Data Center Expansion
Jim announced that a major project to expand a data center into Germany was nearing completion, which would free up resources for other projects for the rest of the year. Chip added that the expansion was not only to comply with regional data frameworks but also to better serve their growing international partners, particularly in Asia and the Pacific. Chip also clarified to Andrew that for security and separation purposes, two different partner instances would be needed, one dedicated to the EU.
Managed SaaS Alerts Launch and Platform Improvements
Andrew, Jim, Chip and Ben discussed the launch of Managed SaaS Alerts, an initiative aimed at assisting clients with insufficient internal resources to fully utilize their services. Jim confirmed the project's launch date and the number of partners already on board. The team also discussed the ongoing development cycles of their platform, with Ben explaining that improvements were being made based on feedback and individual client needs. These changes, he assured, would not impact existing client environments.
Audits and Security Concerns
The team discussed the potential implementation of audits into their system, with Chip finding it a valuable addition to their report process and Andy suggesting a scoring mechanism based on an audit to save customers money. Enrique, who joined late, raised concerns about security measures in their Managed SaaS Alerts services, to which Chip responded that while they aim to provide the best possible coverage, it's not perfect and they are constantly learning and improving. Chip also mentioned an ongoing audit request related to a cost calculation.
Defender Integration and Timeline Update
Andrew, Jim, Bob and Chip discussed the integration of Managed SaaS Alerts and Defender. Bob sought clarification on whether Defender could be used with Managed SaaS Alerts, which Chip clarified that it that Defender hadn't yet been integrated into Respond for automated actions, but confirmed it was close to being resolved. Chip also indicated that Defender was soon to exit Beta, with Liran estimating it would take a few more weeks. The team was encouraged to connect any Microsoft tenants they had with Defender to SaaS large to aid in data collection.
Quickbooks Online Integration and SolarWinds Security
Jim, Chip and Andy discussed the potential issues and benefits of implementing Quickbooks Online, with a focus on the relationship with Intuit and potential legal concerns. They also explored the importance of reputation and trust in software development, and the challenges of ensuring the safety and reliability of plugins. Lastly, they addressed recent security issues with SolarWinds and the ongoing compliance issues with DFARS and CMMC.
New Social Engineering Tactic Discussed
Andrew introduced a new social engineering tactic involving the use of QR codes and Microsoft's Sway product to host malicious pages. Chip noted that the technique was still being investigated and that there were concerns about whether it would automatically take a logged-in account or push users through the login process. Andrew highlighted the significant growth in the use of this method, with a 2,000-fold increase starting in July 2024. The team also discussed the threat actors' use of Cloudflare's Turnstile to hide their URLs.
QR Codes, Scams and DNS Filtering
Chip and Andrew discussed the growing use of QR codes in advertising and the potential risks associated with using business credentials to access unfamiliar sites. They emphasized the importance of user training and awareness, and advised against using business credentials to log into unknown sites. They also discussed a specific submission campaign targeting banking sites and the potential implications for businesses. The team also explored the effectiveness of smishing campaigns, using the example of toll road scams, and highlighted the role of DNS filtering in blocking such attempts. They concluded by warning against engaging with unknown contacts and reminding the team to implement DNS solutions to prevent scams.
Негізгі бет Saa$y MSP Community Call | 08.29.24
Пікірлер