Cybersecurity Best Practices for the Holiday Season

4 min read

Cybersecurity The holiday season is when most people go on shopping sprees and travel. This season also witnesses a surge in online activities in today’s digital world. Unfortunately, cybercriminals take advantage of this period to launch attacks. Therefore, cybersecurity should be the top priority for a business gearing up for peak sales or a shopper looking for the best deal.

Understanding Holiday Cyber Threats

Businesses and consumers face unique challenges during the holiday season. For businesses, the increase in traffic and online transactions can overwhelm systems. This may make them vulnerable to attacks. Cybercriminals may use tactics such as ransomware, phishing scams and fraudulent transactions during the busy season. Consumers, on the other hand, get lured by malicious ads, fake websites and phishing emails that may appear as irresistible holiday deals.

Recognizing these risks is important to staying safe for both businesses and consumers. Understanding them also means taking proactive measures to reduce exposure to cyber threats.

Why Cybersecurity Matters

The lack of effective cybersecurity can lead to financial loss, reputational damage and disruption to a businesses’ operations. On the other hand, consumers face identity theft, unauthorized purchases and compromised financial accounts.

According to the Retail and Hospitality Information Sharing and Analysis Center (RH-ISAC), threats such as ransomware, phishing, and account takeover (ATO) attacks intensify as consumer activity surges. In their 2024 Holiday Season Cyber Threat Trends Report, RH-ISAC emphasizes proactive defense measures, especially during high-traffic periods like the holiday season.

Cybersecurity Best Practices for Businesses

Security measures for businesses include:

  • Set up a holiday strategy – over the long holidays, businesses tend to have a change in work schedules and fewer staff members. Having a holiday cybersecurity strategy can safeguard against potential cyber threats. This can include an emergency response plan and designating responsible individuals for cybersecurity.
  • Endpoint security – this involves protecting devices like computers and smartphones used in the business. It is important to update all software, install antivirus programs and enable firewalls to shield the business network from intrusions.
  • Employee training – human error is one of the leading causes of data breaches. Therefore, it is important to educate staff to recognize phishing attempts. They should also know the importance of strong passwords and reporting suspicious activity.
  • Monitoring systems for unusual activity – This requires a business to invest in tools that help detect suspicious behavior in its networks. This should include fraud detection systems that will help identify unusual transaction patterns. It also helps detect potential compromises from third-party vendors.
  • Backup and recovery plan – business continuity in case of an attack is crucial. Therefore, a business should ensure that data is regularly backed up and stored securely. It also helps to test the recovery process regularly.

Cybersecurity Best Practices for Shoppers

Consumers are not immune to holiday cyber-attacks. A consumer must keep the following in mind:

  • Shop from secure websites – shoppers should be cautious by checking website security. They should check that a website includes “https://” and a padlock icon in the URL. Also, confirm the correct name of the website. It is also important to avoid clicking on links from unsolicited emails or social media ads. This is a common phishing tactic.
  • Use secure payment methods – a credit card provides better fraud protection than a debit card. Consider digital wallets that have an extra layer of encryption. It is also crucial to avoid saving payment details on websites.
  • Avoid public wi-fi – shopping on the go may see some shoppers use public networks. These networks expose data to hackers.
  • Be wary of emails and messages with deals that sound too good to be true. Always verify sender authentication and, where necessary, contact the company directly.
  • Be cautious about unexpected package notifications. Unexpected package notifications can be a phishing tactic to steal personal information or install malware. Always verify the sender and avoid clicking on links in unsolicited messages.
  • Be cautious of holiday scams like fake charities, gift card scams and fake gift exchanges that prey on the season’s generosity and excitement. Scammers may trick customers into buying gift cards or sharing personal details through fraudulent schemes. Staying skeptical of unsolicited offers and never sharing sensitive information with unverified sources will help ward off cybercriminal attacks.
  • Activate multi-factor authentication (MFA) – adding MFA creates an extra layer of security for highly sensitive accounts such as email, bank, and work-related logins.

 Closing Thoughts

The holiday season is meant to be a time of celebration and connection, not worry and stress. By implementing robust cybersecurity practices, businesses can protect their operations and customers while shoppers enjoy safe, hassle-free transactions.

Energy Tax Credit Changes For 2025

3 min read

Energy Tax Credit Changes For 2025The coming shakeup of the executive branch, along with Republican control of both houses of Congress, means tax changes are highly likely in 2025 and beyond. Positioning for new and amended tax provisions is already off to the races.

Regardless of the political landscape, on rare occasions, some measures have broad bipartisan support. One such bill is called the Methane Reduction and Economic Growth Act. It proposes adding a new credit for sequestering “qualified” methane from mining activities.

Looking Ahead To 2025

Proponents of the Methane Reduction and Economic Growth Act hope the tax credit will have a beneficial economic impact and create jobs. The idea is to capture and utilize the methane for productive industrial uses or as an alternative for heating buildings. The methane emitted by mines that qualify have long lifespans, with some abandoned mines emitting methane for up to 100 years. The long lifespan of the methane source is hoped to support the significant capital investment required to get the process up and running.

There is also significant potential for job creation in areas most impacted by the shutdown of coal-fired power plants, which in turn devastated the coal mining industry. The concept of using mine methane as an energy source could support rural American jobs.

Landscape and Potential for the Credit

There is a lot of mine methane to capture, with most not currently being captured. The U.S. government estimates abandoned coal mines produce about 237,000 metric tons annually. This methane has many potential uses, including hydrogen production.

Details on the New Subsection

The new section of 45Q credits would be based on the quantity of qualified methane that is sequestered. The captured methane must then be sent to the pipeline and used for producing heat or electricity. To be considered “qualified methane,” it must be captured from certain types of mines, including closed, abandoned, and surface mines. Finally, the methane captured must have otherwise been sent into the atmosphere if it had not been for the capture equipment activity.

Only qualified facilities may obtain the credit. Among other factors, the taxpayer needs to capture a minimum of 2,500 metric tons of methane each year to qualify. There are a lot more technical regulatory requirements related to the specific nature of methane capture, but those are beyond the scope of this article.

Conclusion

Typically, tax bills are split down the aisle based on political partisanship. This makes the passage of tax legislation difficult at best due to competing interests and a divided government. The tax credits related to methane capture, however, appear to be unusually bipartisan in nature. This is due to the unique intersection of democratic support from an environmental and climate perspective, meeting with Republican interest to support economic development in rural coal mining areas where the industry has been devastated. Put these two interests together, and you have the makings for a widely supported bipartisan bill that is very likely to pass.

Making Pensions Equitable, Protecting Foster Kids, Mail-in Votes and Tracking Government Spending

3 min read

Making Pensions Equitable, Protecting Foster Kids, Mail-in Votes and Tracking Government SpendingAll bills not enacted by the end of the 118th congressional session on Jan. 3, 2025, will expire.

Social Security Fairness Act of 2023 (HR 82) – This bill, with 330 bipartisan sponsors and a similar bill in the Senate, was introduced by Rep. Garret Graves (R-LA) on Jan. 9, 2023. It passed in the House on Nov. 12 of this year and is likely to pass in the Senate before the year’s end. The purpose of the bill is to eliminate the government pension offset that reduces Social Security benefits for individuals who receive other benefits, such as a pension from a state or local government. In the private sector, this would have a similar effect to withholding Social Security from people who have a 401(k). The bill would also repeal provisions that reduce Social Security benefits for spouses and widows/ers who receive their own government pensions. The provisions of the bill would be retroactive to the beginning of 2024.

BOLIVAR Act (HR 825) – This legislation prohibits the head of an executive agency to enter into a contract for the procurement of goods or services with any person that has business operations with the Maduro regime in Venezuela. The act was introduced on Feb. 2, 2023, by Rep. Michael Waltz (R-OH). It passed in the House on Nov. 18, and its fate currently lies with the Senate.

Vote by Mail Tracking Act (HR 5658) – This bill would require mail-in ballots to use the Postal Service barcode and an Official Election Mail logo. It passed in the House on Nov. 18 and is under consideration in the Senate. The bill was introduced by Rep. Katie Porter (D-CA) on Sept. 21, 2023.

Find and Protect Foster Youth Act (S 1146) – This act was introduced on March 30, 2023, by Sen. John Cornyn (R-TX). It would amend a provision of the Social Security Act to require the Department of Health and Human Services to eliminate obstacles to identifying and responding to reports of missing foster care children. Furthermore, it would assist in the assessment and screening of children who are at risk of becoming victims of sex trafficking, as well as identify best practices for effective interventions. The bipartisan bill passed in the House on Nov. 18 and is currently in the Senate.

Billion Dollar Boondoggle Act of 2023 (S 1228) – This bill was introduced by Sen. Joni Ernst (R-IA) on April 25, 2023. The bill would require the director of the Office of Management and Budget to submit an annual report to Congress detailing projects that are over budget and behind schedule. This is a bipartisan bill that has passed in both the Senate and the House, but on July 22, the House made changes and sent it back to the Senate, where it currently resides.

Rural Broadband Protection Act of 2024 (S 275) – Introduced by Sen. Shelley Moore Capito (R-WV) on Feb. 7, 2023, this bill would require the Federal Communications Commission (FCC) to vet applicants for funding of affordable broadband deployment in high-cost areas (including rural communities). The FCC would mandate a process, including a detailed proposal with technical capabilities to provide competitive awards for implementing the broadband network services. The FCC would then assess proposals in line with well-established technical standards. The bill passed the Senate on Sept. 25 and is currently with the House.