Your Monthly Biz Tech Roundup from Seeto
Welcome to the November edition of Take Ctrl! Cyber Security Awareness Month has come to an end, spooky season has passed and, at the time of sending, there are fewer than 50 sleeps until Christmas. So gobble gobble (that’s a Thanksgiving reference, for the Americans among us) this month’s news and views that matter from the world of business technology.
Our featured solution this month is CyberSmart, the leading platform for Cyber Essentials compliance.
With big announcements from Apple, Google and Microsoft, the Seeto Take takes a brief hiatus this month.
Need To Know Now
Microsoft 365
OneDrive gets a web and sync facelift
It’s curvy, it’s pastel and it’s OneDrive’s new look. With a new look and new features online and in your OneDrive Sync folder, we like the new People and Meetings view, which should make it easier to find OneDrive files. Folder colours are nice if you like that sort of thing and the speed improvements are very welcome. Unsurprisingly, AI Copilot features will also soon be arriving for subscribers.
Read more at The Verge
Read more at Petri IT Knowledgebase
View the launch keynote at YouTube
You get Loop! You get Loop! None for Education, E1 or Business Basic
Microsoft recently announced how it’s new Loop app, a next-generation cocreation experience that brings together teams, content and tasks, will be licensed. Microsoft will be applying the change from March 2024, with users requiring one of four Microsoft 365 licences to continue using it: Microsoft 365 Business Standard or Premium, or Microsoft 365 E3 or E5. Notably absent are Office 365 and 365 for Education plans.
Read more at Office 365 IT Pros
Read more at Microsoft Support
It’s teams, but not as we know it
Microsoft has overhauled Teams, but you may not have all the new goodies yet. In two big upgrades to Microsoft Teams, Microsoft is rolling out a revamp of its Channels features and a whole new “new Teams” app. The channel changes include a refreshed user interface along with other features, like conversations view, to help users get more out of channels. In addition, Microsoft has also released a faster and redesigned Teams app for Windows and Mac. Support needs to be enabled by administrators (Seeto’s customers are good to go), so some users may experience error messages when connected to partner Teams instances as an invited guest. It looks like we’ll need to keep Teams Classic installed for a little while yet.
If you’re going to bulk send from Outlook, manage your reputation
Please don’t use your corporate email domain for bulk email, use a specialist solution and a subdomain of your corporate email domain. If you insist, Microsoft 365 users have been warned of new Google anti-spam rules, which require sent emails to be authenticated in order to land in Gmail inboxes. Seeto clients are already covered in this area, but should speak to their TOM about better solutions if they’re bulk mailing from Outlook.
Security
Longer passwords aren’t a panacea
Don’t get us wrong, your passwords should, like Andrex, be long, strong and only used once. That said, it doesn’t matter how long your password is if you give it away through phishing or reuse it elsewhere. If your team is struggling with short passwords or reusing passwords it might be time to consider a password manager.
2023 was a summer of sin for ransomware gangs
After a slightly quieter 2022, ransomware attacks are up across almost all sectors according to an NCC Group study. Interestingly, the study also noted that highly regulated industries bucked the trend, likely in part to higher security budgets.
Keeping schtum on cyber attacks
Research from Keeper Security suggests that cyber attacks are grossly underreported across the US and Europe. The study found that in organisations where leaders create a culture of transparency, honesty and trust, breaches were more likely to be reported than where staff feared repercussions.
Okta for individuals
Following the acquisition of password manager Uno, Okta is continuing to develop a personal tier offering. Uno was founded by an ex-Googler to bring a design-centric approach to improving password management. The Uno app will be discontinued.
Web traffic weaponised to cause nuisance
Google, Amazon and Cloudflare have spoken out about the internet’s largest-known denial of service attack, where web traffic is weaponised to stop legitimate visitors from accessing websites. Not only the size, but the number of attacks has increased significantly, with records being broken in Q3 2023. Recent attacks have exploited a vulnerability in HTTP/2 and the internet companies are urging businesses to update their web server software to counter the threat.
1Password highlights supply chain vulnerabilities
1Password’s Okta instance was accessed by hackers, but logins are safe. Highlighting the importance of supply chain security, 1Password reported that it detected suspicious activity on its Okta instance related to Okta’s Support System incident. The incident has not changed Seeto’s position on Okta or 1Password.
Researchers demonstrate Apple Safari data exfiltration exploit
Researchers have released information on a means of exfiltrating data from Apple’s Safari on Apple Silicon iPhones, iPads and Macs. Mac users who don’t use Safari are safe, but all browsers on iOS are theoretically vulnerable to this exploit. To fall victim, users would have to visit an attacker-controlled web page and tap somewhere on that site to open the attacker’s target information in another tab. The researchers believe this would cause alarm bells and combined with glacially slow data transfer, the real world application of the vulnerability is limited. Apple have yet to release a software update to address the issue.
Malicious insider threat growing in the face of economic uncertainty
Insider threats are on the rise as economic uncertainty continues and worse still, business leaders don’t fully understand insider threat, according 2023’s ISC2 Cybersecurity Workforce Study. This comes against a backdrop of cyber-related cutback, including layoffs, budget cuts and hiring or promotion freezes, and a skills gap of 4 million professionals.
Digital Workspace
Zoom sets its sights on documents
Zoom is focusing its efforts on new products, starting with a fully-integrated, AI-powered, multi-user cloud documentation solution that is built directly into the Zoom platform. The diversification of SaaS platforms continues, with Zoom seeking to become your everything app. Zoom will face tough competition from Notion, Google Workspace and Microsoft 365.
Relief 1-May-2023 be around the corner
Excel concedes that not everything is a date! Users will soon be able to reign in Excel’s habit of converting letters and numbers into a date and stripping leading zeroes from phone numbers on both Windows and Mac. An Automatic Data Conversion section has been added to the Data page of the Options in coming releases.
Happy 40th Birthday, Microsoft Word
Would you believe it, Microsoft Word is 40. It wasn’t the first word processor, nor was it arguably the best, but the word processing behemoth has gone on to take market share and subtly change how we use language. BBC Future has taken an interesting meander down memory lane from the typing pool to artificial intelligence.
Google Workspace
Green-light Contacts delegates by 13 November
If you have delegated access to another user to manage your contacts, they could be about to lose access unless you re-approve that access before 13 November. If you didn’t know Contacts delegation was possible, or wonder how it differs from Mail delegation, here’s a quick primer: administrative support for managing inboxes is business critical and this includes making sure that contacts are properly sorted and labelled. Contacts delegation allows you to hand over responsibility for managing those contacts without necessarily giving access to your emails.
Data Protection
My UK-US Data Bridge wanna go into force
Excusing the clumsy Fergie reference, the UK-US Data Bridge has come into force to replace the myriad of data-sharing agreements that have come and gone before (fallen down, perhaps?). Flagged as imperfect by the ICO, UK organisations will need to be particularly vigilant when relying on the Bridge to transfer personal data, particularly special categories of personal data, to the US.
Windows
Update Windows 11
Windows 11 21H2 reached end of support on October 10th and users are strongly encouraged to update to a supported release of Windows 11. A few days after ending support for the 21H2 version, Microsoft announced Windows 11 23H2 to be officially available. The update brings the new AI-powered Copilot app, an updated File Explorer and updates to many of the applications shipped with Windows 11, such as text recognition in the Snipping Tool. The update will roll out slowly over the coming months.
Read more about support ending for 21H2 at TechRadar
Read more about the latest release of Windows 11 at XDA Developers
Windows Hello users will soon be able to forget their passwords
Microsoft has made improvements to Windows Hello for Business, enabling users to eschew their password completely in favour of biometric and hardware token logins. It’s not on by default and will be one to watch.
Artificial Intelligence
Don’t tell anyone, AI wrote this
The BBC reports that, despite employers’ attempts to ban the technology, employees are secretly using AI at work. Whether the secrecy is due to workplace bans or a desire to not give away their competitive advantage, almost 70% of people surveyed in February were keeping their usage of AI quiet. A BlackBerry survey of employers suggested as many as three-quarters were either implementing or considering implementing a ban on AI in their workplaces.
Copilot: an accident waiting to happen?
Microsoft has rushed to build Copilot AI functionality into all its products, but has it put its desire to win the AI race ahead of security concerns? Chatbots are like giving monkeys typewriters or toddlers oil paints: capable of something great and making a horrible horrible mess. We only have the companies’ assurances that their models won’t go off the rails.
Spewing toxic text
AI is an inexact science and a Microsoft-affiliated research team has found flaws in OpenAI’s latest large language model, GPT-4, which may allow malicious actors to convince the tool to generate biased, toxic text. As Microsoft has invested in OpenAI and uses OpenAI technology in its own Copilot products, the insinuation is that these flaws have been addressed both at the model layer and in the software layer; though with AI models being closely guarded secrets, there is no way to know for certain.
Apple Mac
The entry-level M3 MacBook Pro: a cut too far?
Apple announced new M3 MacBook Pros at a Halloween event, but is there a reason to upgrade? Probably not for anyone already using an Apple Silicon Mac, the performance gains are small. In a move that may be motivated by differentiating between the MacBook Air and MacBook Pro, the 13” MacBook Pro has been retired. The cheapest MacBook Pro makes some sacrifices to hit its price tag, including fewer USB ports and only 8Gb RAM.
Product Showcase
![CyberSmart Logo CyberSmart Logo](https://www.seeto.co.uk/wp-content/uploads/2022/12/Copy-of-0076-CyberSmartLogo-Secondary-Dark.png)
At Seeto, we understand the importance of cyber security for your business. That’s why we offer CyberSmart, the leading platform for Cyber Essentials certification. CyberSmart not only helps you achieve the government-backed Cyber Essentials certification but also ensures that your business remains compliant with the certification standards year-round.
With CyberSmart, you can automate your compliance processes, saving you valuable time and resources. The platform provides continuous monitoring for your devices, ensuring that your business remains secure from cyber threats and evidencing your ongoing compliance.
In addition, CyberSmart offers an intuitive dashboard that gives you a clear overview of your cyber security status. You can easily track your progress towards certification, identify any issues, and take immediate action.
Remember, achieving Cyber Essentials certification not only protects your business from 80% of common cyber threats but also demonstrates to your customers and partners that you take cyber security seriously.
So why wait? Secure your business today with CyberSmart.
Recent OS Updates
Last updated 5 August 2024
Windows
Microsoft currently supports Windows 10 and Windows 11.
- Windows 10 version 22H2 (10.0.19045)
- Windows 11 version 22H2 (10.0.22621) and version 23H2 (10.0.22631)
macOS
Apple officially supports the following Mac operating systems:
- macOS Sonoma 14.6
- macOS Ventura 13.6.8
- macOS Monterey 12.7.6
iOS and iPadOS
The supported iPhone and iPad operating systems are:
- iOS 17.6
- iPadOS 17.6
Android
Google supports the following Android operating systems:
- Android 14
- Android 13
- Android 12
Note that your device manufacturer may not support every version that Google produces security fixes for.
Learn how to check and update your Android version here.