『Ctrl+Alt+Protect』のカバーアート

Ctrl+Alt+Protect

Ctrl+Alt+Protect

著者： Jason Russell
無料で聴く

Cybersecurity and technology for small business owners, explained in plain English. No jargon, no fear, no sales pitch. Hosted by Jason Russell.© 2026 Harmony MSP, LLC 経済学
エピソード
  • Episode 6: Patching, The Boring Habit That Closes the Most Common Way In

    Episode 6: Patching, The Boring Habit That Closes the Most Common Way In
    2026/10/19

    Most breaches don’t need a genius. They need a flaw that already has a fix, at a business that hasn’t installed it yet. Jason Russell follows a made-up Central Florida accounting firm whose firewall sat unpatched for two months, right up to the week before the tax deadline, then shows the boring habits that would have made the attack a non-event.

    Along the way: why a published fix is also a map for criminals, why small businesses fall behind, and the free government list that tells you what to patch first.

    In this episode

    • The most common way in. Exploited software flaws were the top entry point in 31% of breaches in Verizon’s 2026 report and 32% of intrusions in Mandiant’s M-Trends 2026.
    • The speed problem. Mandiant estimates attackers now exploit flaws about seven days before a fix is even released, on average.
    • Most businesses are behind. Only 26% of actively exploited flaws were fully fixed, and the median fix took 43 days.
    • Why patching gets skipped. Fear of breaking things, nobody owning it, forgotten devices, vendor software, and equipment that no longer gets fixes.
    • Four habits that fix it. Know what you have, let automatic updates handle the easy stuff, put the firewall and network gear on a calendar, and patch what’s under attack first.
    • CISA’s patch-this-first list. What the Known Exploited Vulnerabilities catalog is, how to get free alerts, and the two questions to ask your IT provider.

    Your one thing this week: take a picture of every box with a blinking light in your network closet, and find out when each one last got an update.

    Chapters

    • 0:00 Intro
    • 0:10 Three days before the tax deadline
    • 1:06 What a patch is, and why it’s also a map
    • 2:04 Why patching matters
    • 4:12 How the firm got breached
    • 5:08 Why small businesses skip it
    • 7:06 Four habits that make it routine
    • 9:31 The patch-this-first list
    • 11:07 The same story, done right
    • 12:16 Your one thing this week
    • 12:32 How to reach Jason

    Mentioned in this episode

    • Episode 3: How to Vet a Managed IT Provider
    • Episode 4: Don’t Make It Easy for Them (10 Cybersecurity Moves for Small Businesses)
    • Episode 5: Ransomware, Explained Without the Jargon
    • CISA Known Exploited Vulnerabilities Catalog

    Sources

    • Verizon, 2026 Data Breach Investigations Report
    • Google Cloud / Mandiant, M-Trends 2026
    • Sophos, The State of Ransomware 2026
    • Coveware by Veeam, Q2 2026 Quarterly Report
    • CISA, Known Exploited Vulnerabilities Catalog

    Want help building your equipment list?

    Email Jason directly at jason@harmony-msp.com. Send him your network closet photos, and he’ll help you figure out what’s overdue and what to fix first.

    Harmony MSP provides managed IT and cybersecurity for small businesses, medical and dental practices, law firms, and accounting firms across Central Florida. harmony-msp.com
    続きを読む 一部表示
    13 分
  • Episode 5: Ransomware, Explained Without the Jargon

    Episode 5: Ransomware, Explained Without the Jargon
    2026/10/12

    Ransomware rarely hits in one bad click. It's closer to a burglary that takes weeks, and every one of those weeks is a chance to stop it. Jason Russell follows a made-up Central Florida dental practice through a realistic attack, from one stolen password to a locked office on a Monday morning, then shows what would have changed the ending.

    Along the way: why attackers mostly log in instead of breaking in, why the ransom usually isn't the biggest bill, and what paying actually buys you.

    In this episode

    • The four stages of an attack. Get in, look around, take, lock, and why 79% of attacks in Sophos's 2026 survey started with someone's login.
    • The forgotten door. Among victims whose attack began with a stolen password, 97% had MFA turned on somewhere. Somewhere is the problem.
    • What it really costs. Median recovery cost was $375,000 before any ransom, and the average recovery took three weeks.
    • The HIPAA angle. Why HHS presumes ransomware on patient data is a reportable breach, and what that means for medical and dental practices.
    • Should you pay? Why the FBI says no, and what law enforcement found when it took down LockBit.
    • What actually stops it. MFA on every login, someone watching around the clock, backups that can't be deleted, and a plan on paper.

    Your one thing this week: list every way someone can log in to your business from the outside, and find out which ones don't have MFA.

    Chapters

    • 0:00 Intro
    • 0:10 A Monday morning at a dental practice
    • 1:06 Ransomware in plain English
    • 2:00 Too small to be a target?
    • 2:37 How an attack unfolds
    • 5:30 What it really costs
    • 7:14 Should you pay?
    • 8:12 What actually stops it
    • 11:27 The same story, done right
    • 12:18 Your one thing this week
    • 12:49 How to reach Jason

    Mentioned in this episode

    • Episode 1: How to Answer Cyber Insurance Renewal Questions Without Voiding Your Policy
    • Episode 4: Don't Make It Easy for Them (10 Cybersecurity Moves for Small Businesses)

    Sources

    • Sophos, The State of Ransomware 2026
    • Coveware by Veeam, Q2 2026 Quarterly Report
    • Verizon, 2026 Data Breach Investigations Report
    • FBI, Ransomware
    • HHS, Fact Sheet: Ransomware and HIPAA
    • FBI Internet Crime Complaint Center (report an attack)

    Want a second set of eyes on your login list?

    Email Jason directly at jason@harmony-msp.com. Send him the list, and he'll help you find the doors you forgot about.

    Harmony MSP provides managed IT and cybersecurity for small businesses, medical and dental practices, law firms, and accounting firms across Central Florida. harmony-msp.com
    続きを読む 一部表示
    13 分
  • Episode 4: Cybersecurity Awareness Month Top 10 Countdown

    Episode 4: Cybersecurity Awareness Month Top 10 Countdown
    2026/10/05
    October is Cybersecurity Awareness Month, and this year's theme is Don't Make It Easy for Them. Jason Russell counts down ten moves that make a small business a harder target, from locking down your Wi-Fi to the one setting Microsoft's research found cuts the risk of account compromise by more than 99%.First, he retires a statistic you've probably seen: that 60% of small businesses close within six months of a cyberattack. Reporters found no study behind it, and the organization it's usually credited to has asked people to stop using it. What does hold up: the FBI logged more than one million internet crime complaints in 2025, with nearly $21 billion in reported losses, and Florida ranked third in the country for both.The countdown#10 Lock down your Wi-Fi and retire the old router. Why the FBI says end-of-life routers should be replaced.#9 Protect the devices themselves. Screen locks, encryption, remote wipe, and why EDR watches for what antivirus misses.#8 Give people only the access they need. Separate admin accounts, same-day offboarding, and the vendors who can still log in.#7 Use a password manager. A unique password for every account, and why to take the passkey when a site offers one.#6 Write a one-page incident plan, and print it. Who to call first, and how the FBI froze $679 million in 2025 for victims who reported fast.#5 Train your team for the scams they'll actually get. In Verizon's phishing tests, text and phone scams drew a 40% higher click rate than email.#4 Keep everything updated, and retire what can't be. Software flaws are now the top way attackers get in, plus what Microsoft's Windows 10 extension does and doesn't change.#3 Back up like you'll actually need it. Offline, immutable and tested, because a backup you've never restored from is just a hope.#2 Verify every payment change with a phone call. Business email compromise cost victims more than $3 billion in 2025, and voice cloning is now part of the playbook.#1 Turn on multi-factor authentication, starting with email. Why email comes first, which kinds of MFA are strongest, and what to cover next.Chapters0:00 Intro0:10 The 60% statistic that isn't real1:17 Don't Make It Easy for Them2:01 #10 Wi-Fi and old routers2:53 #9 Protecting the devices3:43 #8 Access and offboarding4:44 #7 Password managers and passkeys5:39 #6 The one-page incident plan6:47 #5 Training for texts and calls8:04 #4 Updates and end-of-life tech9:37 #3 Backups10:37 #2 Verifying payment changes12:08 #1 MFA, starting with email13:24 Recap and where to start14:16 How to reach JasonMentioned in this episodeEpisode 1: How to Answer Cyber Insurance Renewal Questions Without Voiding Your PolicyEpisode 2: Your Email Domain Is Being Spoofed (Here's How to Stop It)Episode 3: how to find and vet a managed service providerSourcesFBI Internet Crime Complaint Center, 2025 Internet Crime ReportVerizon, 2026 Data Breach Investigations ReportVerizon, 2026 DBIR and Breach Impact Study insights for SMBsNational Cybersecurity Alliance, Cybersecurity Awareness Month 2026FBI, Operation Winter SHIELDFBI, Cyber Criminal Proxy Services Exploiting End of Life RoutersMicrosoft Research, How Effective Is Multifactor Authentication at Deterring Cyberattacks?Microsoft, Windows 10 Extended Security UpdatesTom's Hardware on the Windows 10 extensionNextgov, How a Fake Cyber Statistic Raced Through WashingtonNeed help with your list?If you couldn't check off more than a few, email Jason directly at jason@harmony-msp.com. Tell him which numbers you're stuck on, and he'll help you figure out where to start.Harmony MSP provides managed IT and cybersecurity for small businesses, medical and dental practices, law firms, and accounting firms across Central Florida. harmony-msp.com
    続きを読む 一部表示
    15 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません