The Tech Blog - Technology News and Information for SMBs

Technology in Construction & Manufacturing: Why It’s More Than Just Device Management

Tue, 20 Jan 2026 18:20:08 GMT

Modern construction and manufacturing sites are no longer just about heavy machinery; they’re digital ecosystems. Tablets, laptops, IoT sensors, and mobile apps are now essential for everything from blueprint access to production monitoring. These tools enable real-time collaboration, safety compliance, and operational efficiency. But when your workforce is spread across remote job sites or large facilities, keeping these systems connected and secure becomes a challenge.

Construction

Blueprint & Plan Access: Crews use tablets to view updated plans on-site, reducing errors and rework.
Safety & Compliance Reporting: Mobile apps allow instant incident reporting and safety checks.
Equipment Tracking: IoT sensors monitor heavy machinery usage and maintenance needs.

Manufacturing

Production Line Monitoring: Tablets and IoT devices track throughput and detect anomalies.
Quality Control: Mobile devices capture and share inspection data in real time.
Inventory Management: Connected devices streamline material tracking and reduce downtime.

These tools keep projects moving, but only if they’re secure, updated, and accessible anywhere.

Why Remote Access Is Critical

Construction sites and manufacturing plants often operate in remote or rugged environments. Workers need secure, reliable access to company systems, whether they’re in the field, on the shop floor, or traveling between sites. Without proper management, connectivity issues and security gaps can lead to delays, data breaches, and compliance failures.

How a Managed IT Services Partner Helps You Win

Partnering with a Managed IT Services provider lik e Eberly Systems ensures:

Centralized Device Management: Configure, update, and secure all devices remotely using Microsoft Intune.
Enterprise-Grade Security: Microsoft Defender protects against threats across IT and OT environments.
Identity & Access Control: Microsoft Entra ID enables MFA and conditional access for subcontractors and BYOD scenarios.
24/7 Monitoring & Support: Proactive threat detection and performance monitoring keep operations running smoothly.
Scalable Solutions: Whether you have 50 devices or 500, policies and updates roll out automatically.

This means your teams can access critical tools and data securely anytime, anywhere, without worrying about downtime or cyber risks.

Construction and manufacturing thrive on precision and speed. Technology makes that possible, but only when it’s managed effectively. A trusted Managed IT Services partner doesn’t just keep devices secure, it keeps your business moving, your workforce connected, and your data protected.

Ready to empower your teams and safeguard your operations? Contact Eberly Systems today for a free consultation.

In-the-Field Device Management: Why It Matters for Your Business

Tue, 09 Dec 2025 23:55:18 GMT

Why Device Management Is Critical

In today’s fast-paced industries like construction and manufacturing, mobile devices are the backbone of daily operations. Crews rely on tablets and smartphones for job tracking, timecards, blueprints, and safety reporting. When these devices fail, the consequences are immediate: projects stall, sensitive data is exposed, and productivity takes a hit.

Unmanaged devices often lead to missed updates, broken apps, and dangerous security gaps when equipment is lost or shared. Unauthorized tools can also create data silos, making collaboration harder. By contrast, modern device management ensures consistent performance, secure access, and reliable apps—keeping teams efficient and protecting company data.

How Eberly Systems Helps

At Eberly Systems, we specialize in delivering Managed IT Services that simplify device management for businesses. With Microsoft 365 Business Premium, E3, or E5 licensing, we provide a unified ecosystem that covers every aspect of device security and performance.

Microsoft Intune allows us to configure devices, deploy apps, and enforce compliance policies seamlessly.

Microsoft Defender offers real-time threat protection and reporting, ensuring vulnerabilities are addressed before they become breaches.

Microsoft Entra ID strengthens identity management with multi-factor authentication (MFA) and conditional access, reducing risks from subcontractors and BYOD environments.

This integrated approach eliminates the need for multiple vendors and delivers enterprise-grade security across phones, tablets, shared devices, and personal equipment.

Best Practices for Success

To maximize productivity and security, businesses should adopt a proactive strategy. Enforcing baseline policies such as passcodes, encryption, and MFA ensures that devices meet minimum security standards. Automating app installs and updates reduces downtime and keeps tools current. Conditional access policies help control risks from subcontractors and personal devices, while restricting usage to approved apps prevents shadow IT from creeping into workflows.

These practices are not just technical safeguards—they are operational necessities. According to NIST guidelines, organizations that enforce strong mobile device policies significantly reduce exposure to cyber threats【csrc.nist.gov】.

Industry Impact

The importance of device management becomes even clearer when looking at specific industries.

Construction: With high device turnover and rotating crews, unmanaged devices can quickly become liabilities. Strong management prevents costly delays and protects sensitive project data.

Manufacturing: Tablets and mobile devices are increasingly embedded in production processes. When unmanaged, they disrupt throughput and expose intellectual property. Deloitte reports that modernized device infrastructure improves resilience and efficiency across manufacturing environments【deloitte.com】.

The risks are real. Verizon’s Data Breach Investigations Report shows that 74% of breaches involve human error or unsecured devices【verizon.com】. For SMBs, this makes device management not just a best practice but a critical safeguard.

Bottom Line

Device management isn’t optional—it’s operational insurance. By partnering with Eberly Systems, your business gains a trusted Managed IT Services provider that ensures devices are secure, projects stay on track, and production runs smoothly. With the right strategy, you protect your data, empower your workforce, and position your company for growth.

SECURITY NOTICE: Calendar Phishing - A New Way Hackers Try to Trick You

Tue, 25 Nov 2025 20:57:00 GMT

What Is Calendar Phishing?

Phishing isn’t just about emails anymore. Hackers have found a new way to reach you—through your calendar. This scam, called calendar phishing or ICS phishing, u ses unsolicited or malicious calendar invites to sneak in dangerous links or attachments. Because these invites look normal and often show up automatically, they’re easy to fall for.

Calendar phishing happens when attackers send fake meeting invites or .ics files that get added to your calendar. Many platforms, like Google Calendar and Microsoft 365, automatically add events without asking you first. That makes these scams look legitimate and hard to spot.

How Hackers Do It

They send an email with a calendar invite or .ics file.
Your calendar adds the event automatically.
The invite includes a fake meeting link or malicious attachment (like an HTML file or a PDF with a QR code).
Common tricks include:
“Account Suspended” alerts in Outlook invites.
Google Calendar events claiming you’ve won a prize.
QR codes that lead to fake login pages.

Why It’s Dangerous

Clicking these links or opening attachments can:

Steal your login details.
Install malware on your computer.
Give hackers access to company accounts. Even declining the invite can confirm your email is active, making you a bigger target.

How to Stay Safe

Check the sender: Don’t trust invites from people you don’t know.
Turn off auto-add:
In Google Calendar: Go to Settings → Event Settings → choose “No, only show invitations to which I have responded.”
In Microsoft 365: Ask IT to disable automatic processing.
Review your calendar settings: Make sure events need your approval.
Don’t click unknown links or attachments: Treat calendar invites like suspicious emails.
Use security tools: Some email security systems can remove bad calendar events.
Enable MFA (Multi-Factor Authentication): Adds extra protection for your accounts.
Stay informed: Learn the signs of calendar phishing and share tips with your team.

Bottom Line: If an invite looks odd or urgent, pause before you click. A few quick checks can keep your calendar—and your company—safe.

Cybersecurity Hygiene 101: What Every SMB Should Be Doing

Tue, 04 Nov 2025 18:08:39 GMT

Why Cybersecurity Hygiene Matters for SMBs

Cybercriminals are increasingly targeting small and medium-sized businesses (SMBs). Multiple studies confirm that nearly half of all cyberattacks now involve SMBs. According to an Accenture report cited by the U.S. Small Business Administration , 43% of all cyberattacks target small businesses, yet only 14% are adequately prepared to defend themselves. SentinelOne’s research similarly found that 46% of all breaches in 2021 affected organizations with fewer than 1,000 employees, while StationX reports that almost half of SMBs experienced an attack within the last year alone. The se numbers tell a clear story: attackers are targeting smaller organizations not because they hold the most valuable data, but because they are often less protected and easier to breach.

Think of cybersecurity hygiene as your business’s version of digital handwashing. Just as regular hygiene practices prevent illness from spreading, proactive cybersecurity practices protect your systems from infections such as ransomware, phishing, and unauthorized access.

The reality is that security is not only about investing in the latest tools. It’s about building the proper habits across people, processes, and technology. Inconsistent or reactive security practices leave openings that attackers can exploit. By contrast, consistent hygiene builds resilience, reduces downtime, and strengthens customer trust. And SMBs don’t need to face this challenge on their own. Collaborating with internal IT staff or a Managed Service Provider (MSP) can provide the expertise, visibility, and consistency required to stay ahead of today’s evolving threats.

Building a Cybersecurity-First Culture

The foundation of strong cybersecurity hygiene is cultural. Security cannot be left to a handful of specialists; it is a team sport. Every employee, from executives to front-line staff, plays a part in protecting sensitive data and company systems. User awareness remains one of the most effective defenses available because many breaches still originate from simple human errors, such as clicking on malicious links or falling for phishing scams. When leadership emphasizes security as a company-wide priority, employees are more likely to take training seriously and integrate safe practices into their daily routines.

For organizations with internal IT teams, the MSP's role is to strengthen and extend those capabilities. MSPs can provide additional monitoring, expert guidance, and advanced tools that internal staff may not have the bandwidth or budget to manage on their own. For SMBs without any IT resources, an MSP becomes the central driver of proactive security, providing continuous monitoring, rapid incident response, and specialized expertise that would otherwise be out of reach. This collaboration ensures SMBs benefit from both strategic leadership and day-to-day operational defense, creating a stronger and more unified approach to security.

Cybersecurity Hygiene Basics Every SMB Should Follow

At Eberly Systems, we recently raised our minimum cybersecurity requirements for all customers due to the ongoing shift in the threat landscape. Baseline measures that were considered “good enough” a few years ago no longer provide adequate protection. Every SMB should start with strong identity and access management. Multi-factor authentication (MFA) across all accounts dramatically reduces the risk of unauthorized access, while least-privilege policies ensure employees have access only to the systems and data they truly need. When combined with secure password practices and regular updates, businesses significantly decrease their exposure to credential-based attacks.

After establishing strong identity and access controls — including multi-factor authentication (MFA) and secure password practices — SMBs must turn their attention to email and cloud security. These platforms remain primary targets for cybercriminals, making strong defenses in these areas non-negotiable. Microsoft 365 data should be backed up regularly to protect against accidental deletion, data corruption, or ransomware encryption that could otherwise halt business operations. Identity threat protection tools add another layer of defense by detecting suspicious logins and alerting administrators before damage occurs.

Advanced phishing and spam filtering solutions are equally important, as email remains one of the most common entry points for attackers. However, even the best technology cannot stop every attempt, which is why employee awareness is essential. At Eberly Systems, cybersecurity awareness training is a mandatory requirement for all new customers. Informed users are the first line of defense, and regular training ensures employees recognize threats, respond correctly, and maintain a security-first mindset across every digital platform.

Device and endpoint protection is another essential component of cybersecurity hygiene. Modern threats move quickly, which is why real-time endpoint detection and response (EDR) is critical. Combined with managed browser security and content control, businesses can prevent employees from accessing malicious sites that could compromise systems. Regular updates and patching ensure that known vulnerabilities are closed before attackers exploit them. At the same time, consistent backups safeguard servers and workstations so data can be restored quickly if something goes wrong.

Ongoing Cybersecurity Hygiene Maintenance

Good hygiene is not a one-time exercise — it requires ongoing attention. Regular risk assessments and audits allow SMBs to identify and close security gaps before they become liabilities. By reviewing systems and processes on a scheduled basis, businesses can ensure that controls remain effective and aligned with current threats. But security doesn’t end with a quarterly audit — it must be sustained through continuous monitoring and ongoing employee education that keep defenses sharp long after the review is complete.

Continuous monitoring is equally important. Cyber threats don’t adhere to business hours, which is why 24/7 monitoring provides enterprise-level visibility at a scale SMBs could not achieve on their own. Equally critical is having a documented incident response plan. When a breach occurs, confusion and delays can be more damaging than the attack itself. A clear plan that outlines responsibilities and response steps ensures everyone knows what to do under pressure.

Employee education must also be treated as an ongoing practice rather than a one-time event. Cybersecurity awareness evolves quickly, and employees need regular refreshers to stay sharp. Simulated phishing campaigns are a practical way to test preparedness, reinforce training, and reduce the likelihood of costly human mistakes. By embedding cybersecurity education into the organization's rhythm, SMBs foster resilience at every level.

Why Partnering With the Right MSP Is Critical

No SMB can realistically implement, manage, and maintain all of these practices on its own. This is where the right MSP becomes indispensable. By partnering with an MSP, SMBs gain access to enterprise-level security tools without bearing enterprise-level costs. MSPs bring depth of expertise, continuous system monitoring, and the resources to respond quickly to threats. Instead of relying on a single overextended IT professional, SMBs can leverage a full team of specialists who understand how to secure systems and adapt to new attack methods.

Beyond tools and talent, MSPs provide peace of mind. Compliance obligations, security audits, and incident response fall under a single umbrella, freeing business leaders to focus on growth rather than constantly worrying about risks. With the right partner, SMBs transform cybersecurity from a stress point into a strategic advantage.

Start With the Basics, Build a Strong Foundation

Cybersecurity hygiene is about more than checking boxes; it’s about protecting your reputation, your customers, and your revenue. By starting with the basics and maintaining consistency, SMBs can significantly reduce their risk and strengthen their resilience. The journey does not have to be overwhelming, especially with the right partner at your side.

Leading with AI: How SMBs Can Leverage Artificial Intelligence to Strengthen Every Critical IT Role

Tue, 28 Oct 2025 15:42:16 GMT

Why Leading with AI Matters for Small and Medium-Sized Businesses

Artificial Intelligence is no longer the domain of large enterprises with endless budgets. Today, small and medium-sized businesses (SMBs) can harness AI to drive real results, from streamlining operations, to strengthening security, to making smarter decisions.

The challenge? Many SMB leaders still struggle with one question: How can we use AI in a practical, purposeful way?

The answer lies in connecting AI directly to the four critical roles of IT . When SMBs approach AI strategically, they don’t just keep up with larger competitors, they create new opportunities for growth, efficiency, and resilience.

Understanding the Four Critical IT Roles & Where AI Fits In

At Eberly Systems, we define IT around four essential roles: Alignment, Acceleration, Resilience, and Support . Each is vital to a business’s success. And each can be transformed by AI.

Instead of chasing “shiny object” tools, SMBs should look at how AI strengthens these roles in ways that directly tie technology to business goals.

Using AI to Strengthen Alignment

Alignment happens when technology leadership embraces the broader organizational mission and goals. It’s more than just having the right tools, it’s about cultivating an environment where every IT decision reinforces accountability, effectiveness, and long-term business value. Without alignment, investments in technology risk becoming fragmented, reactive, or disconnected from the company’s real priorities.

AI supports this alignment in two powerful ways:

Data and Strategy: AI-powered analytics and forecasting give leaders the clarity to see beyond day-to-day operations. By uncovering patterns and predicting future needs, AI ensures that technology investments are guided by evidence and consistently tied back to business objectives.
Standardized Governance: Compliance, standards monitoring, and accountability become more manageable with AI-driven governance tools. From regulatory requirements to internal policies, AI reduces the guesswork, helping SMBs create governance models that are proactive rather than reactive.

The result is a tighter connection between business strategy and IT execution, where technology isn’t just a support function, but a catalyst for achieving organizational goals.

Accelerating Operations with AI

For small and mid-sized businesses, operations is often an area where resources get stretched the thinnest. Teams juggle limited budgets, aging systems, and the pressure to deliver results quickly. This is where AI shines, not by replacing people, but by removing friction from everyday work. When operations run smoother, organizations unlock the capacity to innovate and grow rather than constantly putting out fires.

AI accelerates operations in two key ways, Productivity Boosters and Employee Experience. Repetitive tasks, manual data entry, and legacy processes can consume valuable time and energy. AI tackles these by automating routine work, optimizing workflows, and reducing technical debt, which frees IT teams to focus on higher-value initiatives like innovation and strategy. The result is faster execution, fewer errors, and more bandwidth for the work that actually drives growth.

Operational efficiencies go beyond systematic satisfaction. AI-powered tools such as smart scheduling assistants, intelligent chatbots, or automated reporting elevate the day-to-day employee experience. By removing tedious bottlenecks, AI not only improves efficiency but also boosts satisfaction and retention, making employees feel supported rather than burdened by technology.

Together, these improvements position AI as an operational multiplier, helping SMBs do more with less, while keeping both systems and people performing at their best.

Building Resilience through AI

Resilience is the backbone of any thriving business. For SMBs, unexpected disruptions, whether from cyber threats, system failures, or natural disasters, can create costly downtime and erode customer trust. AI equips organizations with enterprise-level defense and recovery capabilities, but without the enterprise-level price tag.

AI systems are designed to detect what humans often miss. By spotting anomalies in real time, issuing predictive alerts, and accelerating incident response, AI enables SMBs to stay one step ahead of potential breaches. This transforms cybersecurity from a reactive scramble into a proactive safeguard.

Downtime doesn’t just slow operations, it disrupts revenue, reputation, and client confidence. AI-enabled disaster recovery and intelligent backup strategies ensure that when disruptions strike, systems can bounce back quickly. The result: minimal downtime, maximum reliability, and peace of mind.

At the same time, while we are excited about the advancements AI brings to cybersecurity and threat detection, Eberly’s role goes beyond simply deploying tools. We act as trusted advisors, helping clients understand how to best apply these new automated defenses within their business context, ensuring they are not only protected by technology but also guided by strategy. As the frontline in client defense, we bridge the gap between innovation and practical security, making sure every AI-powered safeguard is aligned with long-term resilience.

Enhancing Support with AI

Support is often the frontline of technology in any business. How employees and customers experience IT support can make the difference between frustration and trust. AI reshapes support services, making them faster, smarter, and more personal.

With AI-powered chatbots and support platforms, routine tickets and common issues are resolved in minutes rather than hours. This frees human IT staff to focus on complex challenges that truly require their expertise, creating a more efficient and responsive support model.

Support doesn’t end when a ticket closes. AI-curated training tools provide personalized onboarding and continuous skill development, helping employees build confidence with technology. This accelerates adoption, reduces repeated issues, and fosters a culture where tech empowers rather than frustrates.

A Holistic AI-Powered IT Model—Strengthening All Four Roles

The true power of AI isn’t found in isolated tools or one-off automations, it emerges when Alignment, Acceleration, Resilience, and Support evolve together. By integrating AI into each of these four critical IT roles, small and mid-sized businesses create a technology foundation that is efficient, resilient, and strategically aligned with long-term objectives.

Alignment with AI ensures that technology leadership and investments are directly guided by organizational goals. With AI-powered analytics and governance tools, SMBs gain clarity and accountability, allowing decisions to be proactive, evidence based, and mission-driven rather than reactive or fragmented.

Acceleration with AI focuses on removing friction from everyday operations. By automating repetitive tasks and streamlining workflows, AI frees IT teams and employees to dedicate more energy to growth focused initiatives. This shift not only improves productivity but also empowers staff with smarter, more intuitive tools.

Resilience with AI provides SMBs with enterprise level security and business continuity without enterprise-level costs. Predictive detection, intelligent backup systems, and faster response capabilities ensure that disruptions, whether from cyberattacks or system failures, don’t derail progress. Instead, operations remain reliable, adaptive, and protected.

Support with AI reshapes how employees and customers experience technology. Smart help desks resolve issues quickly, while AI-driven training platforms foster confidence and continuous learning. Rather than feeling burdened by technology, employees are supported by it, leading to stronger adoption, greater satisfaction, and higher retention.

When these roles converge, AI doesn’t just optimize IT, it empowers the entire business. Leaders make sharper decisions, teams work smarter, and organizations scale without being held back by outdated systems or constant firefighting.

That’s where Eberly Systems comes in. We don’t just help SMBs adopt AI, we help them adopt it holistically. By strengthening each of the Four Critical Roles with AI-enabled practices, we position your business to thrive today and remain future-ready tomorrow.

Getting Started—Practical Steps for Business Leaders

For many SMB leaders, the biggest hurdle isn’t whether to adopt AI, it’s knowing where to begin. The smartest first step is assessing your organization’s current readiness. This means taking a clearer look at IT maturity and identifying gaps across the four critical roles of Alignment, Acceleration, Resilience, and Support. Are your technology investments tied to business goals? Are operations bogged down by repetitive tasks or outdated systems? Do your security measures hold up against modern threats? Are employees supported and confident in their use of technology? Honest answers to these questions establish the baseline for growth.

Once that foundation is in place, leaders can begin defining their AI adoption journey. This journey should not be rushed or haphazard; it works best as a deliberate, step-by-step roadmap. The goal is to capture quick wins, such as automating repetitive workflows or introducing AI-driven reporting, while also planning for long term transformation. A structured roadmap ensures that new initiatives strengthen rather than strain existing systems, mitigating technical debt and creating measurable value along the way.

By starting with readiness and building a clear adoption strategy, business leaders empower their organizations to integrate AI in a way that is both practical and sustainable. Rather than chasing trends, they chart a course where technology actively drives resilience, efficiency, and competitive advantage.

Ready to Lead with AI?

Artificial intelligence has the potential to transform every critical IT role in your organization. The question is will you lead with it, or lag behind?

Partner with Eberly Systems to assess and plan for AI adoption, aligned with your business goals, designed to accelerate growth, built for resilience, and backed by dependable support.

SECURITY NOTICE: Fake CAPTCHA

Fri, 10 Oct 2025 17:25:06 GMT

Fake CAPTCHA Sites Hijack Clipboard to Install Malware

We recently came across a concerning trend: malicious websites posing as CAPTCHA verification pages are hijacking users’ clipboards to trick them into installing information-stealing malware. (Malwarebytes first documented this risk in March 2025.)

If your organization or team uses browsers regularly—and especially if non-technical staff may get redirected to unfamiliar sites—this threat deserves serious attention.

How the Attack Works

Here’s the typical flow of the scam:

A user visits a website (often promising media, articles, download links, etc.).
The site presents a fake “prove you’re not a robot / CAPTCHA” prompt.
Once the user interacts (e.g. clicking a checkbox), the site quietly copies a dangerous command to the clipboard using JavaScript.
The site then instructs the user to:
Open the Windows Run dialog (Win + R).
Press Ctrl + V to paste
Hit Enter
What appears pasted is only the tail of a longer command. The hidden portion—obfuscated or disguised—invokes a system tool (like mshta.exe) to fetch and execute malicious payloads (e.g. encoded PowerShell scripts).
The result: the user essentially executes malware themselves, often an information stealer (such as Lumma Stealer or SecTopRAT).

Because the user performed the “installation” themselves via copy-paste, many security defenses (which focus on blocking downloads) may not catch this behavior.

Why This Is Dangerous

It exploits trust and user action rather than relying solely on drive-by downloads.
Victims may see only innocuous-looking text (or partial commands), masking the malicious content.
The attacker uses legitimate system utilities (like mshta) to carry out the payload, making detection harder.
Many users won’t question “paste + run” instructions, especially if they think it's part of a legit verification process.

Recommended Safeguards & Best Practices

To reduce the risk of falling victim to clipboard hijacking attacks, consider adopting the following:

Never follow unexplained website instructions or paste commands you don’t fully understand. Cybercriminals often disguise malicious code as harmless text to trick users into executing malware themselves.
Use a reputable anti-malware or endpoint protection platform to automatically detect and block suspicious domains, scripts, and clipboard-hijacking attempts.
Install browser security extensions or content blockers to stop malicious JavaScript and prevent access to known dangerous websites before they can load.
Choose browsers that enforce strict clipboard permissions and isolation , ensuring websites can’t write to or read from your clipboard without your explicit approval.
Use a dedicated “sandboxed” browser for untrusted or high-risk sites to contain potential infections and prevent cross-site compromise of your main environment.
Train employees—especially non-technical team members—on the dangers of “copy and paste” commands from unverified sources . Informed users are one of the strongest defenses against social engineering attacks.

SECURITY NOTICE: Business Email Compromise

Fri, 10 Oct 2025 17:13:41 GMT

Understanding Business Email Compromise (BEC)

In 2024, Business Email Compromise (BEC) accounted for 58% of all phishing attempts — and it’s one of the most financially devastating forms of cybercrime facing small and mid-sized businesses today.

BEC attacks are sophisticated scams where cybercriminals impersonate trusted contacts — like vendors, executives, or clients — to trick employees into transferring money or revealing sensitive information. These scams often target accounts payable (AP) and accounts receivable (AR) teams, inserting themselves into legitimate communication threads to reroute payments or collect valuable business data.

How BEC Scams Work

Attackers don’t always start with hacking. Many begin with phishing emails or spoofed domains that look nearly identical to real company addresses (think: ebelry.com instead of eberly.com). Once inside an inbox, they quietly monitor email threads and wait for the perfect opportunity to strike — often during invoicing or payment changes.

These threats can affect your business directly (when your company’s email is compromised) or indirectly (when a vendor’s or client’s system is breached). Either way, the result is the same: fraudulent payment requests and potential financial loss.

Spotting Red Flags

Protect your team by watching for these warning signs:

Requests to change payment methods or banking details.
Sudden updates to contact information from known partners.
Emails that urge urgency or secrecy around financial transactions.

Best Practices to Prevent BEC

Always verify payment changes through an independent, verifiable method — never by replying to the same email.
Use outbound verification calls using trusted contact numbers from your internal records.
Enable phishing-resistant multi-factor authentication (MFA) for all sensitive accounts.
Train your staff regularly to recognize impersonation and phishing attempts.
Review your cyber insurance policy to ensure it includes BEC coverage.

Learn How to Strengthen Your Defenses

Eberly Systems has created a free guide — “Business Email Compromise + Payment Fraud” — to help your team understand, identify, and prevent these scams before they impact your bottom line.

�� Download the BEC Guide

This step-by-step resource covers how BEC attacks happen, common red flags, and the policies every AP/AR team should have in place to protect company funds.

Don’t wait for a breach to happen.
Start building safer communication and payment practices today — with help from Eberly Systems.

The Cyber Cold War: How Global Tensions Are Reshaping the Digital Battlefield

Sun, 17 Aug 2025 11:05:11 GMT

Welcome to the Cyber Cold War

We have entered a new era, one defined not by traditional weapons but by the stealthy and destructive power of cyber threats. Dubbed the "Cyber Cold War," this modern conflict features nation-states engaging in continuous, covert digital battles, impacting global stability and cybersecurity. Recent cyber incidents, such as the ongoing tensions between the U.S. and China, sophisticated cyber espionage between the U.S. and Russia, and relentless cyber exchanges between Israel and Iran, exemplify how digital warfare is reshaping international relations (Sanger, 2021).

At Eberly Systems, we understand the escalating risks posed by the Cyber Cold War. Our mission is clear: to equip small and medium-sized businesses (SMBs) and enterprises with the tools and strategies needed to defend against sophisticated, state-sponsored cyber threats.

The Rise of State-Sponsored Cyber Warfare

Nation-state hackers have emerged as key players in contemporary conflict, blurring the lines between traditional and digital warfare. Countries like China, Russia, North Korea, and Iran actively utilize cyber capabilities to advance geopolitical goals, causing widespread disruption (Greenberg, 2019).

Notably, the SolarWinds breach, attributed to Russian hackers, and the Microsoft Exchange compromise by Chinese-affiliated Hafnium, showcase how targeted cyberattacks can impact critical government and corporate infrastructures, affecting thousands of businesses worldwide (Smith, 2021).

Cyber Attacks as Weapons of Economic Disruption

In the Cyber Cold War, attacks frequently serve dual purposes: political leverage and economic disruption. Critical infrastructure, supply chains, and financial systems are prime targets, vulnerable to crippling ransomware attacks and sabotage.

The ransomware attack on the Colonial Pipeline disrupted fuel supplies across the eastern United States, illustrating how cyberattacks intertwine with broader trade and economic conflicts (Kraemer-Mbula, 2021). Similarly, cyber incidents tied to semiconductor supply chain disputes further highlight the financial ramifications of state-sponsored cyber threats (Friedman, 2022).

Hybrid Warfare and Digital Espionage

Hybrid warfare integrates cyber tactics with conventional military operations, disinformation campaigns, and propaganda. The Russia-Ukraine conflict vividly demonstrates how coordinated cyber strikes complement kinetic military actions, undermining opponent defenses and morale (Rid, 2020).

These digital conflicts are not limited to large enterprises and governments. Small businesses often become collateral damage, experiencing service disruptions, data breaches, and financial losses despite not being direct targets.

Cybersecurity in a World Without Borders

Today's interconnected economy means geopolitical cybersecurity tensions have immediate, widespread implications. Western businesses, local governments, and nonprofits find themselves vulnerable to cyber threats originating from distant global conflicts (Healey, 2022).

To counteract these threats, businesses must adopt robust cybersecurity measures, including zero trust architecture, advanced endpoint detection and response solutions, and comprehensive employee training to detect and mitigate threats proactively (CISA, 2023).

What This Means for Business Owners and IT Leaders

The Cyber Cold War isn't just an issue for administrations; it's an immediate concern for every organization. Global cyber threats can disrupt operations, compromise data privacy, and erode customer trust, posing significant regulatory and compliance risks.

Navigating this landscape demands adherence to cybersecurity frameworks and standards such as NIST, CISA, and GDPR. Companies must remain vigilant, implementing rigorous security practices and proactive risk management strategies.

Building Cyber Resilience with Eberly Systems

Eberly Systems offers tailored cybersecurity and managed IT solutions to help businesses build resilience against cyber threats. Our comprehensive services include:

24/7 Threat Monitoring – Keeping a constant watch on your digital environment.
Incident Response – Quick, effective action to mitigate and resolve cybersecurity incidents.
Risk Assessments – Identifying vulnerabilities before attackers do.
Security Awareness Training – Educating employees to recognize and respond to threats.

Take control of your cybersecurity. Schedule a Cyber Resilience Consultation with Eberly Systems today.

Preparing for an Era of Digital Conflict

As global cyber conflicts intensify, businesses must evolve their cybersecurity practices. Ongoing vigilance, layered cybersecurity defenses, and trusted technology partnerships will be essential in navigating this complex digital battlefield.

Eberly Systems stands ready to guide and support businesses as they prepare for and respond to the evolving threats of the Cyber Cold War era.

Catching the Big Phish

Fri, 20 Sep 2024 13:30:01 GMT

We're all in the same boat trying to avoid cybercrime

Phishing is something that everyone deals with today. According to the 2023 Internet Crime Report, phishing is the number one crime reported. Even with the modern protections against phishing, it is important for users to know how to spot these attempts.

Below are our main pointers for identifying a potential phish:

Beware the sense of urgency

It’s important to understand the common phishing tactics. The main goal of a phishing email is to trick victims into clicking a link or giving information and the main tactic of a common phishing email is using a sense of urgency. For example, an email may claim you missed a payment, and your account will be terminated if you don’t pay within the next 24 hours. This is a major red flag and is most likely a phishing threat.

Look for grammatical mistakes

Most phishing emails will include small grammar mistakes or spelling errors. Legitimate email messages from companies are written by professionals, so detecting errors is a good flag that the email could be malicious. You should also look for strange sounding phrases that might have been run through a translator.

Requests for personal information

Most scam emails are designed to look real, but legitimate companies will never ask for you to send personal information over email. If an email ever asks for any sensitive information, this is most likely a phishing attempt. If you believe the email could be real, contact the company directly to confirm its legitimacy.

Look at the sender

An email may seem like it comes from a reputable company, but a closer look may reveal some inconsistencies. If an address contains a long string of letters or numbers, it’s likely a malicious email. Also check the end of the address for foreign domains like “.ru” or “.in” which means the email was send from Russia or India, respectively.

Double check hyperlinks

Most phishing emails will contain a suspicious link, which is a giveaway that the email is illegitimate. One way to check if the link is malicious is to hover your cursor over the link. This will reveal the real link and if both links do not match, the email is most likely malicious. You can also check for spelling errors in the link.

Suspicious attachments

A malicious email might contain an attachment. Pause before you open any attachment, because they could be malicious files that download a virus to your device. Always double check the email to ensure its legitimacy before opening attachments.

Report phishing emails

If you believe you have received a phishing email, send a report to your system administrator. At Eberly Systems, we utilize Catch Phish - a software that enables users to easily report phishing emails for further analysis.

Stay vigilant. Stay safe! Choose Eberly Systems to help you be the best line of defense against cybercrime.

Key Notes from the Security Team: Q3 2024

Tue, 10 Sep 2024 15:25:21 GMT

Focus on integrating with new team members and new customers

This quarter, we highlight:

Awareness

According to the Verizon 2024 Data Breach Investigations Report, 68% of breaches studied involved a human element. Security awareness is a critical part of any organization's security strategy. Having knowledge of security threats and how to spot them continues to become more important for everyone as time goes on.

Recent Security Incidents

When a large security incident is reported in the news, we have internal discussions on the Eberly Systems team about the details of the attack. We talk through how the attack was carried out, how the company was affected and the damage of the attack. This allows our team to learn about situations we could face in the future and how to prevent them.

Security Presentations

Bringing awareness to clients with our security presentations is one way we have been improving the security of our clients. At these conferences, we inform clients of up-to-date statistics on cyber attacks and the risks they face in the modern cyber security landscape. We also inform clients on how they can improve their security posture with a 10-step plan.

An additional side of these security presentations are the more nuanced side of cyber attacks: the economics of the black market. This gives clients a different perspective on why their company could be at risk and what damage they could expect if ever attacked.

Client Communication

Having strong communication with clients not only builds trust, but also helps clients understand their current risks and how we can remedy some of their attack vectors. In a recent example, we met with the managers of a client company to introduce the importance of security and explain a few steps we would be taking to improve their security posture. Over the following months we implemented key changes around password management and security awareness training. To explain the importance of having these security measures at the client company, we created a presentation showcasing the specifics on how implementation would affect daily work for employees.

Stopping Cyber Events Before they Happen

Our team saw a few situations in the past quarter where our tools and processes prevented what could have become a significant cyber event.

During our onboarding of a particular company, a device was found to be infected with malware. Management was informed, and following the proper procedures, the device was safely removed from their environment. Following an investigation, the source of the malware was discovered and the vector used to infect the device.

In another incident, our security tools identified a business email compromise and locked the account before the attacker could do anything malicious.

Takeaway

As always, it is critical that everyone in an organization have a strong awareness of the potential risks of the technology around them. It's important to build a team culture around not being afraid to ask for clarification when in doubt, or for IT to review something before proceeding.

Key Notes from the Security Team: Q2 2024

Tue, 09 Jul 2024 18:12:06 GMT

Keeping you abreast of security news

Q2 has brought incredible opportunities to Eberly Systems, and with it, new and unique challenges. We are in a season of significant growth, which means applying our security standards across a wider range of technical environments.

Theme of the quarter:

Footprint

In technology, we sometimes use the term “footprint” to refer to the amount of data or exposure an application or an organization has to the outside world. The more ‘stuff’ there is, the larger the footprint. From a security perspective, the more data and systems there are, the more challenging it is to protect.

Our security efforts in recent months have been less about implementing new tools or resources, and more about working to minimize or put proper safeguards around the exposure to various systems for our clients.

Application Whitelisting

In 2024, we see Application Whitelisting as a vital tool to prevent malware and viruses from running. This is effectively a list of approved applications allowed to run on a computer. If something tries to execute on a computer with Application Whitelisting, tools will block the executable from running. In our security incident simulations, we find that Application Whitelisting was the most powerful tool in stopping hacking incidents in their tracks.

Auditing Access

Another key point of exposure for an organization is the number of accounts with administrative privileges. Every user account with local admin rights or even more significantly, with domain or tenant wide admin rights, is a potential entry point for an attacker to take advantage of the account and leverage those permissions in a breach.

We have recently been working on this with several of our clients in order to limit or restructure access that users have to computers and systems. Sometimes this is as simple as giving someone a separate account for administrative actions, or sometimes, we use our advanced security tools to control specific applications and eliminating the need for users to log in directly with an admin account.

Evaluating Security Tools

It's always beneficial to evaluate tools and solutions in order to remain abreast of the newest developments in the security landscape, and this has been one of our main focuses.

Remediating EOL Systems

One of the most dangerous risks that businesses assume is running out-of-date software. Whether its an application like Adobe Reader, or an operating system like Windows 8, it is very important to identify these systems and either update them or remove them from the environment. We have seen several businesses experience near-catastrophic events that began from a computer running an unsupported version of Windows.

The Eberly Systems Team has made strides in the past quarter to remove outdated and risky systems from our clients' production networks. This is exactly the kind of thing that minimizes the footprint for an organization.

Eberly Systems Acquires Lebanon County LYLAB Technology Solutions

Thu, 02 May 2024 13:09:46 GMT

West Lawn, PA, May 2, 2024 — Eberly Systems , the West Lawn-based managed IT services and managed voice provider, today announces its acquisition of the Lebanon-based LYLAB Technology Solutions.

Eberly Systems seeks to further a movement of people who are motivated and equipped to make a difference in their world through their daily work. They believe in building lasting partnerships based on trust and transparency while delivering industry-leading solutions to support and protect critical business assets. Driven by the principles of people, excellence, integrity, and stewardship, the team prides itself on partnering with companies to securely, reliably, and efficiently grow their businesses.

“We cannot be more excited to join forces with the LYLAB team,” comments Kordel Eberly, Eberly Systems President & Founder. “ The integration of LYLAB Technology Solutions into Eberly Systems solidifies our commitment to providing small businesses with unparalleled service and support. We’re proud of this new opportunity to carefully design and manage the IT infrastructure and systems of even more local businesses and communities.”

The acquisition solidifies the Eberly Systems commitment to supporting businesses in Lebanon County. Merging the two teams together as one entity offers the collective team the benefit of enhancing capabilities, refining processes, and extending reach to better serve the evolving needs of small businesses in the surrounding area. Future plans include expanding their presence into Lancaster County.

Navigating Small Business Success: The Power of IT Outsourcing for SMBs

Tue, 16 Jan 2024 18:50:02 GMT

A trusted MSP can be your invaluable strategic partner.

In the contemporary business landscape, success hinges on the ability to seamlessly integrate technology into operations. Gone are the days of treating IT as a mere utility; it now must be a strategic partner in achieving business objectives. Enter comprehensive IT support from a trusted managed services provider – a partner that not only ensures efficiency, cost-effectiveness, and simplicity in technology, but also propels your business towards achieving advanced security, increasing sales growth, and reaching overarching business goals.

Gained Efficiencies

Time is a valuable asset, and businesses that harness technology for efficiency gain a competitive edge. Comprehensive IT support offers proactive monitoring, rapid issue resolution, and strategic IT planning, ensuring that potential problems are identified and addressed promptly. Make downtime a rare occurrence and enable your team to focus on core business objectives by allowing our top-rated support staff to serve you and your technology needs.

Cost-Effectiveness

Investing in IT services doesn't have to be a financial burden. Our comprehensive IT plans deliver flexible offerings scoped to your team and your needs. Entrusting your technology to our team helps you prevent costly downtime and fortify you against cyber threats, saving your business money in the long run.

Partnering towards Digital Transformation

Navigating the complexities of modern technology can be overwhelming, especially for businesses lacking dedicated IT teams. Our expert team complemented by our vCIO services simplifies the IT landscape by offering a one-stop-shop for technology road mapping and ongoing managed maintenance. From hardware and software to cloud services and cybersecurity, we integrate everything seamlessly for you as we guide you towards greater digital transformation.

Security Assurance

In an age where cyber threats loom large, securing your business data is non-negotiable. Small business IT outsourcing prioritizes your security by implementing robust services like security awareness training, continuous vulnerability management, and application allow listing as well as real-time threat detection and regular security audits. Proactively guarding against potential threats ensures that your business remains shielded in the best way possible from the ever-evolving cyber risk landscape.

Fueling Growth

Partnering with a managed IT service provider like Eberly Systems isn't just about troubleshooting IT issues; it's about propelling business growth. We can help you optimize your IT infrastructure and achieve the scalability, productivity, and security goals you need to support your expanding business.

Embracing comprehensive IT support services for your small business is like giving your business a technological makeover. It's more than just addressing issues – it's about preventing them, streamlining processes, and supporting organizational growth and success. By choosing efficiency, cost-effectiveness, simplicity, and security, you're not just investing in technology; you're investing in the future of your business. Welcome to a world where IT is not a challenge, but an indispensable ally in achieving your dreams.

Enhancing Business Security and Productivity with Microsoft Office 365

Tue, 02 Jan 2024 15:06:29 GMT

Microsoft Office 365 Business Premium helps us deliver you the very best IT support.

In the ever-evolving landscape of business technology, staying ahead of the curve is not just an advantage—it's a necessity. At Eberly Systems, we are committed to providing our clients with cutting-edge solutions that not only meet their needs but also ensure the utmost security and efficiency in their operations. For this reason we require customers to opt for not only Microsoft Office 365 licensing, but in particular, Business Premium.

Why? Users not only receive the latest versions of the Microsoft suite of solutions that facilitate dynamic collaboration, productivity, protection, and file storage, but Business Premium offers advanced security, access and data control, and cyberthreat protection. Let’s dive into the key features that make this choice essential for businesses seeking unparalleled IT support and robust Microsoft Office 365 consulting .

5 KEY FEATURES OF MICROSOFT OFFICE 365 BUSINESS PREMIUM

Secure Messaging – Encrypted Email Options

Communication is the cornerstone of any successful business, and safeguarding sensitive information is paramount. Microsoft Office 365 Business Premium offers secure messaging through encrypted email options, ensuring an extra layer of protection for your emails. This feature enhances the confidentiality of your communication channels, aligning seamlessly with our Microsoft Office 365 consulting approach, and providing businesses with the assurance that their sensitive data remains secure.

In Tune MDM – Endpoint Security Control

In an era characterized by remote work and diverse device usage, managing and securing endpoints is a top priority. In Tune MDM (Mobile Device Management) offers robust security controls for endpoints by enabling organizations to apply security policies on all organizational devices, thereby helping to protect critical business data. It is a powerful tool and an integral part of our comprehensive IT support strategy.

Advanced Email Protection – Defender

Email remains a primary target for cyberattacks, making advanced email protection a non-negotiable for modern businesses. Business Premium licensing includes Microsoft Defender, a comprehensive solution that includes link and phishing protection. Defender for Office 365 fortifies communication channels against malicious links and phishing attempts.

Conditional Access – Multifactor Authentication Controls

In an era where cyber threats are becoming more sophisticated, multifactor authentication (MFA) is a critical defense mechanism. This key feature of Business Premium enables businesses to implement granular controls around authentication, specifying permitted locations, devices, and users. This reduces the risk of unauthorized access to your most critical business assets.

SSPR – Self-Service Password Reset

Passwords serve as the initial line of defense in securing digital assets, and efficient password management is an important facet of business operations. Self-Service Password Reset (SSPR) enables users to reset their passwords independently. It reduces the burden on IT support and is particularly useful in hybrid work environments.

IN CONCLUSION

Our team at Eberly Systems is proud to partner with customers and set up their businesses for success. Robust and industry-leading offerings like Microsoft Office 365 Business Premium enable us to deliver on our commitment to giving the very best IT support by fortifying your defenses against cyber threats, streamlining operations, and empowering users with the tools they need to navigate the digital landscape securely.

Contact us today to build a future where your business thrives securely in the digital age.

Key Notes from the Security Team: Q4 2023

Tue, 19 Dec 2023 18:04:04 GMT

Keeping you updated!

Eberly Systems has been hard at work over the last year in a concerted effort to enhance the security posture of our clients’ information technology environments. Most of this work goes unnoticed as it happens behind the scenes (the best IT is invisible!), but we wanted to share some key points.

Theme of the Quarter:

VISIBILITY

We can only respond to what we know or can see. If you don't know there's a problem, there is no way for you to respond to it. The majority of the highlights from this quarter relate to our ability to identify security risks, which then allows us to act on them.

Internal Security Awareness

We talk a lot about security awareness training for our clients and recognize that it’s of prime importance for our organization to keep ourselves at the top of our game when it comes to cyber security. We have been actively developing our team member skillsets and familiarity with technical security topics.

Vulnerability Management

We have tools in place for our clients that scan for security vulnerabilities and bring the most concerning risks to our attention. Since the beginning of the year, we have remediated thousands of vulnerabilities across our client base by updating software, reviewing potential configuration problems, or removing software that was outdated.

While we do not have any requirements or regulations dictating monitoring for these types of risks, it is important to us that we are able to monitor every computer closely for potential security concerns and be able to take action when necessary.

"CVE" Notification

In a similar area of focus, our security team recently began monitoring for known vulnerabilities in the software that we and our clients use. We do this using the "CVE" system (Common Vulnerabilities and Exposures). CVEs are specific vulnerabilities in a piece of software that are documented and published.

While we often know about these vulnerabilities before they are published, it is helpful to be alerted to CVEs from a wider range of software. This alerting helps us to stay ahead of potential attackers.

Cloud-First Security Policies

The transition to the cloud presents a new challenge for managing security policies. As devices become further detached from physical locations, the need to apply the same strong security policies means re-building those policies in a different set of tools. We have done considerable work to bring our cloud-first clients forward into a reliable and secure policy configuration.

More To Come

These efforts are only the beginning of the many other security-related initiatives that we are working on. We hope to provide updates each quarter with the latest solutions that we have implemented to keep you informed!

Customer Success Story: Construction

Mon, 03 Jul 2023 13:42:49 GMT

Gaining efficiencies with easy & secure data access

Construction companies are becoming more and more vulnerable to cyber attack as they continue to rely heavily on interconnected technology. In order for leadership to focus on core business, they need a team of specialists like that at Eberly Systems who can work alongside existing operations and manage infrastructure, network, productivity, and security needs.

Read on for a customer success story on a construction development and property management company.

Customer Success Story

After years of steady growth, the workforce at a construction development and property management company was becoming increasingly frustrated by disorganized data. Accessing on premise files was tedious and problematic to the decentralized staff located across geographies and workspaces. The team at Eberly Systems analyzed and reorganized their data structure, moving it to the cloud to reduce friction, streamline operations, and increase productivity.

SharePoint File Storage & Sharing Best Practices

Thu, 01 Jun 2023 18:18:06 GMT

SharePoint file storage has both features and limitations that you should be aware of while storing and accessing files. Here's a rundown.

In today’s world, more and more people are working outside the office and need to access their files from a wider range of places and platforms than ever before. The need to be mobile presents unique challenges that are causing a shift in the way businesses use and access their files and their data.

One of the solutions coming to the rescue is SharePoint. SharePoint is Microsoft’s cloud-based solution for working with files in a flexible way. It allows users to collaborate on files in real time across the globe and access those files from remote locations with or without internet access. It also provides granular permissions to make sure that only the people that need access can view important business data.

At Eberly Systems, we typically encourage people to use the Microsoft Teams app to access SharePoint data because it provides a central access point to everything in your Microsoft 365 cloud.

Best Practices when using SharePoint

Creating new teams and channels

Teams, SharePoint, Outlook, and OneDrive all work together to make your Office documents and other files more accessible in a variety of scenarios. This flexibility means that it is important to be intentional about the structure that you use in implementing 365 so that it best fits your use cases.

When we do a SharePoint migration for our clients, one of the first things we do ispin down the organizational structure that makes the most sense. A good structure for Teams and SharePoint should keep distractions to a minimum and help employees focus on the conversations and content that are important forthem to engage with.

Teams are top-level groups that bring larger numbers of people together to collaborate. You should think about keeping the number of Teams to a minimumand bringing in as many people into a team as makes sense. You might have oneTeam for the whole company, another one for managers, one for HR, etc.

Channels are a way to group communications and files that are related in some way. This might be a project, program, or initiative. A Team can contain a number ofchannels, which can either be public (visible to everyone in the team) or private (only visible to members of the channel).

Creating or Modifying Files

Thereare several ways to create files in SharePoint. From Teams, you can createOffice files directly in any channel using the Files tab.

Syncing Files

Oneof the most powerful features of modern SharePoint deployments is the abilityto sync files directly to your computer from the cloud. Once your files aresynced, you can create Word, Excel, PowerPoint or any other file and save itdirectly to the Team/SharePoint site right within File Explorer.

Thereare several ways to do this, and a few things you should keep in mind when youdo so.

EveryTeam in Microsoft Teams has a channel named “General”. Every channel in Teamshas a “Files” tab, which will let you interact with the files in SharePointassociated with that channel. From the Files tab, you’ll find a Sync buttonthat you can click to make those files available to you in File Explorer.

You can also sync files directly from the SharePoint site by clicking the Sync button from the document library of any SharePoint site.

Once your files are synced to your computer, you can find them in File Explorer just the way you would find and use files on your computer or on a server. Just look for the row with your business name in the left sidebar.

Understanding Sync Options and Status

In File Explorer, you can optionally make a file or folder stay cached and available offline. This is helpful if you need to work with a set of files on the road and aren’t sure you will have internet access. To do this, right click on the file or folder you want to keep offline and select “Always keep on this device”.

Notice the status indicators for files and folders in synced locations in File Explorer:

The blue cloud icon indicates the file is in the cloud and is not currently taking up space on your computer. You can still open these files and interact with them, but there could be an almost unnoticeable delay when you open them since they are not local.

Note : when you search for files that are not local, thumbnails will not show up for those files. If you open the folder that contains those files or images instead of searching, the thumbnails will appear. This is by design to speed up search results.

If you see a green circle with a check mark, the file is cached locally. In this case, the file is taking up storage on your device, but on the plus side, thumbnails will appear in search results, and there will be no delay when opening files. These files will even be available to you if you are not connected to the internet.

The light green check means the file is cached because you have navigated to it or opened it recently. This file may go back to the cloud only if your computer sees that you haven’t interacted with the file recently.

A filled in green check means that you have selected to “Always keep on this device”. This file will be available offline regardless of how much or little you interact with it.

Shortcuts and Links

Linking and creating shortcuts to files in SharePoint is different than files that are only stored on your computer, and you need to be aware of the differences. If you are working in File Explorer, avoid making shortcut icons . File Explorer will allow you to create shortcuts, but they won’t work for anyone other than you! If you need to have quicker access to a particular file, it’s better to pin it in Teams or bookmark the file in SharePoint.

Ready To Make the Move?

SharePoint is an incredibly valuable tool for businesses of all sizes. Eberly Systems has built solid processes to help you transition to SharePoint, whether you’re coming from an on premise file server or another cloud provider. We’d be happy to help your team learn about and migrate to this industry-leading solution!

Best Practices for Creating Passwords in 2023

Thu, 05 Jan 2023 19:35:40 GMT

The security of your business is our top concern. These are the Eberly Systems recommendations for creating good passwords in 2023.

Password Recommendations

We all know that long and complex passwords are much stronger than short and simple passwords. So, how can you easily make a long complex password that you can remember?

First and most importantly, the longer the password the better . A lot of security professionals have been suggesting the use of “passphrases” rather than “passwords”. Secondarily to length, a more complex password is better than a simple one, and thirdly, a less guessable password is better than a guessable one. We will cover each of these areas in this article.

Definition : “Passphrase” – A password that is made up from an easy-to-remember phrase rather than a single word.

What To Do

Again, the longer the password, the better! So, let’s get started!

Step 1: Try to think of a few words together that you will be able to remember. Leave the spaces in there. For example:

Tony’s cat ran up the stairs

The above phrase by itself is already 28 characters long! This is a great starting point, and it’s already exponentially more secure than a typical password!

According to a popular password strength meter, this password would take 3 hundred trillion years to break.

Step 2: Make some random changes to the phrase that you can remember. You can substitute numbers or symbols for words, change the case of a word, or add punctuation. Make as many changes as you are sure you will be able to remember, like this:

T0ny’s cat - ran UP the stairs...

Now, you have a long and super secure password that you can remember!

The same password strength meter indicates that this password would take 27 billion trillion years to break.

Some more great tips:

Can’t think of a phrase? Look around your desk and see what is lying around, then pick some random things and string them together:

stapler paperclip telephone pencils

If you’re a language buff, mixing languages is a great idea to make your password harder to break!

What Not to Do

Don’t use short passwords!

The following password is very complex, but it only has 6 characters. The same password meter that showed the passphrases in the last section would take trillions of years to break says that this one would only take 1 year.

J&~7*h

Avoid common words

The worst passwords are made up of common simple words, like “password”, or “iloveyou”. Some other common words to avoid are “monkey”, “letmein”, “dragon”, seasons like “summer” or “winter”, a month like “January” or “June”.

Don’t use patterns from your keyboard

The password 123456 is the most frequently used password in the world according to recent breach statistics. “qwerty” “asdf” and “1q2w3e4r” are all examples of very commonly used passwords that are very easy to crack.

Avoid guessable words

Don’t use part of your name or your company name or department as part of your password. These are among the first things that attackers will try.

This extends to anything that can be found out about you. Don’t use a friend or relative’s name, the names of pets, or the dates or details of life events you may have posted to social media.

Avoid the most obvious patterns

It is very common for people to make a password that is a word follow by some numbers followed by some punctuation, like this:

Pizza123@!

The above password is the weakest one we’ve shown in this article. The tools that attackers use could break this password in under 20 seconds.

Avoid using common phrases or song lyrics

Even the longest passphrase might be guessable or susceptible to a password breaking tool if it uses a common phrase or a part of a song lyric. Try to use something that isn’t out on the internet.

Use A Password Manager

It is important to have a different password for every one of your accounts. But how can you remember all these passwords??? The simple answer is: you don’t need to! Enter the wonderful world of password managers!

With a password manager, you need to choose one good long password that you can remember and leave the rest to your password manager! In practice, you’ll need to remember a total of two passwords: the one you use to log in to your computer, and the one that unlocks your password manager.

Your password manager can even generate long random passwords that are great for security.

There are several free password managers out there that you can use for personal accounts. For business, it’s best to have a more managed solution that can provide a safety net in case you forget your master password. Of course, Eberly Systems has a solution that we can implement for you.

How Passwords Get Hacked

Okay, so longer is better, and then secondly, more complex is better, and then thirdly, less guessable is better. But how does this all work? How does a hacker figure out your password?

Dictionary Attacks

One of the tools that hackers use is known as a dictionary attack. In this kind of attack, the attacker will use their computer to try as many passwords as they can against a file, hash, or database in rapid succession. These tools will use algorithms that will start with the most common words and passwords first and try different combinations of uppercase and lowercase and add numbers and special characters to different parts of the password until it finds a match.

Phishing

Phishing is when an attacker tries to contact you and convince you to give them information. This could be an email, a text, or a phone call. They will often use pieces of information that make them sound more trustworthy, like the name of your boss or coworker.

Malware

Regardless of how secure your password is, in extreme cases, there are other ways that attackers can get your password. If your computer has been compromised by malware for example, a remote attacker might be able to get your password simply by you typing it into your computer!

This is why it’s important to have strong security tools to keep your computers safe, and to implement multiple layers of security. At Eberly Systems, we have carefully selected a combination of security software and tools to prevent even the most dangerous malware from breaking through.

Multi-Factor Authentication and More

Although it’s beyond the scope of this article, your passwords offer only a single layer of security. Wherever possible, you should be using MFA (Multi-Factor Authentication) in addition to strong passwords to protect your accounts.

To learn more about Multi-Factor Authentication, see our article on the topic:

Multi-Factor Authentication Tips to Boost Security (eberlysystems.com)

Our Best Kept Secret: Eberly Systems Managed Voice & Phones

Thu, 15 Dec 2022 15:32:46 GMT

The future is bright for telecommunications. Every business relies on phones and a phone service, whether via desktop handsets, mobile devices, or computers. Voice will forever be a critical element to business, and while it might look different as digital transformation changes the way we do things, it will always be essential.

The most accessible, reliable, and seamless options that are proven to increase productivity and eliminate interruptions are handsets that utilize VoIP (voice over internet protocol) cloud-based technology and softphones that allow users to make calls over internet without any designated hardware. In accordance with our Managed IT services, we offer Managed Voice solutions for both handheld and softphones supported by our same helpful, personable, and quick sales and help desk teams.

Our Softphone Technology

At Eberly Systems, we install and set up softphones with either Microsoft Teams or mobile and desktop apps. Both are fantastic solutions that enable seamless calling capabilities on any device and integrated conferencing options.

When Handheld Phones are More Your Style

While softphones offer unsurpassed flexibility of call answering across geographies and devices, hard phones have also evolved into a dynamic resource fitting for many companies. Desk phones won’t go away anytime soon, and if you’ve already made the decision to stick with them, (if you don’t know what’s ideal for your unique situation, ask us !) the next step in setting your business up for success is determining the appropriate phone type and provider.

Why Eberly Systems Managed Voice?

"There is one simple reason that customers choose Eberly Systems over Comcast for their business phone needs: unparalleled customer service."

– Becky, Eberly Systems Sales Team Member

Comcast. Verizon. AT&T. We all know the gigantic, unified communications providers who are at the forefront of the telecommunication industry. They have spiffy store banners and even sleeker websites. Countless people and numerous businesses are serviced by them. Virtually everyone knows of these brands.

But will they go above and beyond to resolve issues like if your calls sound tinny?

But if your internet goes down and you need calls forwarded ASAP, will you get help?

We know that you have numerous companies to choose from when looking for a business phone provider for your Pennsylvania-based company. So why choose Eberly Systems?

The Top 10 Reasons to Choose Eberly Systems as Your Managed Voice Provider

Local, reachable, and quick customer service
Ongoing voice support at no charge
Useful user portal
Voicemail to email with transcription
Three-way calling/conference calls
On-phone directories
Call park: putting a call on hold that anyone can pick up regardless of location
Traffic shaping to better affect call quality
Setup of call flows & auto attendants
Functions anywhere that you have internet, regardless of location
The option to either rent or buy phones
In case of internet downtime, our support team will forward your calls to other devices for you.

We can do what large, unified communications companies do, and much more. Eberly Systems Managed Voice offers a comprehensive hardware and service package that is sized to your needs. It’s user friendly, and as simple or complex as you’d like it to be. Plus, it’s all backed by our stellar, friendly, personable support team!

Eberly Systems Offers New Services to Further Enable Customer Success

Tue, 04 Oct 2022 15:08:53 GMT

We're proud to offer new services as we seek to innovate and set our customers up for continued success.

MANAGED ENDPOINT DETECTION & RESPONSE (MDR)

MDR is a cornerstone of a robust modern security posture. It utilizes a machine learning approach to detect potentially malicious activity and proactively address threats before they occur. MDR offers 24/7/365 active threat hunting, analysis, and response by a dedicated team of security engineers.

Key Benefits:

Sophisticated, next generation security offering
Continuous 24/7/365 endpoint compromise monitoring & response
Zero-day prevention identifies threats & prohibits data disruption
Aligns with cybersecurity compliance needs

MANAGED CLOUD SECURITY - BASIC

Eberly Systems Managed Cloud Security - Basic offers 24/7/365 continuous monitoring against data loss. New threats or suspicious behavior and patterns within the Microsoft 365 platform are automatically detected and alerted on, identifying and remediating any potential risks.

Key Benefits:

Continuous 24/7/365 vulnerability detection & response
Recognizes abnormal user behavior
Offers real-time alerts
Protects against potential data loss & leakage

MANAGED CLOUD SECURITY - ADVANCED

Eberly Systems Managed Cloud Security - Advanced offers 24/7/365 advanced monitoring against data loss. New threats or suspicious behavior and patterns within the Microsoft 365 platform (including email and collaboration tools) are automatically detected and alerted on. Cloud cybersecurity will continue to be a top business concern, and advanced malware and phishing protection is key to a secure organization.

Key Benefits:

Continuous 24/7/365 vulnerability detection & response
AI technology that detects malicious behavior & quarantines dangerous files
Multi-layer strategy to detect zero-day threats
Prevents accidental file share with policy enforcement

UNLIMITED PROJECTS

Digital transformation is an ongoing process of strategic planning and innovation. Eberly Systems Unlimited Projects add-on is a modern way to budget out future technology projects. With Unlimited Projects, you receive expert project deployment without large unplanned expenditures.

Key Benefits:

Avoids unforeseen technology costs
Automatically allocates funds for future project needs
Shifts technology to being an enabler rather than a fix
Sets your business up for success with unlimited supported projects

BUSINESS INTERNET BROKERAGE

Eberly Systems Business Internet Brokerage is a value-added service designed to identify the ideal internet provider and plan for your business and location. Our team will review your account, identify the best carrier for you, and facilitate initial setup.

Key Benefits:

Tailored internet brokerage at no extra cost
Time savings in identifying a service provider
Hassle-free, comprehensive shopping
Coordination of carrier installation

As always, we're here to help you navigate safeguarding knowledge, eliminating interruptions, and accelerating productivity to set your business up for greater success. Contact us to discuss how we can partner with you!

Warming Hands and Hearts Through Paid Volunteer Time Off

Thu, 22 Sep 2022 15:50:01 GMT

If you’re fortunate enough to work for a company who believes in giving back to the community and offering paid volunteer time off (VTO), you have an awesome opportunity to make a difference without detracting from personal and family time. Eberly Systems is a managed IT services provider who is fanatical about partnering with and giving back to local communities. They offer employees like myself four days a year that they will pay for us to volunteer with a nonprofit organization. It’s a great opportunity to get outside and in line to serve others less fortunate, and I’m thankful for an employer that values servant leadership.

Annual Fundraisers a Great Volunteering Opportunity

Opportunity House is a Berks County, PA, nonprofit whose mission is to change lives and empower men, women, and children facing various obstacles. They serve local residents through a variety of services including a shelter, learning center, children’s alliance center, veteran support services, and a recycling program. With the many programs they facilitate comes a great need for donations and volunteers. I’ve been fortunate to volunteer with this incredible organization several times now by utilizing my company-offered (VTO).

I’ve volunteered primarily with their annual Souper Bowl and Golf Outing events. These events enable Opportunity House to raise funds towards sustaining and growing their services and to purchase resources needed to scale and serve more people.

The Opportunity House Souper Bowl is an annual fundraiser in the cooler months where local restaurants donate homemade soups for sale to the public. Before COVID, the event was a sit-down affair at a local banquet facility; in the last few years, portioned soup containers are given to patrons in decorated bags by children serviced by the nonprofit via drive-through pickup. I was one of the points of contact for the public receiving their orders. It was wonderful to join the ranks of volunteers knowing that not only did people go home to a warm, delicious dinner, but that we were contributing to delivering tremendous impact to adults and children very much in need.

In contrast to the chilly winter days of the Souper Bowl, at the recent Opportunity House annual Golf Outing I enjoyed managing a putting contest on a warm spring day. As the golfers made their way through the course to my spot on the green, I would encourage them to purchase a chance at the putting contest to raise extra funds for Opportunity House. The outing is always a fun time for a good purpose.

Community Service a Key Value

Because I know how important these events are to the success of Opportunity House, I’ve been happy to help them out at various events over the years. This was all possible because Eberly Systems believes in giving back to the community and encouraging the team to serve others both inside and outside the office.

How Eberly Systems Managed IT Services Enable Success

Fri, 12 Aug 2022 18:19:55 GMT

Since 2008, Eberly Systems has been a vehicle for an expert team offering industry-leading solutions to guide businesses toward deeper success. We achieve this by safeguarding knowledge, eliminating interruptions, and accelerating productivity. Driven by the principles of people, excellence, integrity, and stewardship, our team prides itself on partnering with companies like yours to securely, reliably, and efficiently grow your business. We treat others as we want to be treated, and apply that same philosophy to the design and care of our customers’ information systems.

There are three main ways we enable your success:

Safeguarding Knowledge

Layered security to protect your business

Security is everything. Ensuring that your information is safe and accessible is the cornerstone of Eberly Systems Managed IT Services. We offer robust protection against data disasters through managed security and updates, managed network, and managed backup offerings in conjunction with security awareness training.

Eliminating Interruptions

Proactive monitoring to streamline operations

Slow, unreliable systems are frustrating. Our proactive, preventative services enable peak performance while potential problems are identified and eliminated. Managed device, managed health, monthly onsite inspections, and quarterly business reviews keep you running smoothly without disruption.

Accelerating Productivity

Mobile accessibility to work effectively from anywhere

Every minute counts. Our managed user suites equip your team to work and collaborate securely and efficiently regardless of location. Ancillary offerings of automated signatures and premium antispam help you get more done in the same amount of time.

How do we achieve these goals?

1. By providing layer upon layer of security for your business and your most precious assets.

2. By carefully monitoring device and network health and backing up all of your data.

3. By enabling your workforce to communicate, collaborate, and scale from any location.

What is included in our managed IT services plans?

To ensure that your business is best set for success, there are a few staples to every Eberly Systems Managed IT Services plan. You’ll automatically receive managed network, managed device, managed users, and a support model when working with us. Learn more about how our team brings top expertise and dynamic partnership to the table through our Managed IT Plans .

At Eberly Systems, we are fanatical about developing relationships founded upon trust and transparency and providing extreme value to businesses in the Berks, Lancaster, and surrounding counties. Contact us and we’d be happy to perform an IT assessment of your company at no charge.