# 2023 Data Disaster Horror Stories

This Friday the 13th, we’re taking a look at some of the biggest and scariest data disasters of 2023. But don’t let these tales cost you sleep at night! We’re also offering 20% off on Macrium Reflect Home Annual plans until Halloween. (And what’s the spooky season without some scary movies? How many references can you spot?)

## [3CX attacked in all new way](https://www.wired.com/story/3cx-supply-chain-attack-times-two "wired.com")

It's enough to make you Scream. State-sponsored attacks aren’t a new threat, but when a group associated with North Korea attacked VoIP company 3CX, they made history. Over half a million 3CX customers were affected thanks to a single employee’s PC being infected with a previously infected app. 

“This is the first time we've ever found concrete evidence of a software-supply-chain attack leading to another software-supply-chain attack,” says Mandiant Consulting's chief technology officer Charles Carmakal. “So this is very big, and very significant to us.”

Don’t Look Now, but this may be the first of many such events. 

## MGM Resorts and Caesars Entertainment

They’re heeeerrreee… Nope, it wasn’t a poltergeist in the slot machine, or a ghost in the elevator. Many sources point to ALPHV and Scattered Spider as the hacking groups who spun webs around two of the biggest casino resorts in the world, marking one of the biggest ransomware attacks in years. Not only were daily operations disrupted for days, the hackers were able to access personal information of many loyalty card members, including Social Security numbers. The MGM Resorts and Caesars Entertainment attacks have cybersecurity experts around the world doubling down on warnings about social engineering.

“[The hackers](https://fortune.com/2023/09/13/mgm-caesars-hacked-ransomware/ "fortune.com") first breached an outside IT vendor before gaining access to the company’s network…” 

Indeed, one of the most complex issues security pros face isn’t technical at all; it’s the end user. Technology like encryption and remote monitoring and management (RMM) has gotten so good, it’s becoming easier for hackers to target people themselves. Social engineering and phishing scams have always been consistent money makers for cyber criminals, but for a few days they made Las Vegas the Village of the Damned. 

## [UK Electoral Register](https://www.electoralcommission.org.uk/privacy-policy/public-notification-cyber-attack-electoral-commission-systems "electoralcommission.org.uk")

Get Out the Vote! While this one technically happened a few years ago, the public is only just finding out now. The United Kingdom's electoral registers fell victim to a “complex cyber-attack” which resulted in 40 million people’s personal information being compromised. Information like full names, email addresses, home addresses, and telephone numbers might not be critical info in of themselves, but if they were to be joined with other personal information gleaned in other ways, it certainly adds a few important pieces to the jigsaw puzzle that is our personal lives.  

## [Is AI already a hacking threat?](https://www.grantthornton.com/insights/articles/advisory/2023/anticipate-cybersecurity-and-privacy-risks-in-ai "grantthornton.com")

If 2023 tech had to be summed up all we’d need is two little letters: AI. A tsunami of hype and fear and speculation seemed to wash over all corners of the planet as ChatGPT and other AI platforms filled the social conversation. It really did seem like it was everywhere all at once. 

It’s not that an AI itself could start posing a direct threat (yet), but that its ease of use has made scamming so much easier for hackers around the world. Not only can they use AI to scale their schemes faster, but the software’s abilities help make the language they use in phishing emails sound native and natural. This means that even the most suspicious of us could fall victim, and parts of the world that have largely been ignored due to difficult language barriers are at greater risk. 

And all that’s not even touching on the Frankenstein’s Monster of Deepfake video and audio that looms in the future. 

## Natural disasters in the US

Beware The Fog and The Mist aren’t exactly threatening, but it’s important to note that not all data disasters are malicious. Natural disasters like fires, floods, earthquakes and hurricanes can have devastating consequences on life and property. But if data systems aren’t properly protected, that destruction may be even further reaching. 

From January 2023 to date, the United States alone has experienced over [23 separate billion dollar disasters](https://www.nytimes.com/2023/09/12/climate/billion-dollar-disasters.html "nytimes.com"). That’s over [$57 billion in damages](https://www.cnbc.com/2023/09/11/2023-severe-weather-57-billion-in-damage-and-253-people-dead-so-far.html "cnbc.com"), with a few months of the year left to go. As our climate changes and weather becomes more severe, it’s important to prepare for the unpredictable. 

## Avoid the Nightmare

If you’re ready to Let the Right One In and join millions of others who trust Macrium with their data, now is a great time to get started with our [Reflect Home Annual plan](/products/home). From now until October 31st, you can get your subscription for 20% off. That means you’ll get access to exclusive support, a free setup call with one of our team, all updates and fixes, plus entry to our customer forum and knowledgebase. 

And if you can’t get enough of the scary stories, be sure to check out our [previous posts](/blog?tag=halloween)!

2023-data-disaster-horror-stories.png

This Friday the 13th, we’re taking a look at some of the biggest and scariest data disasters of 2023. But don’t let these tales cost you sleep at night! 

2023 Data Disaster Horror Stories

This Friday the 13th, we’re taking a look at some of the biggest and scariest data disasters of 2023. But don’t let these tales cost you sleep at night!

Many things are associated with bad luck: black cats, breaking a mirror, Friday the 13th and data integrity errors, just to name a few. The superstitions around black cats, broken mirrors, or Friday the 13th are unfounded but data integrity errors are definitely something to be scared of. This is, perhaps, never truer than with a backup file. Since this day has been inextricably linked with bad luck, we’re sharing some tips so that you don’t have to roll the dice on your data’s integrity.

## What causes data integrity errors

Unfortunately, storage is not infallible. All storage devices have the potential to break. From stress induced leakage for an [SSD](/blog/how-do-ssds-work "How do SSDs work?") to a head crash and platter damage for a [HDD](/blog/how-do-hdds-work "How do HDDs work?"), there are many problems that can affect our data on a storage device, even a faulty motherboard or memory can affect how our data is read and written.

When Macrium Reflect performs a backup, as the data is read from the source disk but before it is written to the destination, a hash is created for each block of data and stored in the index of the resultant image file. This hash is a unique string of characters that represents the data that is stored in that block. An image is considered corrupted if a new hash is generated for the block of data and it does not match the original hash that is stored in the index. This means that the data contained in the image is not the same as the data that was read from the source disk. This is known as a verification failure and the data has been corrupted.

The leading cause of a verification failure is a hardware fault. The most likely suspect is the storage media that the image is located on, however, memory and motherboard faults can also cause a verification error. For example, if your image is stored on a HDD, physical damage to the magnetic surface of the platter will affect how the data has been physically stored on the disk. This is similar to how a scratch on a CD may cause a song or part of a film to ‘skip’. When the CD player is unable to read from a broken track on the disk, it will skip to the next section of data it can read successfully. Unfortunately, due to the nature of backups, data integrity errors are much more problematic than for a song or film. We wouldn’t be happy with the restore process simply skipping unreadable data, as this data may contain important information to us or to the operating system and file systems we are restoring. This is why you will receive an error when attempting to restore an image where corruption is detected.

## How to mitigate verification errors

The best way to mitigate the risk of verification errors is to have multiple copies of your backups stored on different media. In the event that one storage media experiences a hardware fault leading to a verification error, the image can be restored from a different storage media. This can be done by scheduling multiple images using different media as the destination. [Alternative locations](https://knowledgebase.macrium.com/display/KNOW80/Alternative+Locations+For+Backups "Alternative Locations For Backups") can also be used, if the primary backup location is unavailable, then the next destination in the list will be used, if that is unavailable then the third destination in the list will be used, and so on. This can be used to rotate the destination where the images are stored. If an incremental or differential has been specified, but the destination has rotated and a backup set cannot be found, a full image will be created instead and a new backup set will be started. The end result is that each destination that is being rotated will have its own backup set. In the event of a disaster, a backup can be restored from any of the media that are being rotated.

Macrium Reflect’s scripting features can be used to [automatically synchronize two folders using Robocopy](https://knowledgebase.macrium.com/display/KNOW80/Backup+Folder+Synchronization "Backup Folder Synchronization"). This will ensure that you have a redundant copy of your backups in the event that one of the image sets becomes corrupted. 

Backups should be regularly verified to check the integrity of the backup. If the image verification succeeds then you can be confident that the data stored in the image is the same  as data that was read from the source disk. For a more visual representation that the image can restore successfully, [Macrium viBoot](https://knowledgebase.macrium.com/display/KNOW80/Macrium+viBoot "Macrium viBoot") can instantly boot a Hyper-V or VirtualBox virtual machine using one of your image files. If the image successfully boots as a virtual machine, then you can be confident that it can be restored to your hardware. 

We also recommend that the ‘Verify image or backup file directly after creation’ option is enabled in the Macrium Reflect Defaults and Settings. The integrity of the image will be verified immediately after creation, this will ensure that no errors occurred during the image creation. 

Note: Enabling ‘Verify image or backup file directly after creation’ in the Macrium Reflect Defaults and Settings will only enable this for newly created backup definition files. Existing backup definition files will need to be edited manually to enable this setting. Existing backup definition files can be edited in the ‘Definition Files’ tab of Macrium Reflect.

In the event that an image is corrupted and you have no other copies of the image to resore, the [DiskRestore](https://knowledgebase.macrium.com/display/KNOW80/Running+DiskRestore+from+Windows+PE "Running DiskRestore from Windows PE") utility can be used in the Macrium rescue media to restore the corrupt image. The DiskRestore utility will continue the restore in the event that a corruption error is detected. It should be noted that due to corruption of the source image, some data loss may occur when the image is restored. If the data loss affects file system metadata or key operating system files, this may negatively impact system stability.

[This knowledgebase article](https://knowledgebase.macrium.com/display/KNOW80/Understanding+Image+Verification+Failures "Understanding Image Verification Failures") contains more information about verification failure and steps to troubleshoot the issue if a verification error occurs.

## Final Thoughts

This Friday the 13th, a day forever associated with bad luck, take a moment to verify or viBoot your image files. Although the day may still be unlucky, we can avoid this bad luck when it comes to recovering from disasters.

friday-the-13th-image-3.png

Many things are associated with bad luck: black cats, breaking a mirror, Friday the 13th and data integrity errors, just to name a few. The superstitions around black cats, broken mirrors, or Friday the 13th are unfounded but data integrity errors are definitely something to be scared of. This is, perhaps, never truer than with a backup file. Since this day has been inextricably linked with bad luck, we’re sharing some tips so that you don’t have to roll the dice on your data’s integrity.

How to avoid backup bad luck this Friday the 13th

# Data disaster stories that'll keep you up at night

Data disasters come in all shapes and sizes, from personal to global. From fires and floods to theft and old fashioned human error, it can feel like they lurk in the shadows waiting to pounce.

It’s that time of year where it’s perfectly acceptable to gather loved ones in a dark place, hold a flashlight to your chin, and tell terrifying stories all in the name of fun. So if your old ghost, ghoul, and vampire stories are getting more eye rolls than goosebumps nowadays, these tales of data loss are sure to scare the bits and bytes out of them. 

## Rattling Blockchains

In 2013, James Howells made a mistake that will probably haunt him for the rest of his life. He threw out an old, unused hard drive that’d been sitting in a drawer for years, forgetting the drive held 7,500 bitcoins. He’s tried several times to get permission from his local government to excavate the landfill where the drive most likely ended up, offering a reward of [25% of the total value if they allow him to dig](https://www.bbc.co.uk/news/uk-wales-55658942 "www.bbc.co.uk"). 

At the time of writing, the price of bitcoin (BTC) is just over $62,000, making the lost fortune approximately $465,755,250. What a nightmare!

## Bump in the Night 

Imagine you’re a busy data analyst working for the Department of Veterans Affairs. Perhaps it was a dark and stormy night, but you had some work you needed to finish. As you’d done for years, you bring your unencrypted laptop home, complete your work, and head off to bed. But in the dead of night, a burglar [ransacks your home and steals the laptop](https://epic.org/privacy/vatheft/  "epic.org"). 

That laptop contained the personal information of 26.5 million veterans, information including Social Security numbers, birthdates, names, and even disability status. It also held the same information for over 2 million additional active duty military members. 

This is exactly what happened in 2006. The laptop was recovered and the VA says none of the information was accessed, but the consequences of what could have been are enough to send shivers down your spine. 

## Invasion of the Data Snatchers

1.1 billion. That’s how many people were potentially affected by one of the [world’s largest data leaks](https://www.zdnet.com/article/another-data-leak-hits-india-aadhaar-biometric-database/ "www.zdnet.com"). Aadhaar is India’s national ID database, and it holds a variety of incredibly sensitive data about nearly every citizen in the country. Biometric information like fingerprints and eye scans, what government services they use, even financial and commercial data is all attached to a 12-digit code. In 2017, a data leak from a state-operated utility company led to the exposure of all this info, some of it even ending up for sale on Whatsapp!

### The Library of Alexandria Massacre

In some context or another, you’ve most likely heard of the [fire that destroyed the Library of Alexandria](https://time.com/5912689/library-of-alexandria-burning/ "time.com"). For centuries we’ve lamented the loss of countless historical documents, wondered at the golden knowledge we could have built upon if it hadn’t been for such wanton destruction. 

Experts now say that the story, as we know it, is largely a combination of multiple historical events. The end result is an allegory that’s been used to teach many lessons throughout time, one of which is the importance of protecting knowledge and information we value most. The mere idea of its loss has been told as a scary story for hundreds of years. 

## 28 Days Later...

And for a data disaster that’s still unfolding, look no further than major broadcaster [Channel 4 in the UK](https://www.channel4.com/press/news/whats-happened-access-services-channel-4 "www.channel4.com"). A month ago, their broadcast center’s fire suppression system went off. Many British TV channels were temporarily affected, but because of an issue with C4’s data recovery, they lost the ability to offer access services like subtitles, audio descriptions, and sign language support. They had backups but their backups failed. It’s a frightening, and very public, reminder to practice the industry standard 3-2-1 backup strategy no matter how big or small you may be. 

## To be continued

If some of these scary tales chilled you to the bone, rest assured - they were all entirely preventable with the right data recovery plan in place. Now might be a good time to double check your backups, ensure you know what to do in case the worst happens, and get true peace of mind. It’s like turning on the lights and enjoying some Halloween candy after a good horror film!

And of course, if you’d like to chat with one of our experts to make sure you’re doing all that you can, [we’d be happy to help](/contact "Contact us").

20211028-data-disaster-stories-that-will-keep-you-up-at-night.jpg

Data disasters come in all shapes and sizes, from personal to global. From fires and floods to theft and old fashioned human error, it can feel like they lurk in the shadows waiting to pounce.

Data disaster stories that'll keep you up at night

# How to avoid backup nightmares this Halloween

From accidental deletion to hardware failure, theft and malware, there are many ways to lose your valuable data aside from ghoulish foul play.

We have put together a few things to think about to help you setup your backup.

Remember, any backup is better than no backup; start off simple and optimise later but _do it today_.

## What should I backup?

You have two options. They have different attributes. Depending on what you want to protect choose either one or both for the following.

*   **Image** This will contain everything on your hard disk. If your disk fails or your computer is lost, you can use this to restore everything to new, booting hardware.  
    You can mount or open this backup file as a virtual drive and open or copy out file.  
    If you are using a compatible windows version, you can [instantly boot](/viboot) a backup as a virtual machine.
*   **File and Folder** This enables selective backup of folders or specific file types. For example, you may want to just backup your documents folder.  
    A file and folder backup is roughly analogous to a very high performance zip archive with the same Macrium backup features as for image backups.

## Where should I save my backups?

*   [**USB disk**](https://en.wikipedia.org/wiki/Disk_enclosure) This is quick and cost effective solution. You can also [rotate](https://knowledgebase.macrium.com/display/KNOW72/Alternative+Locations+For+Backups) two or more devices, keeping one in a separate location.
*   [**USB memory stick**](https://en.wikipedia.org/wiki/USB_flash_drive) These devices are fine for your bootable rescue environment, but are typically too small and too slow for efficient backup file storage.
*   [**NAS**](https://en.wikipedia.org/wiki/Network-attached_storage) This is more expensive than a USB disk but is more convenient; you have nothing to plug it, and you can share it between multiple computers.
*   [**Cloud**](https://en.wikipedia.org/wiki/Cloud_storage) Hosted remote storage removes the risk of hardware failure, fire, flood or theft. However, it is slower and can be prohibitively expensive for large files such as image backups.

You may want to consider a hybrid, storing large image backups on a USB disk and keeping a copy of your, smaller, file and folder backups of your documents in the cloud.

## When should I backup

Automate your backups with a [backup plan](https://knowledgebase.macrium.com/display/KNOW72/Scheduling+backups). A backup plan is a combination of a schedule, sequencing and maintenance of the backup chain (purging or consolidating the oldest backup points).

To simplify the process, Macrium Reflect Home includes predefined plans. Read more [here](https://knowledgebase.macrium.com/display/KNOW72/Scheduling+backups).

## How to keep your backups safe

*   **Fire and theft**: Rotate your backups, storing one device in an alternate location
*   **Malware**: Use [**MIG**](/mig) and apply all security updates
*   **Corruption**: [**Verify**](https://knowledgebase.macrium.com/display/KNOW7/Verifying+image+and+backup+files) your backups and make a 2nd copy
*   **Encyption**: Use AES to prevent anybody else accessing your data

## What to do when things go wrong

This is why we backup, and yet is often overlooked. There are three basic scenarios:

*   **Recover a deleted or corrupted file**: [Choose](https://knowledgebase.macrium.com/display/KNOW72/Browsing+Macrium+Reflect+images+and+backups+in+Windows+Explorer) a backup, [mount](https://knowledgebase.macrium.com/display/KNOW72/Browsing+Macrium+Reflect+images+and+backups+in+Windows+Explorer) it and copy out the file.
*   **My computer boots but something is broken** : [Choose](https://knowledgebase.macrium.com/display/KNOW72/Restoring+a+system+image) a backup, and select restore.
*   **My computer won’t boot :** In this case, don’t panic, you can [boot](https://knowledgebase.macrium.com/display/KNOW72/Restoring+an+image+from+within+the+Rescue+Media) your rescue media. This contains a number of tools to directly [fix booting issues](https://knowledgebase.macrium.com/display/KNOW72/Fixing+Windows+boot+problems) and restore an image backup to the same, or [new hardware](https://knowledgebase.macrium.com/display/KNOW72/Re-deploying+to+new+hardware).

It is important to test that you can boot your rescue media. Don’t forget to check that you can access your backups and your system volume (c:\\) from the rescue media. You should also check that you can mount a backup.

## Summary

If you only do one thing today, setup your backup. And [build rescue media](https://knowledgebase.macrium.com/display/KNOW72/Creating+rescue+media). OK, that is two things.

Please read the [KnowledgeBase](https://knowledgebase.macrium.com/display/KNOW72/) including the [quick start guide](https://knowledgebase.macrium.com/display/KNOW7/Macrium+Reflect+Quick+Start). We also have a range of [videos](https://www.youtube.com/@Macrium) illustrating common usage of Macrium Reflect.

### Buy Macrium Reflect Home

For a fully featured backup, you should consider purchasing [Macrium Reflect Home](/products/home).

how-to-avoid-backup-nightmares-this-halloween.jpg

From accidental deletion to hardware failure, theft and malware, there are many

How to avoid backup nightmares this Halloween

User-macrium-icon-white.svg

large_CompanyLogo.PNG

medium_CompanyLogo.PNG

small_CompanyLogo.PNG

thumbnail_CompanyLogo.PNG

CompanyLogo.PNG

Buy Now

Workstation

Server

Server Plus

Site Manager

MultiSite

Virtual Server

SiteDeploy

Deployment Kit

Macrium Reflect Home

Upgrade License

Renew Support

Technicians License

Protect your documents, data and operating systems using our advanced disk imaging technology.

Products

Disaster Recovery

Ransomware Protection

Scalable Backup

For OEMs

Find out how Macrium products can help solve your problems.

Solutions

Submit a Ticket

About Macrium Support

My Order History

Upgrades

Renewals

Forum

Knowledge Bases

Our dedicated Support Team are ready to help with any technical issues or problems with Macrium Reflect.

Support

Find a Reseller

Find a Distributor

Become a Partner

Become an MSP

Reseller Log In

Reseller Registration

Find a Macrium Reseller or become a Macrium Partner.

Partners

Contact Us

Our Story

Resources

Media Pack

Careers and Culture

Blog

We’re dedicated to creating dependable software, providing quality service, and maintaining superior relationships with our customers and partners. 

Company

Social icon-1.svg

Social icon-3.svg

Social icon.svg

Social icon-2.svg

Social icon-4.svg

cybersecurity

# What do we know about Windows 11’s security strategy?

_And more importantly, will it work?_

In previous posts [here](/blog/will-macrium-reflect-work-on-windows-11-63dc8e81b865) and [here](/blog/what-to-do-before-you-upgrade-to-windows-11-eab85153cf7a), we discussed how Macrium Reflect and Microsoft Windows 11 work together. In this article, we wanted to take a closer look at the new operating system itself, and what Microsoft’s choices indicate about their plans for what’s to come. But with many things, to get a clear picture of the future, one must briefly look at the past.

### Windows 10 Vulnerabilities

BeyondTrust, a company specializing in Privileged Access Management tools, recently released their annual Microsoft Vulnerabilities Report for 2020. The results were… not great.

> _“A total of 1,268 were reported, which marks a colossal 48% rise over the previous year (858). This is in fact the sharpest spike since the inception of the Microsoft Vulnerabilities Report, and means that, since 2016, total vulnerabilities have increased by 181%.” — [BeyondTrust](https://www.beyondtrust.com/blog/entry/microsoft-vulnerabilities-report "www.beyondtrust.com")_

In any system, in any structure, physical or digital, you’re only as strong as your weakest link. So what doesn’t come as a surprise in their report is how a large number of these exploits could be mitigated by simply removing certain administrative privileges. People — users — will always be the weakest point. BeyondTrust goes on to say:

> _“90% of Critical vulnerabilities in Internet Explorer would have been mitigated through the removal of admin rights_
> 
> _85% of Critical vulnerabilities in Microsoft Edge would have been mitigated through the removal of admin rights_
> 
> _100% of all Critical vulnerabilities in Microsoft Outlook products would have been mitigated by removing admin rights”_

It’s worth noting that these numbers have a double-edge. Microsoft products and services are the biggest in the market — over 1 billion people rely on Windows — making them obvious prime targets. At the same time, recognizing these exploits goes to show that the discovery and patching process is working exactly as it should. Shoring up the weakest link (users) seems to be a foundational pillar of Windows 11.

### Zero Trust

Up until now, Windows has largely operated on the Principle of Least Privilege (PoLP) when it comes to administrative access. Users are granted the least amount of access as is necessary for their job. For years, Microsoft encouraged users to shore up weaknesses in their security by actively using and maintaining admin rights. It’s fundamental to proper PoLP.

PoLP has been a foundation of computer security for decades. However, to work it needs constant care and vigilance from both software developers and users to be effective. Further, it makes the assumption that the platform (OS, firmware, hardware, storage, and network) upon which the application runs is itself secure. With the increasing value of data, threats to its security and increasing use of diverse computing resources, PoLP is proving insufficient to provide protection.

Zero Trust security is similar, but not exactly the same. The idea is to never trust anyone, anything, at any time. Or, [as Microsoft themselves say](https://www.microsoft.com/insidetrack/blog/microsofts-digital-security-team-answers-your-top-10-questions-on-zero-trust/ "www.microsoft.com"):

> _“Microsoft has adopted a modern approach to security called “Zero Trust,” which is based on the principle: never trust, always verify. This security approach protects our company and our customers by managing and granting access based on the continual verification of identities, devices and services.”_

But for various reasons, users mismanage or simply don’t bother with differentiating privileges, leaving entirely preventable gaps ready for exploitation. Like a parent enforcing stricter house rules for your own good, Microsoft has stepped in.

[Zero Trust policies](https://www.ncsc.gov.uk/collection/zero-trust-architecture/introduction-to-zero-trust "www.ncsc.gov.uk") are a new approach to secure system design that promise to deliver where PoLP cannot. In the simplest terms, it enables confidence and trustworthiness in a system to be established dynamically and continuously via a series of user and hardware verification (attestation) steps.

To execute Zero Trust verification and authentication, the platform must support a range of [Trusted Computing](https://en.wikipedia.org/wiki/Trusted_Computing "en.wikipedia.org") principles to enable a verifiably secure computing, storage and networking environment. Microsoft’s approach is to utilize the same protections used to securely separate hypervisor virtual machines along with a TPM device to provide a secure host for credential storage and operations.

As an aside, DRM implementers face a challenge; they have to embed the decryption key in all devices that can play the protected content. The most celebrated attack was probably the public disclosure of the DVD encryption key. Since then, they have been an early adopter of many Trusted Computing principles. For an example, see the [Protected Media Path](https://en.wikipedia.org/wiki/Protected_Media_Path "en.wikipedia.org"). Trusted Computing does raise a number of ethical issues, championed notably by the [EFF](https://www.eff.org/issues/trusted-computing "www.eff.org").

The hardware features for VBS have set the controversially high minimum hardware threshold for Windows 11. Limiting the CPU generation also eliminates a range of ‘side channel’ exploits.

To use MS nomenclature, Virtualization Based Security (VBS) provides a secure pathway in Windows 11 to implement some of the following:

*   “Kernel Data Protection” enables protection from rogue kernel mode software (drivers) from compromising the Windows kernel.
*   “Application Guard” utilizes VBS to isolate untrusted websites and documents and “Credential Guard” uses VBS to similarly secure access to credentials.
*   “Windows Hello Enhanced Sign-In” uses VBS to create secure pathways to external components like the camera and TPM when used for authentication.

These principles extend to Microsoft’s Azure ecosystem providing remote attestation features for cloud storage and computing resources.

Microsoft is clearly making an aggressive push to set the baseline for a secure computing platform. However, it remains to be seen how quickly the industry will upgrade both its hardware and the vast base of current applications and systems to utilize modern zero trust principles and services. In the meantime threat actors will continue to target the weakest link, whether that be legacy systems, legacy applications running on modern hardware, or social engineering techniques such as BEC.

It should also be noted that bugs in hardware protections will continue to be discovered and exploited, Meltdown and Spectre being two recent examples (more about that below); it is typically more difficult or impossible to patch such issues.

### From chip to cloud

In 2019, Microsoft announced Secured-core PCs as a proactive solution to growing firmware attacks, which are notoriously difficult to detect and remove.

> _“Secured-core PCs combine identity, virtualization, operating system, hardware and firmware protection to add another layer of security underneath the operating system. Unlike software-only security solutions, Secured-core PCs are designed to prevent these kinds of attacks rather than simply detecting them.” — [Windows Blog](https://www.microsoft.com/security/blog/2019/10/21/microsoft-and-partners-design-new-device-security-requirements-to-protect-against-targeted-firmware-attacks/ "www.microsoft.com")_

The concept of Zero Trust is now firmly rooted deep within the hardware of your PC, not just in the software that sits on top of it.

### Windows 11 hardware requirements

Given all the above, the [hardware requirements Windows 11](https://www.microsoft.com/en-gb/windows/windows-11-specifications "www.microsoft.com") demands make more sense. These demands mostly likely come in no small part because of [Meltdown and Spectre](https://meltdownattack.com/ "meltdownattack.com"), two computer processor security bugs discovered in 2018.

Patrick Moorhead, president and principal analyst at Moor Insights and Strategy spoke about it in a recent article in The Verge.

> _“Microsoft’s CPU selections for Windows 11 don’t appear much at all to do with performance but look like security mitigations for side-channel attacks.”_

The scale of these vulnerabilities honestly can’t be overstated — nearly every single device created over the span of decades was at risk. Even more, the problems were OS agnostic, but clearly Microsoft learned valuable lessons.

### Welcome to the real world

Sure, Microsoft is building upon an established foundation for future security steps, but it’s almost as though they’ve ignored conditions in the real world. Some of these were unforeseen, like the pandemic and subsequent supply chain issues, but they’re huge issues to contend with nonetheless.

*   Over [55% of enterprise workstations](https://www.lansweeper.com/itam/is-your-business-ready-for-windows-11/ "www.lansweeper.com") do not meet the requirements for automatic upgrades.
*   Manufacturers across all industries are experiencing a [global semiconductor shortage](https://www.bbc.co.uk/news/business-58230388 "www.bbc.co.uk").
*   [Millions of perfectly good](https://www.theverge.com/2021/6/29/22555371/microsoft-windows-11-cpu-support-hardware-requirements-tpm-response "www.theverge.com"), new(ish) PCs are suddenly “obsolete,” creating untold costs and waste.
*   The post-pandemic economy [has not completely recovered](https://www.brookings.edu/research/october-2021-update-to-tiger-the-global-economic-recovery-is-in-danger-of-stalling/ "www.brookings.edu"), and many firms are still keeping a close eye on their bottom line.

### Big leap? More like a small step

Given all these problems, it’s not surprising that Microsoft has stepped back slightly and announced that users can technically manually install Windows 11 on older PCs. As long as you have a 64-bit 1GHz processor with two or more cores, 4GB of RAM, and 64GB of storage — and you’re happy to do it — upgrading shouldn’t be a problem, even if you get some [scary warnings about possible “damage”](https://www.techradar.com/uk/news/windows-11-warning-mentions-possible-damage-to-unsupported-pcs "www.techradar.com") to unsupported systems. As it stands now, Microsoft will not offer updates or vital security patches to computers running Windows 11 that don’t meet the above CPU requirements.

 ![Windows 11 upgrade warning from The Verge.](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/20211013_what_do_we_know_about_windows_11s_security_fig_1_e06a8d4ccd.jpeg)

#### Windows 11 upgrade warning from [The Verge](https://www.theverge.com/2021/9/21/22686457/windows-11-health-check-compatible-supported-cpu-old-pc-waiver "www.theverge.com").

For the home and small business user who has a PC that ticks all the boxes, there is probably little practical security advantage in moving to Windows 11 at this time. The new features are either already available in Windows 10 (though not necessarily enabled by default or supported on all hardware) or only relevant in enterprise or highly secure environments. This stance may change if the Windows 11 enhanced kernel space protections prove resilient against a new class of exploit. The end of support date for Windows 10 may prove to be the biggest upgrade motivator for the security-conscious home and small business user.

What Microsoft is trying to achieve from a security perspective is commendable and certainly a move in the right direction. But considering the current issues of economic uncertainty, supply chain disruption, and the fact Windows 10 will be fully supported until 2025… it all sort of feels like much ado about nothing, for now.

And more importantly, will it work? In previous posts we discussed how Macrium Reflect and Microsoft Windows 11 work together. In this article, we wanted to take a closer look at the new operating system itself, and what Microsoft’s choices indicate about their plans for what’s to come. But with many things, to get a clear picture of the future, one must briefly look at the past.

What do we know about Windows 11’s security strategy?

# What Is the Advanced Encryption Standard? AES Explained

The beauty of digital encryption is that it keeps sensitive and private data hidden, even in the face of a ransomware attack or a data breach. Without the cipher, or key, to decrypt data, criminals aren’t able to decipher files. It’s one of the most basic elements of cyber security.

Today, the [Advanced Encryption Standard (AES)](https://www.techtarget.com/searchsecurity/definition/Advanced-Encryption-Standard) is the standard encryption method for industries and functions from retail to finance. 

At Macrium, we use AES to protect our users’ files from accidental deletion and malware, such as ransomware. So, we’ve put together this guide for those wondering how AES originated and became the encryption standard of choice.

## What Is AES?

AES is an algorithm developed by two Belgian cryptographers, [Vincent Rijmen](https://www.linkedin.com/in/vincent-rijmen-360911/) and [Joan Daemen](https://www.linkedin.com/in/joan-daemen-5921842/?originalSubdomain=nl). The duo submitted it in response to a call from the [National Institute of Standards and Technology (NIST)](https://www.nist.gov/publications/advanced-encryption-standard-aes) to the cryptography community. 

NIST challenged specialists in the field to create an updated encryption standard to meet the growing security needs of the 21st century. The previous standard, Data Encryption Standard (DES), developed by IBM in the 1970s, was failing to keep up with advancements in computing technology. 

AES was [formally adopted by NIST in 2001](https://www.cisa.gov/sites/default/files/2023-10/23_0918_fpic_AES-Transition-WhitePaper_Final_508C_23_1023.pdf). Today, it’s one of the most popular encryption standards around the world, thanks to its speed and security.

### Why Is It Important to Understand AES?

Since AES is one of the most widely used encryption standards, it’s important to know how it works to make informed decisions about data security and risk management. This is especially true for businesses in highly regulated fields that handle sensitive information, such as finance, healthcare and the military.

Most businesses and organizations must comply with industry and national standards, regulations and legislation regarding data security and privacy. Understanding AES can help them do so, reducing their risk of facing penalties or other consequences for failure to comply.

Finally, understanding the principles of AES and the protection it offers from hackers and attacks supports confidence in its reliability and provides peace of mind.

## How Does AES Work?

AES is a [symmetric method of encryption](https://geekflare.com/symmetric-encryption/), meaning the same key is used to encrypt and decrypt data. However, unlike older symmetric methods, AES splits data into blocks of 128 bits each. The blocks go through several rounds of different types of transformation, such as substitution, shifting, and transposition. 

This makes AES extremely secure from a brute-force attack. It presents a nearly incomprehensible number of possible combinations that [would take billions of years to decrypt](https://www.usnews.com/360-reviews/privacy/what-is-advanced-encryption-standard) using current computing power and technology.

AES uses key lengths of 128, 192, and 256 bits, with 256 being the strongest. Each goes through a different number of rounds.

![Macrium-Software-Table-AES-Explained Blog.png](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/Macrium_Software_Table_AES_Explained_Blog_caeabb6a7c.png)

Most applications use a 128-bit key length, while governments or other entities dealing with highly sensitive or classified information use 192-bit encryption as well as the 256-bit key length, which is often referred to as 'military-grade' encryption.

Why not use the 256-bit key length for everything? Because 256-bit encryption requires more computing power, which can drain power sources faster and use up a lot of resources. Plus, 128-bit encryption is more than adequate protection for the majority of applications.

## What Is AES Used For?

AES is integrated into many technologies we use for everyday functions, including:

- Wireless networks (Wi-Fi)
- Virtual Private Networks (VPNs)
- Password managers
- Programming language libraries
- File compression programs
- Mobile applications
- OS system components
- Hard drives
- Video games

This list gives you a good idea of how entrenched this encryption method is in our lives and our technology infrastructure.

## What Are the Advantages of AES?

AES has become one of the most popular encryption tools around the world thanks to its combination of relative simplicity and strength. Its top features include:

**1.) Easy Implementation -** The encryption process is easy for IT experts and teams to understand, making AES extremely accessible. 

**2.) Ample Support -** Developers and cyber security experts can call on a large support ecosystem, including frameworks, software libraries, manuals and other resources.
 
**3.) Speed and Efficiency -** Because it requires less memory than other methods, the algorithm quickly encrypts and decrypts data, making it suitable for use in fast-paced environments and meeting today’s expectations for speedy downloads.

**4.) Versatility -** The different key sizes offer flexibility in selecting the level of security for various applications. Plus, AES can be combined with other security protocols or types of encryption to provide an extra layer of security. 

**5.) Standardization -** AES has been widely accepted and endorsed around the world, supporting greater compatibility across platforms and systems. 

## The Future of AES

While the security and strength of AES have been proven many times over, the advent of quantum computing technology presents new challenges. NIST has already [announced several quantum-resistant algorithms](https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms) for potential future use. 

However, its experts are confident that AES will serve as a highly reliable encryption method for [decades to come](https://insights.samsung.com/2022/01/12/federal-government-leads-the-way-with-encryption-standards/). 

## How We Use AES to Protect Your Backups

At Macrium, our products can offer two main lines of defence against malware, such as ransomware.

Users of [Macrium Reflect](https://www.macrium.com/products/home) and [Site Manager](https://www.macrium.com/site-manager) and can opt to use AES encryption to protect their backup files. 

In addition, [Macrium Image Guardian (MIG)](https://www.macrium.com/mig) is a feature of Reflect, Site Manager and SiteDeploy. Granting write access only to Macrium tools, MIG blocks unauthorized modifications of your backup files. 

Together with the option to use AES encryption, these features make it virtually impossible for malware, such as ransomware, to access your backups. 

## Try Macrium Reflect for Free 

See MIG and our AES encryption options in action - download a free 30-day trial of Macrium Reflect for your [business](https://www.macrium.com/products/business/standalone/workstation) or for [home use](https://www.macrium.com/products/home#buy-reflect-home).

[Try Reflect for Free](BUTTON_SUCCESS=/products/home)





Your guide to the advanced encryption standard (AES), including where it originated and how it came to be widely adopted around the globe.

What Is the Advanced Encryption Standard? AES Explained

windows-backup

macrium

disaster-recovery

# Introducing Macrium Site Manager 8.1

We’re pleased to announce that we’ve made a series of improvements to Macrium Site Manager. The latest version, Site Manager 8.1, will be available for you to use from Wednesday 14th June 2023. This update improves the user experience and includes integrations for seamless use alongside other products.

## How do I Upgrade to Macrium Site Manager 8.1?
You’ll be able to update Site Manager from Wednesday 14th June 2023. When you log in, you’ll see a notice explaining some steps you need to take before doing so. Please note - The change is not automatic. You will need to actively opt into the update by clicking the button presented to you after login.

## What’s New With Macrium Site Manager 8.1?
Here is a breakdown of the improvements we’ve made since version 8.0.

### Speed Improvements
Macrium Site Manager 8.1 includes all Reflect 8.1 changes, including speed improvements.

### Macrium Boot Media Agent
- There’s now an automatic connection to the Macrium Site Manager server. This allows server-initiated restores and full monitoring and control of all rescue media-based operations.
- You can now restrict access to rescue media to specific users or groups using the permission management systems in Macrium Site Manager, including full active directory integration.
- Auto-repository mapping reduces time to manually restore backups using Macrium Site Manager rescue media. This removes the need for the user to manually map a repository and provide server paths, username and password (for logged-in users).
### Macrium SiteDeploy Integration
- Add license keys and start trials from the improved first-run wizard for both Macrium Site Manager and Macrium SiteDeploy.
### Simplify Disaster Recovery
- For disaster recovery from rescue media, computers can automatically be identified and backups for that computer can be listed directly in the Macrium Reflect restore interface, with no manual steps required.
### Improved Interface
- Improved computers page which gives you better visibility of repository usage and easier access to backups.
- Improved intuitive rules for partition selection makes partition selection easier than ever.
- The Macrium Site Manager initiated restore wizard has been updated to make the process of restoring a computer simpler and faster.
### Post-Backup Power-Saving Options
- Better management of out-of-hours backups, with added ability to shut down, reboot or suspend computers after backup completion. This is especially the case when combined with the existing Wake-on-Lan features in Site Manager.
Find out more about the upgrades in Macrium Site Manager 8.1 in our [video demonstration](https://www.youtube.com/watch?v=ZQRHp36T4fQ) and access the [release notes here](https://knowledgebase.macrium.com/display/MSM8/Release+Notes). 

We hope you enjoy exploring the benefits Site Manager 8.1 has to offer and encourage you to [share your thoughts](/contact) and feedback to assist with our continual improvement programme.

The latest version of our sitewide backup system, Macrium Site Manager 8.1, is now available for you to use. Here's the improvements we've made.

Introducing Macrium Site Manager 8.1

infosec

product

backup

# BackupFAQ — If my support expired does it affect my software licence?

**In this thread of #BackupFAQ blog post you can find answer to common questions we receive from our customers, where we explain all you need to know about Macrium Software, our Products and the Backup industry. Leave a comment if you have suggestions for our next publication.**

This week we explain how support works and how its renewal may affect your licence.

### [Macrium Support & Maintenance](/support)

### What does Standard support include?

Macrium Reflect business editions (Workstation, Server, and Server Plus for Exchange and SQL), all include 12 months free **Standard Support & Maintenance** included in the purchase of each license, which is renewable for subsequent years. Standard Support includes access to support **via email**, our KnowledgeBase and our customer forum.

We also offer a **Premium Support** option which includes priority response and telephone support.

Both Standard and Premium Support include **Upgrade Protection**, so Minor updates (for example v7.1 to v7.2) and Major upgrades (for example v7 to v8) are free while the subscription is current.

### What does Home Essentials support include?

When you purchase Macrium Reflect Home Edition, Macrium Home Essentials Support is provided free for one year.

Macrium Home Essentials Support includes access to support **via email**, our KnowledgeBase and our customer forum. Many problems can be solved by finding solutions within the Forum, KnowledgeBase (KB) Tutorials, Help Tutorials and YouTube videos; these are instant solutions rather than having to wait for Macrium Support to respond (usually within 24 hours during weekdays).

After the year of Home Essentials ends you will still have full and permanent access to our active and helpful customer forum and KnowledgeBase.

### Does Home Essentials support include upgrades?

Minor updates (for example v7.1 to v7.2) are free. Major upgrades (for example v7 to v8) are chargeable but with an upgrade discount — usually around 40% to 50% off the price of a new license.

### What is the difference between the Macrium Reflect Home Essentials Support and Macrium Reflect Standard Support?

Workstation licenses include eligibility for support when using Reflect in a business environment, which is explicitly NOT supported for users of the Home edition.

Workstation licences have Standard Support and Maintenance that can be upgraded to Premium 24x7 Support, and is renewable as an optional fee each year. It also allows you to get Major updates for free.

With the Home Edition, Essentials support cannot be renewed after 12 months unless a new license is purchased.

NB: 30-Day Trial users (of any edition) receive email support and we will answer any questions while evaluating our software for the full 30 days of the trial.

### What are the big differences between standard and premium support?

Both offer access to the Support Forum, KnowledgeBase, Upgrade Protection and remote support via email. But Premium support offers benefits that can be key when a disaster strikes: It offers the option of receiving Telephone Support, having Case Priority, 24x7 coverage and a typical response time of 12 hours instead of 24 hours.

### Do you offer email and Forum support for the Free Edition?

The free edition is not supported although users do have access to view the Forum, KnowledgeBase and YouTube videos. We have over 6 million users of Macrium reflect Free worldwide and there is no way we could provide support for a free product. Of course we hope the Free Edition will demonstrate the value of Macrium Reflect and result in people who are willing to pay for additional value. But if you want to keep using the free version, you’re welcome to do so: it is not time limited in any way (unlike the 30-Day Trial).

### How does the support renewal process work?

The Business Support and Maintenance subscriptions are for 12 months and must be renewed to retain access to support and maintenance. All business edition licenses without a current support subscription are eligible for an upgrade with a discount of up to 50%.

Any business edition of Macrium Reflect (Workstation, Server, Server Plus, and Technicians Licenses) that have a current support subscription, are eligible for a free upgrade to the current version. If the support subscription for a license expired within the last 90 days it is still possible renew it, so the license will be eligible for a free upgrade.

Home Essentials Support is for 12 months only and cannot be renewed, unless a new license is purchased.

Please note: the upgrade discount only applies to previous purchased versions, it does not apply when upgrading from the free or 30-Day Trial to the latest full purchased version.

### Will my licence still work if my support has expired and I don’t renew it?

Yes, Macrium Reflect Home, Workstation, Server, and Server Plus licenses are perpetual and independent of the support subscription.

Each Macrium Reflect Workstation, Server, and Server Plus Editions license key is for one computer and it should be only transferred to another computer for legitimate upgrade/replacement purposes. When you purchase any of these editions you have the software licenses for life, there is no annual fee to pay, independently of having renewed your support or not.

The exception is when you upgrade an old version to a current version. Your old license key becomes invalidated and replaced by the new upgrade license key.

### What about the Technicians and Deployment Kit Licenses?

These two license types run alongside the other business editions. These license are ideal for IT technicians or service companies who might maintain a large number of PCs and may wish to back them up prior to carrying out work. Without the Technicians License, each PC requires separate licensed copy of Macrium Reflect, because the usual licensing arrangement is machine specific. Using a Technicians license allows the technician to backup or image each PC using a single license.

The Technicians Deployment Kit License allows up to 5 technicians to create “Master” or “Golden” images and deploy them to an unlimited number of workstations and servers. This enables internal IT departments and commercial IT specialists to set up PCs without having to purchase a separate license for each workstation or server providing the software is not installed on more than one PC at a time.

The Technicians and Deployment Kit licenses last for one year, after which they can be renewed. If the subscription is not renewed they will downgrade to a standalone Server Edition license and Portable Application Support\* will no longer function.

Macrium Support & Maintenance is included with Technicians and Deployment Licenses, while the license subscription is active.

### What is Portable Application Support?

Portable application support ships exclusively with Macrium Reflect Technicians Licenses. In addition to allowing you to create a bootable USB stick from which you can rescue your systems, you can also optionally add Portable Application support to your media. This will allow you to run Macrium Reflect on your licensed PCs directly from the USB stick, without needing to install Reflect on the workstation or server first. The base install of Macrium Reflect may only be installed on a single PC at a time. If you wish to move this install, you will have to uninstall and reinstall the software.

We hope you have enjoyed this post. We will come back soon with more #FAQs updates.

You can download a 30-day Trial of [Macrium Reflect Workstation](/products/business/standalone/workstation) or [Site Manager.](/site-manager) Technical support for Trial users evaluating our software is available via [email.](/support)

In this thread of #BackupFAQ blog post you can find answer to common questions

#BackupFAQ — If my support expired does it affect my software licence?

# 6 best ways to love your data

It’s been said and repeated countless times, but data is the most valuable resource in the world. Your data. Everyone’s data. Companies are still clamoring to learn everything and anything about you to sell on to the highest bidder, hackers are hoping to get a valuable nugget for ransom leverage, and others are just collecting… collecting and waiting for a time when it can be best used. 

Sounds more like a horror story than a romance, but you aren’t powerless! There are a few important ways to show your data some love, and what better time to do it than International Love Data Week? 

## Check out these International Love Data Week events

First of all, let’s have a little fun and schedule in some great online events that are going on! Here are a few that jumped out, but be sure to check out [the complete list here](https://www.icpsr.umich.edu/web/ICPSR/cms/4544 "www.icpsr.umich.edu"). There are plenty of online and in-person events to choose from. 

[**Falling in Love with Data**](https://villanova.zoom.us/meeting/register/tJElcOmorzksGNT1cyET8YgVcX2yAOAnRLbu "https://villanova.zoom.us") - This beginner workshop will provide an overview of ICPSR, an online data archive available to social science researchers.

[**Dating with Data: 50 Years of Romantic Relationships**](https://calendar.lib.vt.edu/event/10275825 "calendar.lib.vt.edu") - How have US attitudes toward inter-racial, inter-religious, and LGBTQ+ relationships changed over the past half century? Find out what surveys from 1972-2022 say while sharing some Valentine's Day treats as part of International Love Data Week!

[**Love Data Week - Data Privacy**](https://library.temple.edu/events/1389 "library.temple.edu") - Learn about data privacy from Dina Gayanova, a data privacy and cybersecurity attorney in Holland & Knight's Philadelphia office.

[**Data for Social Good**](https://uncw.zoom.us/meeting/register/tZ0lcuCurTgrHtfdskbF47WpbT4f5Gap_kHO#/registration "uncw.zoom.us") - Data can be used to bring about changes that matter. Hear from various researchers about how they have used data to make an impact on society. They will reflect upon how they first recognized what impact their data could have, and how they then worked towards turning that data into a form to be practically used beyond academia.

**[Love Data Week: Introduction to Data Visualization with Tableau](https://library.temple.edu/events/1436 "library.temple.edu")** - Do you like data? Do you like good looking graphs? Do you like presenting information in eye-catching ways? If you answered yes to any of those, you might be interested in learning more about data visualization.

## Choose a privacy-focused alternative search engine

Google isn’t the only kid on the block anymore. There are new alternatives every day, but if you’re looking for an option that keeps your privacy front and center, why not give these a spin? Ecosia even plants trees the more you search! 

[DuckDuckGo](https://duckduckgo.com/ "DuckDuckGo.com")

[Startpage](https://www.startpage.com/ "www.startpage.com")

[Ecosia](https://info.ecosia.org/privacy "info.ecosia.org")

Disclaimer (and minor rabbit hole for you to fall into)

[Global surveillance alliances are an important](https://www.techspot.com/article/2515-surveillance-intelligence-alliances/ "www.techspot.com"), and sometimes invisible, piece of the cyber security puzzle. It’s important to educate yourself on your country’s laws and alliances, as all the good intentions a company may have are still subject to the law.

## Regularly check your app security settings

You’ve heard the saying, “If you’re not paying for the product, you are the product.” Luckily, in most jurisdictions, the law has finally caught up with technology and we’re now able to choose what information we share. The apps we love to use have a tendency to love using us back, but it’s important that all parties involved are okay with that trade.

So keep an eye on [your security settings](https://www.wired.com/story/how-to-check-app-permissions-ios-android-macos-windows/ "www.wired.com"), actually [read your EULAs](https://measuringu.com/eula/ "measuringu.com") (or at least give it a good college try), and take a few moments to consider what you’re giving in exchange for that “free” product or service.

## Learn about the most common cyber security threats

[Cyber criminals are constantly changing and adapting their techniques](https://www.ncsc.gov.uk/cyberaware/home "www.ncsc.gov.uk") for getting their hands on your info, but the absolute best protection against it: knowledge. Learn about the different ways your information can be accessed and stolen so it’s more obvious to you when you see it.

Even things as simple as keeping different passwords for different accounts, and turning on 2-factor authentication can go a long way.

## Best VPNs in 2023

This could be a blog post in itself (and probably will be soon) but we’d be remiss if it wasn’t included in this list. There are a variety of VPNs out there to suit your needs and price point, whether it’s just a browser extension or something for your whole household.

[TechRadar](https://www.techradar.com/vpn/best-vpn "www.techradar.com") has done a really great review of all the major VPNs out there right now, so have a read for the most current info and get started. Most offer free 30 day trials!

## Protect your data with backup and recovery software

And of course, rely on Macrium Reflect to protect your home PCs. Whether your data is compromised by hackers, lost due to human error, or destroyed due to a natural event, a well-planned backup strategy will protect you when you need it most.

Running regular backups is like a good insurance policy, and routinely checking you can restore them is the easiest way to trust your data is in good hands. And with [Macrium Image Guardian (MIG)](/mig), you can rest easy knowing that even your backup files are safe from ransomware.

![macrium-software-adoption-certificate-lovedateweek23.png](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/macrium_software_adoption_certificate_lovedateweek23_84a3327e78.png)

It’s been said and repeated countless times, but data is the most valuable resource in the world. Your data. Everyone’s data. Companies are still clamoring to learn everything and anything about you to sell on to the highest bidder, hackers are hoping to get a valuable nugget for ransom leverage, and others are just collecting… collecting and waiting for a time when it can be best used. 

Sounds more like a horror story than a romance, but you aren’t powerless!

6 best ways to love your data

Similar to the [federal government](/blog/the-federal-government-and-cybersecurity-risks "The Federal Government and Cybersecurity Risks"), state and local governments have cybersecurity threats. While the federal government is in charge of the U.S. as a whole, state and local governments manage cities, towns, tribals, and municipalities. This difference also leads to shifts in the way governments establish cybersecurity. On a state-to-state or city-to-city level, applications may change based on a number of factors. 

## What Does Cybersecurity Look Like on the State and Local Level?

State and local governments are vulnerable to cybercriminal activity as “they collect, process, store, and transmit vast amounts of sensitive data.” The wrong hands can weaponize and misuse data.

In 2020, hackers carried out 79 individual [ransomware attacks against U.S. government organizations](https://icma.org/blog-posts/practical-measures-local-government-avoid-ransomware "icma.org"). It cost downtime and recovery of nearly $18.88 billion. Clearly, ransomware is pervasive. The attack suspended “municipal operations, ultimately disrupting infrastructure services for 911 systems, utilities, and payment platforms with state and local governments.” 

[Cybercriminals target local governments](https://www.nlc.org/wp-contenthttps://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/2020/04/SML_2020Report_web-1.pdf "www.nlc.org"), which can “threaten to erode the trust that residents have in critical institutions.” The increasing reliance on IoT and automated systems may invite cyberattacks. They take advantage of gaps in security and the multiple entries of technology. Inadequate security measures and negligence within municipalities generate cyber risks.

![1406439_state-and-local-gov-graphic-3-2_071522.jpg](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/1406439_state_and_local_gov_graphic_3_2_071522_3fc6314d14.jpg)

From a [review of local government cybersecurity in 2020](https://icma.org/articles/pm-magazine/look-local-government-cybersecurity-2020 "icma.org"), local governments have three ways of cybersecurity structure: 

1.  **Centralized**: A single IT department is responsible for managing all the cybersecurity in a town or city. As a benefit, it ensures an extensive coverage of risks.
2.  **Decentralized**: Every department must run its own cybersecurity. Unlike centralized, a police department or building division in a town government must deal with IT matters individually.
3.  **Federated**: For local governments that operate with federated, it’s shared. The chief information security officer (CISO) assumes part of the authority for cyber protection. Local offices and departments take on the rest. The disadvantage of this model is that the CISO does not set the precedent for local government departments. A lot of breaches and cyberattacks can happen from a lack of education surrounding proper cybersecurity protocols. If a CISO is unable to totally control a local government’s cybersecurity, departments may be susceptible to hackers.

## Cybersecurity Preparedness

As with federal government agencies, local and state governments commonly take action post-attack. 

An example comes from the Riverside Ohio police and fire department in 2018\. The department servers suffered an unrecoverable data loss from 10 months of information. Unfortunately, it “effectively shut down the police department’s records management system.” Surprisingly, Riverside went through another data loss only a month after the initial shutdown. Since the first time, they ran daily backups in case it happened again, which it did. In March 2018 and May 2019, [two attacks occurred in the local government](https://icma.org/blog-posts/practical-measures-local-government-avoid-ransomware "icma.org") of the city of Baltimore as well. 

An [IBM news report](https://newsroom.ibm.com/2020-02-27-IBM-Survey-Only-38-of-State-and-Local-Government-Employees-Trained-on-Ransomware-Prevention "newsroom.ibm.com") examined the results from a poll. In it, U.S. city and state employees assessed their readiness for cyberattacks. Overwhelmingly, more than natural disasters and terrorist attacks, 73% of government employees feared “impending ransomware threats to cities across the country.” 

![1406447_stateandlocalgovgraphic1_071922.jpg](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/1406447_stateandlocalgovgraphic1_071922_969ebd5e0d.jpg)

Moreover, respondents revealed the prevalence of ransomware attacks. A poll showed that the departments of 1 in 6 employees had a ransomware attack. This evidence has not stimulated proactive prevention. Only 38% of employees received “general ransomware prevention training.” 

Along with cybersecurity structure in local government, there are obstacles to achieving uniform and effective cybersecurity across states, towns, and cities.

## Problems in Governments that Cause Cyber Risks 

Other factors contribute to the flaws in cybersecurity at this level of government. [IoT emerges as a feature in buildings](https://www.researchandmarkets.com/reports/5356053/global-smart-buildings-market-by-technology-ai "researchandmarkets.com") that will only continue, according to Smart Buildings Market for 2021-2026\. The research estimates that “over 78% of new construction will involve at least one facet of IoT and/or related smart buildings market-related technologies over the course of the next five years.”

More state and local governments will incorporate these types of technologies into their offices. "[T]hese internet-connected devices and systems greatly increase exposure to cybersecurity risks.” IMCA reviewed the [consideration for IoT safety in municipalities](https://icma.org/blog-posts/cybersecurity-considerations-implement-iot "icma.org"). They go in hand with the accessibility and streamlined application that IoT offers. Technology is not dangerous but a lack of cybersecurity resources is.

![1406375_stateandlocalgovgraphic1_071422.jpg](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/1406375_stateandlocalgovgraphic1_071422_91111930fa.jpg)

Risks for administering IoT devices:

*   Weak or hard-coded passwords
*   Old and unpatched embedded operating systems and software
*   Insecure data transfer and storage
*   Lack of secure updates

![1406389_state-and-local-gov-graphic-2-2_071822.jpg](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/1406389_state_and_local_gov_graphic_2_2_071822_43e47181bc.jpg)

The Center for Digital Government (CDG) surveyed 103 state and local officials to [determine why governments lacked an effective security strateg](https://www.govtech.com/sponsored/how-state-and-local-governments-can-make-their-security-operations-ready-for-the-future "govtech.com")y:

*   46% said lack of cybersecurity skills among their workforce
*   40% said issues with integrating security tools
*   36% said the inability to rapidly respond to threats

The following security and compliance challenges include: 

*   Legacy 
*   Unpatched and non-supported networks increasing exposure
*   Excessive manual processes 
*   Limited enterprise visibility around the endpoints connected to networks

From the survey, 66% of participants acknowledged that “their data-sharing practices are only somewhat mature or not mature at all."

Governments experience challenges with data accessibility and sharing. They have difficulty transforming data into actionable intelligence. It's a result of different data formats and storage environments. “At the same time, governments must deal with an ever-evolving regulatory environment and an increasingly privacy-focused landscape that makes it safer for them to limit data sharing rather than expose themselves to added risks.”

Data analytic challenges from a CDG survey:

*   41% said security
*   38% said privacy concerns
*   35% said data quality
*   34% said data silos

The article poses a few solutions:

*   Governments need to better align their data with people, technologies, and processes for the connection to be seamless.
*   Storing and indexing data calls for reconfiguration for security. 
*   Muncipilatites must leverage modern technologies to support data sharing across departments.
*   Cybersecurity is a necessity and data contains confidential information that demands protection. 

On top of this, 52% of state and local government IT/Security professionals agreed their budget hasn’t improved. This could hinder [training on ransomware prevention](https://newsroom.ibm.com/2020-02-27-IBM-Survey-Only-38-of-State-and-Local-Government-Employees-Trained-on-Ransomware-Prevention "newsroom.ibm.com/").

## What Regulations Constitute State and Local Cybersecurity? 

The EU implements the [General Data Protection Regulation (GDPR)](https://gdpr.eu/what-is-gdpr/ "gdpr.eu"), a data privacy and security law that provides regulations for organizations worldwide to control cybersecurity. Some states have begun implementing cybersecurity mandates on their own. Following this, the U.S. is starting to catch up with statewide mandates such as the [California Consumer Privacy Act (CCPA)](https://oag.ca.gov/privacy/ccpa "oag.ca.gov"). The act provides guidance for California businesses and organizations, mostly to protect consumers and let them have greater control over their personal information and what businesses can take advantage of. 

Additionally, the [2018 California Civil Code on Security of Connected Devices](https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201720180SB327 "leginfo.legislature.ca.gov") places a new requirement on manufacturers. On January 1, 2020, manufacturers began following these guidelines. IoT devices are now sold with the right security features to protect data and privileged information. The code will reduce "unauthorized access, use, adaption, disclosure, or destruction."

The New York City chief technology officer issued the New York City Internet of Things. It defines IoT safety and security practices. The new order creates processes to evaluate city technology. ICMA's “Cybersecurity Considerations to Implement IoT,” also gives recommendations for improvement.’”

The Committee on Homeland Security wants to introduce [The State and Local Cybersecurity Improvement Act](https://homeland.house.gov/imo/media/doc/State%20and%20Local%20Cyber%20Act%20Fact%20Sheet.pdf "homeland.house.gov"). The proposal stems from fears that the federal government is slow to cybersecurity. Stretched state and local budgets and current defenses cannot stand against foreign hackers.

The act develops "a new Department of Homeland Security (DHS) grant program." Advocates plan to tackle cybersecurity risks for state and local governments.

A National League of Cities report, “[State and Local Partnerships for Cybersecurity](https://www.nlc.org/wp-contenthttps://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/2020/04/SML_2020Report_web-1.pdf "www.nlc.org"),” believes in a collaborative approach. Cities and states can strengthen national cybersecurity infrastructure together. 

Currently, “Delaware is the only state that offers voluntary statewide cybersecurity training for state non-executive and local government employees.” Out of the 50 U.S. states, only 16 mandate cybersecurity training. Nine states lack cybersecurity training programs completely. 

Organizations are fighting to unify and structure the inconsistencies among states.

## How to Secure Critical Local and Government Data 

Beyond firewalls and antivirus software, a simple and inexpensive (compared to ransomware costs) solution is keeping backup images and copies of data. In this way, governments will have another layer of protection in case of ineffective cybersecurity. 

Security is central to software design at Macrium. Our applications give you complete control over where your data is stored and will operate fully offline for the most secure, air-tight networks.

Macrium Software provides extensive backup imaging for this reason.


State and local governments are vulnerable to cybercriminal activity as “they collect, process, store, and transmit vast amounts of sensitive data.” The wrong hands can weaponize and misuse data. In 2020, hackers carried out 79 individual ransomware attacks against U.S. government organizations. It cost downtime and recovery of nearly $18.88 billion. Clearly, ransomware is pervasive. The attack suspended “municipal operations, ultimately disrupting infrastructure services for 911 systems, utilities, and payment platforms with state and local governments.” 

State and Local Government Cybersecurity Risks

Here in the northern hemisphere, summer has rolled round again, bringing record temperatures across Europe and North America with it. While a cold shower or an icecream might be enough to cool us down, things aren’t so simple for the devices that we trust to store our data. Have you ever wondered why data centres are so cold? The answer is slightly more complex than “to keep the IT people cool”.

We all know that excess heat is bad for our devices. You may have even seen pictures or videos of competitive overclockers using liquid nitrogen to stop their CPUs overheating, and if you haven’t: [tomshardware has got you covered](https://www.tomshardware.com/reviews/how-to-competitive-overclocking-overclocker-tips,5636.html "tomshardware.com"). However, proper cooling isn’t just important for CPUs, it is also important for storage devices.

First, it can be beneficial to define what is a good temperature for a storage device. Although the exact numbers will vary from manufacturer to manufacturer, some basic outlines are

Solid State Drive (SSD) - 0 °C to 60°C (32°F to 140°F)

Hard Disk Drive (HDD) - 0ºC up to 70ºC (32ºF to 158ºF)

For more information you should read the manufacturer’s specification. This example is from a [Samsung 870 EVO](https://www.samsung.com/uk/memory-storage/sata-ssd/870-evo-1tb-sata-3-2-5-ssd-mz-77e1t0b-eu/ "samsung.com"):

![20220725-why-you-should-keep-your-data-cool-this-summer.png](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/20220725_why_you_should_keep_your_data_cool_this_summer_1f814025b5.png)

What happens if the temperature of the drives rise above this? Well, basically, nothing good. Many modern devices are smart enough to monitor their own temperature via their firmware. If temperatures reach a certain level, they may throttle their own performance to prevent further overheating. Whilst this is good as it prevents the drive from further overheating and potentially damaging components, this may also lead to reduced performance including reduced I/O performance. This [large-scale case study](https://users.ece.cmu.edu/~omutlu/pub/flash-memory-failures-in-the-field-at-facebook_sigmetrics15.pdf "users.ece.cmu.edu") of flash memory failure in the field at Facebook’s datacentres notes:

_“Higher temperatures lead to increased failure rates, but do so most noticeably for SSDs that do not employ throttling techniques.”_

Not only have they noticed a correlation between shorter flash storage lifespan with higher temperature, but drives that don’t implement performance throttling at higher temperatures had noticeably shorter lifespans than their counterparts that do.

In [this whitepaper](https://aiot.innodisk.com/wp-contenthttps://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/2020/07/Achieving-Extensive-Data-Retention-in-High-Temperature-AIoT-Applications-1.pdf "aiot.innodisk.com"), innodisk also draw a correlation between temperature and a decrease in data retention. 

_“Data retention decreases in higher temperatures and with increasing program/erase (P/E) cycles as both these factors induce a higher rate of charge leakage.”_

Charge leakage occurs when the dielectric barrier designed to trap a charge in the flash cell degrades, if the dielectric degrades too much, the cell can no longer hold a charge and thus can’t be programmed. For more information about the structure of NAND flash cells, I recommend reading [this blog post](/how-do-ssds-work#:~:text=SSDs%20are%20fundamentally%20made%20up,SSD%20and%20the%20host%20interface. "macrium.com"). Higher temperatures mean that charged particles in the flash cell move more, further eroding the dielectric layer. 

As for HDDs, [in this article by Backblaze](https://www.backblaze.com/blog/hard-drive-temperature-does-it-matter/ "backblaze.com") they indicate that in their datacentre there was no significant correlation between drive temperature and drive failure rate. In their ‘Hard Drive Temperature Takeaways’ they state:

_“As long as you run drives well within their allowed range of operating temperatures, keeping them cooler doesn’t matter.”_

However, this leaves a lot of room for speculation if the HDD exceeds the operating temperature, something that might not be that difficult as temperatures spike globally, and the average user does not have datacentre cooling to rely on.

The good news, however, is that there are steps we can take to help our storage devices out. Most methods to keep data cool may seem like common sense: from keeping devices away from direct sunlight, placing the device in an area with good air circulation, to avoiding heavy workloads in high temperatures and turning the device off when not in use; there are a lot of things we can do to reduce the temperature of our devices.

On the very hottest days, if you can’t keep your storage cool, just turn it off; that’s what Google and Oracle do.

[https://www.bbc.com/news/technology-62202125](https://www.bbc.com/news/technology-62202125 "bbc.com")

Keeping devices as cool as possible will not only prevent potential damage from overheating but many also improve data retention.


Here in the northern hemisphere, summer has rolled round again, bringing record temperatures across Europe and North America with it. While a cold shower or an icecream might be enough to cool us down, things aren’t so simple for the devices that we trust to store our data. Have you ever wondered why data centres are so cold? The answer is slightly more complex than “to keep the IT people cool”.

Why you should keep your data cool this summer

company

# Macrium Software one of UK’s Best Workplaces in Tech™

[Manchester, UK] The 2023 UK’s Best Workplaces in Tech™ list has been launched by Great Place To Work® UK, recognising Macrium Software among the list of organisations in the Small and Medium category.

Macrium Software’s employees anonymously reported that innovation and collaboration within the business make the company a great place to work.

> “The company culture is extremely friendly, I always feel comfortable going to my colleagues for help. Hard work is definitely recognised and management appreciates the extra effort that's made. I have felt extremely welcomed when working with different departments and have always been given help and resources when needed. It's a really nice feeling to enjoy working and knowing that I can ask for help if it is needed!”

An employee survey comment

## Great Place To Work® UK - Best Workplaces in Tech™️ list 

Now in its sixth year, the Best Workplaces in Tech™️ list celebrates companies adept at developing dynamic, collaborative cultures that serve as a catalyst for innovation and personal growth for all.
Great Place To Work® UK administered its research-backed Trust Index© employee survey and analysed the responses of UK-based tech employees to determine the Best Workplaces™ list.  

The surveys asked employees to comment on how their company supports their work-life balance, sense of fulfilment, job satisfaction, psychological safety and financial security. 

Evaluations also included an assessment of how well the organisation was able to deliver consistency of employee experience across all departments and seniority levels. 

Macrium Software is one of just five businesses in the North West to make the 2023 list in the category. The business also received Great Place to Work’s certification and featured on its .. lists earlier in 2023. 

## People are “Our Greatest Asset”

Macrium Software’s CEO, Nick Sills, said:

> “At Macrium Software, we recognise that our people are our greatest asset. We take great pride in fostering a supportive and positive working environment, where each individual can thrive and reach their full potential. We believe that by investing in our employees' professional and personal development, we can achieve the highest levels of success and innovation as a company. As a team, we are dedicated to creating a culture that values collaboration, creativity and mutual respect and we are committed to providing our employees with the resources they need to excel both in and outside of the workplace.”

## Keeping People “At the Heart of the Business”

Benedict Gautrey, Managing Director of Great Place To Work® UK said:

> “The Best Workplaces in Tech™️ list is created using the anonymous feedback collected from employees within the technology industry about their workplace experience. In one of the country’s fastest-growing industries, it’s fantastic to see these Tech organisations putting their people strategy at the heart of the business and implementing policies, practices and programmes that sustain an impactful and consistently great employee experience for all. A huge congratulations to Macrium Software for making one of our most prestigious lists.”

---ENDS---

### About Macrium Software 

Macrium Software is the industry leader in image-based backup and recovery software. We’re a vital part of digital security and business continuity plans for enterprise businesses, SMBs, and IT professionals across all industries and sectors. In a world where data is the most valuable resource, we've made it our business to protect yours. 

[www.macrium.com](/)

Follow Macrium Software online: [Twitter](https://twitter.com/macrium), [LinkedIn](https://www.linkedin.com/company/paramount-software-uk-limited), [Facebook](https://www.facebook.com/macrium/), and [YouTube](https://www.youtube.com/macrium/)

© 2023. Paramount Software UK Limited. Macrium Reflect® is a registered trademark of Paramount Software UK Limited. 

### About Great Place To Work®

Great Place To Work® is the global authority on workplace culture, on a mission to make every company a great workplace for all. Every year, they receive direct feedback from over 10 million workers around the world telling us how they really feel about their employer. 

Their survey is completely confidential and anonymous, so people can feel comfortable to be honest about their workplace, and companies can gain detailed insights into how they can better serve their people.

Only those employers who have the highest levels of trust, job satisfaction, and who empower ALL their employees to thrive both in and outside of work are awarded official Best Workplaces™ recognition.

For more information, visit [www.greatplacetowork.co.uk](https://www.greatplacetowork.co.uk/)

Macrium Software has been named as one of the UK's Best Workplaces in Tech™ by Great Place To Work®, the global authority on workplace culture.

Macrium Software one of UK’s Best Workplaces in Tech™

# 5 Ways You Can Protect Your Backups From Ransomware

Cyber criminals no longer need technical expertise to launch ransomware attacks. In fact, they can be executed with a software solution that costs as little as $40 a month. 

Reports show that ransomware cases [increased by 84%](https://www.nccgroup.com/uk/newsroom/annual-ransomware-attacks-increased-by-84-in-2023/) in 2023. And with the global ransomware threat [expected to rise](https://www.ncsc.gov.uk/news/global-ransomware-threat-expected-to-rise-with-ai) as AI becomes more commonplace, the dangers this malware poses to businesses is unlikely to go away any time soon. 

## Why do Cyber Criminals Target Business Backups?

Your business' backups are a valuable target for cyber criminals for a number of reasons. Gaining access to your backups allows them to: 

- **Access extremely valuable data -** Business backups hold valuable data that criminals can use for [exfiltration](https://geekflare.com/data-exfiltration/). For example, sensitive customer credentials, financial details and intellectual property. 

- **Disable operations for leverage -** Many businesses rely heavily on the data stored in their backups for continuity. For example, manufacturing and healthcare businesses may need access to instructions, batch records, certificates and test results to operate on a daily basis. In some cases, losing this data can cause operations to grind to a halt.

- **Cover their tracks -** Ransomware can go undetected for a long time. This increases the potential for devices and files to be infected on a much larger scale. If cyber criminals have infiltrated a network and compromised data, they may attempt to cover their tracks by deleting or encrypting backups. This makes it harder for businesses to recover the original data and trace the source of the attack.

- **Encrypt or delete your data -** A ransomware actor's main upper hand is the threat to delete or encrypt a businesses' data. As backups store a company's most comprehensive and valuable information, access to these are all a criminal needs to achieve their ends.

## How to Protect Your Business Backups from Ransomware

Here are five steps your business can take to mitigate the risk of cyber criminals accessing your backups. 

### 1. Segregate Backups From Your Network

Segmenting backups from the rest of your technology infrastructure can help isolate and protect them. But as long as they’re connected, they’re still vulnerable. 

Keeping backups on a hard drive or a server that’s disconnected from external networks when not in use, also known as [air-gapping](https://csrc.nist.gov/glossary/term/air_gap), is the only foolproof way to keep ransomware actors from accessing them. 

But what makes this approach so secure also makes it extremely inconvenient. Air-gapped backups often require a massive amount of storage space. Additionally, the hardware must be stored somewhere secure. This may not be a problem for a small business that can fit its backup on a single hard drive, but large enterprises may require several servers.

Also, reconnecting hardware to the network regularly can be difficult and time-consuming. The recovery process can take a lot of time as well. For these reasons, this method is best used for only the most critical data.

### 2. Keep Multiple Backups in Multiple Formats

Making several copies of a backup on different types of media makes it more likely that you will have at least one usable copy in case of a ransomware attack. 

One widely recommended approach is called the 3-2-1 strategy. This involves making at least three backups. These are stored in at least two different formats and at least one copy is stored offsite. For example, you could keep one backup copy backed up on an on-site server, another backed up on a server at an offsite location and another copy in the cloud.

### 3. Back up Often Using Different Techniques

Every business should back up data and systems regularly. However, maintaining multiple complete backups may not be feasible for many reasons.

[Incremental and differential](https://blog.macrium.com/incremental-vs-differential-backup-what-are-the-differences-and-how-do-they-compare-3213b093b56a?external_link=true) backups can reduce the burden of storage as well as risk. In an attack, ransomware may be limited to an incremental rather than a full backup. Incremental and differential backups can also be useful during a forensic analysis to determine exactly how and where ransomware compromised them. 

### 4. Limit Access to Backups and Backup Applications

Research shows that [88% of data breaches](https://securitytoday.com/articles/2022/07/30/just-why-are-so-many-cyber-breaches-due-to-human-error.aspx) are caused by human error. Employees can fall for phishing scams, or they might unknowingly download malicious files from a contaminated USB drive or other device. 

While regular security training and a culture that emphasizes security awareness can reduce the risk of these errors, statistics show that may not be sufficient to protect against ransomware. 

A more effective approach is to minimize the number of people on the IT team who have access to backups and any applications used to manage them. Backup tasks and responsibilities can also be divided among different IT team members, either by function or by type of data (such as databases, applications, or documents). This prevents any one person from having total control over backups, limiting the damage if their credentials or access are compromised. 

### 5. Test Backups Regularly

The last thing you want to find in the event of a ransomware attack is that the backups you were counting on have also been encrypted or corrupted. That’s why it’s crucial to test backups regularly and conduct random spot checks to validate their integrity.

If ransomware has compromised a backup, testing increases your chances of detecting it as early as possible, limiting damage and preventing it from spreading to your network. 

## Macrium Image Guardian - Keeping Your Backups Safe from Ransomware

Macrium products, including our backup and recovery solution [Reflect,](https://www.macrium.com/reflectfree#business-backup-and-recovery-with-reflect-workstation) our backup management software [Site Manager](https://www.macrium.com/site-manager) and our imaging and deployment tool [SiteDeploy](https://www.macrium.com/products/business/technicians/sitedeploy-imaging-deployment-software) all include access to Macrium Image Guardian (MIG). MIG is a feature that prevents backup files from being encrypted by ransomware.

[Download a free trial of Macrium Reflect here](https://www.macrium.com/reflectfree) to see how these products and features can help protect your business from ransomware threats. 

[Access Your Free Trial](BUTTON_SUCCESS=/reflectfree)


A photograph of a man's hand stopping dominos falling, representing stopping a ransomware attack in its tracks.

Macrium-Software-Five-Ways-you can-Protect-your-Backups-from Ransomware.png

Don't let your business fall prey to extortion attempts by cyber criminals - here are 5 ways you can protect your backups from ransomware.

5 Ways You Can Protect Your Backups From Ransomware 

A hand holding a set of keys, symbolising that AES is an encryption standard that protects and locks files

Macrium-Software-What-Is-The-Advanced-Encryption-Standard-AES-Explained.png

# How Ransomware Works - A Guide for Small Businesses

Ransomware has emerged as one of the most devastating cyber threats out there for businesses. It wreaks havoc on companies of all sizes, individuals and government institutions around the globe.

This type of malicious software, or malware, encrypts victims' data, rendering it inaccessible until a ransom is paid, often in cryptocurrencies.
Understanding ransomware and how it operates is crucial for small businesses to protect themselves effectively.

In this post, we'll delve into how ransomware works and the steps you can take as a small business to boost your ransomware resilience.

## The Rise of Ransomware 

Ransomware attacks have been on the increase in recent years as cyber criminals constantly evolve their tactics to maximize profits. According to bodies such as the UK’s [National Cyber Security Centre (NCSC)](https://www.ncsc.gov.uk/), the global threat of ransomware [is only likely to rise ](https://www.ncsc.gov.uk/news/global-ransomware-threat-expected-to-rise-with-ai) with the increasing prevalence of AI.

It may be tempting to think that smaller businesses would be less of a target to criminals than larger corporations. But data shows otherwise:

- Over three-quarters of cyber incidents [impacted small businesses](https://news.sophos.com/en-us/2024/03/12/2024-sophos-threat-report) in 2023, with ransomware having the biggest impact on these firms.
- In 2023, the number of first-time attacks against small US-based businesses [jumped 18 percentage points](https://www.idtheftcenter.org/publication/itrc-2023-business-impact-report/) compared to 2022.
- 61% of small-to-medium-sized businesses [were hit by a successful cyber attack](https://www.blackfog.com/smbs-were-victims-cyberattack/) between 2022 and 2023.

"Ransomware affects all sizes of businesses across all sectors, but we have seen it hit small- and medium-sized enterprises the most frequently. In 2021, the Institute for Security and Technology’s Ransomware Task Force found that 70% of ransomware attacks targeted small businesses." **The 2024 Sophos Threat Report: Cybercrime on Main Street.**

## How Ransomware Works: A Step-By-Step Overview

Ransomware typically infiltrates systems through phishing emails, malicious attachments, or exploiting vulnerabilities in software.
Once it's inside a system, it encrypts files, making them inaccessible to the user. The attackers then demand payment, usually in cryptocurrency, in exchange for a decryption key to unlock the files.

This is the order ransomware attacks usually take.

### Ransomware Infiltration

Ransomware infiltrates a system through various means, including:
Phishing Emails - Attackers often distribute ransomware through phishing emails that contain malicious attachments or links. These emails may masquerade as legitimate messages from trusted sources, enticing recipients to open attachments or click on links that contain the ransomware payload.

- **Exploiting Vulnerabilities**- Ransomware can exploit vulnerabilities in software or operating systems to gain access to a victim's system. Cyber criminals may exploit known vulnerabilities that have not been patched by the victim's organization, allowing the ransomware to infiltrate the system undetected.

- **Encrypting Files** - Once the ransomware is executed on a victim's system, it begins [encrypting files](https://www.macrium.com/mig) using strong encryption algorithms. This process typically targets a wide range of file types, including documents, images, videos and databases, among others. As the encryption process proceeds, the files become inaccessible to the user and the contents are effectively locked.

### Issuing a Ransom Note

After encrypting the files, ransomware typically displays a ransom note on the victim's screen. This note informs them that their files have been encrypted and provides instructions on how to pay the ransom to receive the decryption key. 

The ransom note may include details such as the amount of the ransom, the deadline for payment and the cryptocurrency wallet address to which the ransom should be sent.

### Data Exfiltration

In some cases, ransomware operators may also exfiltrate sensitive data from the victim's system before encrypting it. They may threaten to release this data publicly if the ransom is not paid, adding another layer of pressure on the victim to comply with their demands.

### Demanding Payment

If the victim chooses to pay the ransom, they’re typically instructed to do so using cryptocurrencies such as Bitcoin or Ethereum. These currencies offer a degree of anonymity to the attackers. Once the ransom payment is made, the attackers may provide the victim with a decryption key or tool to unlock their files. 

However, there is no guarantee that paying the ransom will result in the successful decryption of files. It may also incentivize further ransomware attacks. These are just some of the many reasons why cyber crime authorities and government bodies advise against paying ransoms to cyber criminals.

![A graphic explaining the typical stages ransomware demands take, including infiltration, encryption, ransom, exfiltration and payment.](https://strapistoragemacrium.blob.core.windows.net/strapi-uploads/uploads/Macrium_Software_Ransomware_Infographic_March_2024_3e17c66a31.jpg)

## How to Mitigate Ransomware Threats

“Many ransomware incidents can be prevented by ensuring that appropriate security measures are in place.” **Felicity Oswald, Chief Operating Officer, NCSC.**

As with all types of cyber security threats, it’s widely accepted that businesses should prepare for **when** a ransomware attack happens, rather than **if**. These steps are the basics any small business should take as a starting point to building their ransomware resilience.

### 1.) Back up Data Regularly

Maintain regular backups of important data to minimize the impact of ransomware attacks. Ensure backups are stored securely and are accessible in the event of an attack.

### 2.) Stay on Top of Patch Management

Keep software and systems up to date with the latest security patches to mitigate any vulnerabilities that could be exploited by ransomware.

### 3.) User Training

Keep your teams educated and alert on the dangers of phishing emails and the importance of practicing good cyber security hygiene.

### 4.) Implement Network Segmentation

Network segmentation can limit the spread of ransomware within your business’ network.

### 5.) Invest in Quality Security Software

Choosing robust antivirus and antimalware solutions can help detect and prevent ransomware infections.

## Ransomware Resources and Guidance for Small Businesses

Government bodies around the world have recognized the urgent need to combat ransomware. The US’ [Cybersecurity and Infrastructure Security Agency (CISA)](https://www.cisa.gov/) issues alerts and guidance to help businesses protect their data against ransomware attacks.

Similarly, the [NCSC](https://www.ncsc.gov.uk/) provides resources and advice to businesses on securing their systems and responding to ransomware incidents.

### CISA

CISA offers excellent resources on ransomware via its dedicated [Stop Ransomware](https://www.cisa.gov/stopransomware) site. Some useful downloads for small businesses include:
- A ransomware [response checklist](https://www.cisa.gov/stopransomware/ive-been-hit-ransomware)
- The ransomware [protection guide](https://www.cisa.gov/stopransomware/how-can-i-protect-against-ransomware)
- Ransomware [readiness self-assessment](https://www.cisa.gov/downloading-and-installing-cset)

### NIST
The US’ [National Institute of Standards and Technology (NIST)](https://www.nist.gov/) offers resources such as:
- The [ransomware protection and response guidelines](https://csrc.nist.gov/projects/ransomware-protection-and-response)
- [Videos](https://www.youtube.com/watch?v=2I7Jn1qHw4U) on protecting your small business from ransomware
- [Infographics](https://csrc.nist.gov/CSRC/media/Projects/ransomware-protection-and-response/documents/NIST_Ransomware_Tips_and_Tactics_Infographic.pdf) featuring ransomware protection tips

### NCSC
The NCSC also issues guidance and support for businesses to help them prepare for ransomware attacks, including:
- The small business' [guide to cyber security](https://www.ncsc.gov.uk/collection/small-business-guide)
- A [guide](https://www.ncsc.gov.uk/guidance/phishing) to protecting your business from phishing attacks
- The [cyber incident response scheme](https://www.ncsc.gov.uk/schemes/cyber-incident-response)  

## Keeping Your Small Business Protected Against Ransomware

Ransomware attacks can have severe consequences for small businesses. They face financial losses from ransom payment demands. But they can also suffer downtime, data breaches and reputational damage that can be difficult, if not impossible, to recover from.

By understanding how ransomware operates, putting effective cyber security measures in place and implementing trusted tools and software, small businesses can protect themselves as much as possible against this malicious threat.

At Macrium Software, we’re aware of the damage ransomware can do to your business. [Get in touch](https://www.macrium.com/contact) for an informal chat about how our products can help guard your business’ valuable data. 

[Contact Us Here](BUTTON_SUCCESS=/contact)





How-Ransomware-Works.png

A guide for small businesses on how ransomware works, featuring useful resources from government bodies to help them prepare for an attack.

How Ransomware Works - A Guide for Small Businesses

# What is Data Loss Prevention?

In 2024, it’s fair to say that businesses can do very little, if anything, without data.

However, as our reliance on it only grows, the risk of data loss looms large. This presents a significant threat to continuity, compliance, reputation and ultimately, the future of your business.

This is where data loss prevention (DLP) strategies come into play. Thinking proactively about preventing data loss is an important step. Not only to safeguard valuable assets, but also to ensure your overall disaster recovery plan has all your bases covered.

In this article, we delve into the concept of data loss prevention and underscore the critical role of data backup in ensuring business continuity and resilience.

## Understanding Data Loss Prevention

DLP is essentially a set of policies, tools and technologies designed to mitigate the risk of data breaches, leaks and unauthorized access. 
The benefit of actively considering DLP is ultimately, to prevent your business’ and customers’ sensitive data from being compromised or falling into the wrong hands, whether intentionally or accidentally. 

It involves identifying, classifying and monitoring sensitive data throughout its lifecycle. And implementing access controls, encryption and monitoring mechanisms to enforce data security policies.

## What Should DLP cover?

Factoring in the below points is a strong start to making sure you’ve considered all angles when it comes to DLP.

### Data Discovery and Classification

Identifying sensitive data across the organization's network, endpoints and cloud repositories and classifying it based on predefined criteria such as confidentiality, integrity and regulatory compliance.

### Data Leakage Prevention

Monitoring and controlling the flow of data within and outside your organization to prevent unauthorized disclosure or transmission of sensitive information.

### Endpoint Security

Securing endpoints such as desktops, laptops and mobile devices to protect against data exfiltration, malware and insider threats.

### Encryption and Access Controls

Encrypting [data at rest](https://www.techtarget.com/searchstorage/definition/data-at-rest) and [data in transit/motion](https://www.techtarget.com/whatis/definition/data-in-motion) and implementing granular access controls to ensure that only authorized users can access sensitive information.

## The Importance of Data Backup

While data loss prevention strategies play a crucial role in mitigating the risk of data breaches and leaks, they alone are not foolproof. 

Despite the most stringent security measures, data loss can still occur due to various factors such as hardware failure, software glitches, human error, or malicious attacks. 

This is where [data backup](https://www.macrium.com/products/business/standalone/workstation) emerges as a fundamental component of a comprehensive DLP strategy.

By maintaining up-to-date backups, businesses can recover lost or corrupted data in the event of a disaster, minimizing downtime, financial losses and reputational damage.

## Key Considerations for Data Backup

- **Regular Backup Scheduling** - Establishing a regular backup schedule based on your business’ data retention policies and operational requirements.
- **Offsite and Cloud Backup** - Storing backup copies in offsite locations or leveraging cloud-based backup solutions to ensure redundancy and resilience against onsite disasters.
- **Encryption and Data Integrity** - Encrypting backup data to protect against unauthorized access and implementing mechanisms to verify the integrity and authenticity of backup copies.
- **Testing and Recovery Procedures** - [Regularly testing backup](https://www.linkedin.com/pulse/protecting-your-digital-assets-importance-verifying-backups-novikoff-htibc%3F/) and recovery procedures to validate their effectiveness and identify any potential shortcomings before a real-world data loss scenario occurs.

In business environments where data is constantly in flux and threats are evolving, proactive data backup is not just best practice but essential. 
It serves as a safety net, providing assurance that critical data assets can be restored swiftly and efficiently, even in the face of unforeseen challenges.

By adopting a proactive approach to data security and embracing robust backup practices, your business can mitigate the risk of data loss, minimize operational disruptions and uphold customer trust and confidence.

## Explore your Data Backup and Recovery Options

When it comes to data protection, prevention is key, but being prepared is paramount. Discuss your backup and disaster recovery solutions with us by [getting in touch here](https://www.macrium.com/contact) or via the button below. 

[Contact Us Here](BUTTON_SUCCESS=/contact)

An IT administrator looking at a data loss prevention strategy on a tablet device, standing next to a server

Macrium-Software-What-Is-Data-Loss-Prevention-1200px-627px.jpg

We delve into the concept of data loss prevention and underscore the critical role of data backup in ensuring business continuity and resilience.

What is Data Loss Prevention?  |  Macrium Software Blog

What is Data Loss Prevention?

# Product Upgrade Announcement: Macrium Site Manager 8.1.7888

As part of our commitment to continual improvement, we’re pleased to announce a series of improvements to Macrium Site Manager 8.1. 

Responding to feedback and suggestions from our users, the latest version, 8.1.7888, includes fixes and new features to improve user experience.

## Greater Control Over Users and Permissions

Site Manager now offers administrators more control over assigning user permissions. They can now create custom roles from scratch or copy the permissions of an existing role. In the latest version, there are over 40 permissions to choose from.

Once an administrator has created a custom role, they can assign it to new or existing users and groups. The roles also carry over into Macrium Site Manager’s rescue media.

Combined with Site Manager 8.1’s centrally initiated restores and deployments for computers booted with the rescue media, the overhauled roles provide more flexibility and control over restores and deployments than ever before.

## Increased Visibility and Improved Management of Drivers

### 1. View All Drivers from One Location

In preparation for data disasters, Site Manager automatically harvests the necessary drivers from connected agents. 

Previous versions of Site Manager did not offer users visibility of these drivers. This presented challenges, as they can be difficult to keep track of and manage.

The latest version of Site Manager features a dedicated drivers page, located under both the restore and deployment menus. This shows users a list of the drivers that have been harvested by, or added to, Site Manager. It also includes information about each driver. 

### 2. Export Drivers Quickly

Users can now also rapidly export all drivers from Site Manager’s database. This allows them to use them when they create custom rescue media or copy the drivers to another Site Manager server.

### 3. Add New Drivers Easily

We’ve also simplified the process of adding new drivers to Site Manager, with the aim of making bare metal restores easier than ever. Previously, users had to manually add drivers to a named folder. The latest version of Site Manager now automatically analyses and adds them to the relevant PE version of the chosen rescue media.

## Avoid Backups During Your Busiest Times

The latest version of Site Manager brings users the option of avoiding backing up during their business’ busiest and most critical times.

By specifying active hours, users can be sure that in the event of queuing or misconfigured schedules, backups will be deferred to the next most convenient window. This also ensures that their system resources are reserved for critical processes and are not being used by the Site Manager agent.

## Other Site Manager Upgrades and Fixes

This post covers only the headline improvements to Site Manager. For a detailed view of the most recent changes to the software, visit our knowledge base for the [full release notes](https://knowledgebase.macrium.com/display/MSM8/Release+Notes#ReleaseNotes-8.1.7888-2024-02-22).

## Join Our Improvement Program for Previews and Early Access

If you have thoughts and opinions on how we can continue improving our products, we would love to hear them.

We’re looking for participants to join our technology preview program. Your valuable input will contribute to the development and future direction of our software.

As a participant, you will receive invitations to preview product improvements and try new features before they go on general release. Click [here](https://qualtricsxmdzrrpdgpk.qualtrics.com/jfe/form/SV_bDHr3V5e8kyYrhc) for more information.



A man shouting through a megaphone to convey a news announcement.

Macrium-Software-Product-Announcements-1200px-627px.png

As part of our commitment to continual improvement, we’re pleased to announce the latest upgrade of Macrium Site Manager 8.1.

Product Upgrade Announcement: Macrium Site Manager

Product Upgrade Announcement: Macrium Site Manager 8.1.7888

Your #1 resource for data backup, recovery, imaging and deployment insights and tips to help you develop your organisation's disaster recovery plan. | halloween

Macrium Software

Latest Blog Post

Latest Video

Need Help?

Products

Standalone

Site Backup

Deployment

Personal

Upgrade Products

Technicians