email for internal and external communication. It’s also an effective entry for hackers to access your domain, commonly via phishing attacks. Keep your email safe!
Teknologize is a SOC 2 certified, Professional Technology Services company with clients throughout the Pacific Northwest. We have offices located in:
Questions about your IT or Cybersecurity? Give us a call today!