24uNet

Cybersecurity-first managed IT for 10–75 person firms in Colorado and Bryan/College Station, TX. 24/7 threat detection. Security isn't a tier. Since 2004.

[24uNet @24uNet]

Would your setup catch an account takeover at 2am on a Saturday?

At 24uNet, security isn't a tier. Our security standard is in writing, so you can hold any provider to it, including us.

Managed IT + cybersecurity for 10–75 person firms in CO & TX.

https://t.co/wlMY2zpq6A

[24uNet @24uNet]

A fake sign-in page can show the user the real number-matching prompt. Phishing-resistant means nothing to type or approve that an attacker can reuse: a passkey or a FIDO2 key. https://t.co/5wuhIZghUn

[24uNet @24uNet]

A familiar voice is no longer proof of who is calling. Before you move money, hang up and call back on the number in your own directory, not the one in the message, the signature or the caller ID. https://t.co/A72aSVV5bh

[24uNet @24uNet]

Software Update only shows updates your Mac can take. "Up to date" means up to date for that hardware, not necessarily still protected. Check your macOS version against Apple's security releases. https://t.co/MAURxLDGix

[24uNet @24uNet]

Ask your IT provider when they last restored real files from your backups, and for the written record of it: the date, what was restored, whether it worked. No date, no test, no plan. https://t.co/tYGF5cAyE8

[24uNet @24uNet]

SEC-registered RIAs: amended Reg S-P now applies to firms of every size. Key pieces: an incident response program, vendor oversight, and customer notice within 30 days of discovering unauthorized access to sensitive info.

General info, not legal advice.
https://t.co/S3twAprFUM

[24uNet @24uNet]

Microsoft's mitigation for Outlook Copilot tampering is not fully automatic. It depends on the external sender tag being enabled in your tenant. If it never was, check. https://t.co/RUmhPxOjQt

[24uNet @24uNet]

A hot site for everything is the safest disaster recovery choice and almost always the wrong one for a 10 to 75 person firm. Start with how long each system can be down. https://t.co/JG1YIGMAvY

[24uNet @24uNet]

Texas SB 2610 doesn't require a cybersecurity program. It limits exemplary damages if you can demonstrate you had one. The key word is demonstrates. https://t.co/QGGnffkC6v

[24uNet @24uNet]

The most common password manager failure isn't the software. It's a rollout where only one person can get back in. Name two admins and test recovery before you invite staff. https://t.co/b0mAcQBd8Z

[24uNet @24uNet]

Bryan/College Station defense suppliers: has a prime asked about CMMC Level 1?

15 requirements from FAR 52.204-21. Every one must be met. You self-assess yearly, enter it in SPRS, and a senior official affirms it.

Our step-by-step guide:
https://t.co/pIAKeDD8jW #CMMC

[24uNet @24uNet]

Before you sign a vendor contract, get it in writing: who owns your drawings and revisions, where they're stored, who has admin access, and what happens to every copy at the end. https://t.co/VqxTgDqE7S

[24uNet @24uNet]

Cloud sync isn't a backup. When your project server is encrypted, the encrypted versions sync too. Keep one offline copy, on credentials your everyday admin account can't reach. https://t.co/VDwbXVWzTd

[24uNet @24uNet]

"We have MFA, so we're covered."

MFA is essential, but attackers get past it with device-code phishing, AiTM proxy pages and push fatigue. The sign-in looks valid. What gives it away is what comes next: a new inbox rule or an odd session.

https://t.co/0KaWQT6Isu #MFA

[24uNet @24uNet]

Blocked is not signed out. An access token is good for about an hour, so revoke the sessions too. The order that matters: stop access, preserve data, reclaim the license last. https://t.co/H0oZ9Rde9y

[24uNet @24uNet]

The SEC's Reg S-P mock exam materials name your IT provider's contract as a requested document, and list outsourced IT staff among interviewees. Your provider is part of the exam. https://t.co/2RDQYh4Nja

[24uNet @24uNet]

A caller says your passkey needs updating right now. The passkey is a pretext. What they want is your session, so the ask is always a code or an approval. Hang up and call IT on the number in your directory. https://t.co/VDkXGP19cO

[24uNet @24uNet]

5 security checks for this month, no new software:
1. Call back on every payment change
2. Find your MFA exceptions
3. Put DMARC at enforcement
4. Offboarding: revoke sessions, not just passwords
5. Test a restore, M365 included

https://t.co/PHj1WThkdV #Cybersecurity

[24uNet @24uNet]

Device code phishing does not break MFA. The attacker starts a real Microsoft sign-in, emails you the code, and you approve their session on Microsoft's own page.

Block device code flow.
https://t.co/0KaWQT6aCW

[24uNet @24uNet]

CMMC Level 1 has no SPRS score. All 15 requirements are MET or NOT MET as a set, and POA&Ms are not allowed.

So when a prime asks for your SPRS score, ask which assessment they mean.
https://t.co/pIAKeDD8jW

#CMMC

[24uNet @24uNet]

Have an IT provider? Keep them. Take our written Security Baseline to them and ask for evidence on each line.

In our experience, gaps hide in 3 spots:
- M365 backed up separately
- SPF, DKIM and DMARC at enforcement
- A restore that's actually tested

https://t.co/wlMY2zoSh2