<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Yes Denise, that is exactly what I am saying<div><br></div><div>For example Microsoft had a breach in their Active Directory software. So every business customer who is using that software may also be impacted. And if that customer is another software company or makes industrial machines and software, they maybe affected too. And on and on it goes until all of them apply the fixes. Does that help?</div><div><br></div><div>More recently there was something with SOHO routers from Cisco and one other maker. These are small businesses that may not even know they are affected or may not have the resources to do anything. </div><div><br></div><div>Hope that helps,</div><div>Smita Desai </div><div><br id="lineBreakAtBeginningOfSignature"><div dir="ltr">Sent from my iPhone</div><div dir="ltr"><br><blockquote type="cite">On Feb 3, 2024, at 10:49 AM, Denise via LCTG <lctg@lists.toku.us> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style>@font-face { font-family: "Cambria Math"; }
@font-face { font-family: Calibri; }
p.MsoNormal, li.MsoNormal, div.MsoNormal { margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; }
span.EmailStyle20 { font-family: Calibri, sans-serif; color: windowtext; }
.MsoChpDefault { font-size: 10pt; }
@page WordSection1 { size: 8.5in 11in; margin: 1in; }
div.WordSection1 { page: WordSection1; }</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class="WordSection1"><p class="MsoNormal"><span style="font-size:13.0pt">Smita: in English? (sorry; newbie-ish; not understanding a lot of what you said) Are you saying that there are more and more break ins even when there IS 2FA? Thanks; denise<o:p></o:p></span></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="font-size:13.0pt"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif">I beg to differ, Derek.<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif">Far more than you would think if you subscribe to CISA vulnerabilities emails….. We only hear about the large companies, but not much about the secondary ones ….latest one was Xfinity, that if I remember correctly had to do with MoveIt – a file transfer software made by Progress Software used by many large enterprises including financial service companies. …..Same for Solar Winds…. Another example is Okta – a company that makes two factor authentication. ….<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif">Smita Desai<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif"><o:p> </o:p></span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><span style="font-size:13.0pt">I somewhat agree with Derek…..isn’t it not “if but when”?<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:13.0pt">Just my two cents.<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:13.0pt"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size:13.0pt">And how often do break ins occur even when there IS two factor authentication?</span><o:p></o:p></p></div></div><p class="MsoNormal"><o:p> </o:p></p><div><div><p class="MsoNormal">You make a great point. But most web sites also have a two factor authentication so passwords alone do not matter <o:p></o:p></p></div><div><p class="MsoNormal">Smita Desai <o:p></o:p></p></div><div><p class="MsoNormal"><o:p> </o:p></p><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><p class="MsoNormal">Perhaps I am old fashioned but I am amazed at the trust you all feel for the safety of your online password managers. Data breaches are a common thing these days, regrettably. I have considered moving to one of these password managers several times over the years but always go back to a sheet of paper with my passwords coded by myself.<o:p></o:p></p></div><div><p class="MsoNormal">Just my thoughts,<o:p></o:p></p></div><div><p class="MsoNormal" style="margin-bottom:12.0pt">Derek Gardiner.<o:p></o:p></p></div></div></blockquote></div></div></div><span>===============================================</span><br><span>::The Lexington Computer and Technology Group Mailing List::</span><br><span>Reply goes to sender only; Reply All to send to list.</span><br><span>Send to the list: LCTG@lists.toku.us Message archives: http://lists.toku.us/pipermail/lctg-toku.us/</span><br><span>To subscribe: email lctg-subscribe@toku.us To unsubscribe: email lctg-unsubscribe@toku.us</span><br><span>Future and Past meeting information: http://LCTG.toku.us</span><br><span>List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us</span><br><span>This message was sent to smitausa@gmail.com.</span><br><span>Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/smitausa@gmail.com</span><br></div></blockquote></div></body></html>