Cybersecurity is a very broad and seemingly abstract term, but it affects us all. Surely you have heard about hoaxes, identity theft, scams, cyberbullying, phishing, etc. Any of these attacks threatens the vulnerability of individuals, families or companies. To guide us in this entire cybersecurity jungle, there is the National Cybersecurity Institute of Spain (INCIBE).
From the INCIBE website www.incibe.es, you can ask any questions about cybersecurity, privacy, digital trust or safe and responsible use of the internet and technology. They will help you both to know how to prevent and to know what to do in the event of a real or hypothetical “attack.”
Here are some basic safety tips:

• Be careful with the links! Do not provide private information on web pages that you have accessed from a link included in an email or SMS.
• Do not download suspicious email attachments or programs or documents from unsafe websites.
• Be alert to unexpected or urgent requests in normal operations. Contact the petitioner by phone to confirm them.
• Protect devices with an antivirus or antimalware and always keep the browser, apps and operating system updated.
• Download applications only from official markets or the developer’s official website.
•  Avoid publishing sensitive information on your company’s social networks that cybercriminals can use to carry out an attack.

On January 14, 2020, Microsoft ends support for Windows 7 and Windows 2008 Server. This means that devices using these operating systems will be much more exposed to viruses and malware, as there will be no new software or security updates.

This moment can be a great opportunity for many hackers, and we must be prepared. Let’s remember that the main breaches and cyberattacks that have been in the news lately, such as RAMSONWARE or password theft, have been mainly due to outdated computers and operating systems.

The end of support, besides security issues, leads to many others such as:

• there will be fewer and fewer programs and applications compatible with these operating systems (browsers, office software, etc.).
• the hardware will increasingly struggle to “communicate” with the old system, etc.

For all these reasons, it is advisable to analyze the specific situation of each client and establish a migration schedule to Windows 10, to be carried out over the next few months.

So, if you have Windows 7 on your computer and/or Windows 2008 Server on your server, contact us as soon as possible so that we can anticipate the problem.

Give us a call even if, like most people, you don’t know which operating system your devices are running. We’ll take care of it.

When you access your website, do you see the message “Not Secure”?
If so, don’t worry, but… you should take action! What’s happening is that you don’t have a security certificate that protects both your data and the data of your website users.
Security certificates are a trust measure for people visiting a website. You surely recognize the acronym https. Well, this indicates that the website we are visiting complies with security protocols that encrypt personal data to prevent any user from accessing them.
Currently, the trust provided by security certificates is essential for both the website owner and its users. Needless to say, the more confidential information is exchanged, the more important it is to ensure its security.

On April 4, 2019, the R.D.L. was validated by the Permanent Deputation of Congress. 8/2019, of March 8, on urgent social protection measures and the fight against job insecurity during the working day, by virtue of which, and with effect from May 12, 2019, the obligation for all companies comes into force “guarantee the daily recording of the working day, which must include the specific start and end time of the work day of each worker, without prejudice to the time flexibility that is established….”
This obliges all companies to record, day by day, the work day carried out by their entire staff, recording the arrival and departure times.
Work calendars and quadrants with schedules are not considered a record of the day for the purposes of the provisions of the Workers’ Statute.
If the company has several work centers, the obligation extends to the company having workday registration systems in each of them.
The organization and documentation of this registry will be established through collective bargaining (Collective Agreements) or by agreement with the legal representatives of the workers if they exist in the company or, failing that, the employer can decide what the system to use for recording the day.
Except for what is established in each case in the applicable Collective Agreement and the agreements that may be reached with the legal Representatives of the workers, currently, there is no official model for recording the working day.
The company has the obligation to keep the workday records for four years and make them available to the workers, their legal representatives and the Labor and Social Security Inspection.
Failure to comply with the obligation to record the day is a serious infraction, punishable by a fine that at its minimum amounts to €625, and may reach a maximum amount of €6,250.

It is about concentrating all your servers on the same hardware:

• Significant cost savings (Hardware, energy, space…)
• Reduction in startup time for new servers
• Elimination of incompatibilities between different services
• Centralization of backup processes
• Hot Configurable Servers
• Possibility of self-replication of servers in case of hardware failure
• Ability to maintain old software on a modern platform

It’s official, Office 2007 and 2010 stop working with Microsoft 365.

“Will my Outlook 2010 stop working with Exchange Online?”

The answer is: “Yes, that’s correct”.

Office 2010 is obsolete, it stopped receiving support from Microsoft in October 2020 and uses vulnerable or very basic communication protocols that are no longer allowed for connections with Office 365 services and therefore stop working.

It is estimated that a large number of companies still use Office 2007 and 2010 applications because of the ease of pirating this program and not paying for licenses. These companies now find that their Outlook stops working without being able to do anything to solve the problem other than forcing an upgrade to a higher version or Office 365.

Microsoft’s move is not only an economic issue, but also a cybersecurity issue. Using outdated and unsupported software is a real problem for users, making them more vulnerable to cyberattacks. Software connecting to cloud services must always be updated and allow the use of the most modern authentication and communication protocols to establish secure connections.

As always, feel free to contact us if you have any questions!

As we explain in our post Presence Control (1), the recording of working hours continues to be an obligation for Spanish companies. But in 2024 it is prohibited to keep track of working hours through biometric means.

The Spanish Data Protection Agency has published a new guide on presence control treatments using biometric systems (fingerprint, image, palm, etc.). With the publication of this guide, the Agency changes the criteria it had regarding the use of these devices, both for recording work hours and for access control in the work and non-work environment.

Based on these new criteria, the fingerprint option or any other type of biometric data must be disabled and the said day or access registration system must be changed to mechanisms based on PIN / CARD / KEY FOB or similar.

In addition, the minutiae/logs/patterns associated with the fingerprint, palm, face, etc., must be erased from any database.

The application of this regulation is immediate and non-compliance is already costing the offending companies a few thousand euros in economic sanctions.