FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

This article is contributed. See the original author and article here.

The Federal Bureau of Investigation (FBI), CISA, and Coast Guard Cyber Command (CGCYBER) have released a Joint Cybersecurity Advisory (CSA) detailing the active exploitation of an authentication bypass vulnerability (CVE-2021-40539) in Zoho ManageEngine ADSelfService Plus—a self-service password management and single sign-on solution. The FBI, CISA, and CGCYBER assess that advanced persistent threat (APT) cyber actors are likely among those exploiting the vulnerability. The exploitation of this vulnerability poses a serious risk to critical infrastructure companies, U.S.-cleared defense contractors, academic institutions, and other entities that use the software.

CISA strongly encourages users and administrators to review Joint FBI-CISA-CGCYBER CSA: APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus and immediately implement the recommended mitigations, which include updating to ManageEngine ADSelfService Plus build 6114.

Office LTSC is now generally available

Office LTSC is now generally available

This article is contributed. See the original author and article here.

When we look to the future of work, it’s clear it will be built on and powered by the cloud. Microsoft is leading innovations that enable our customers to empower their people to work more collaboratively, effectively, and securely.

The post Office LTSC is now generally available appeared first on Microsoft 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Office LTSC is now generally available

Office LTSC is now generally available

This article is contributed. See the original author and article here.

When we look to the future of work, it’s clear it will be built on and powered by the cloud. Microsoft is leading innovations that enable our customers to empower their people to work more collaboratively, effectively, and securely.

The post Office LTSC is now generally available appeared first on Microsoft 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Microsoft Releases Security Update for Azure Linux Open Management Infrastructure

This article is contributed. See the original author and article here.

(Updated, September 17)

On September 16, 2021, Microsoft released additional guidance on Open Management Infrastructure (OMI) vulnerabilities—CVE-2021-38645, CVE-2021-38649, CVE-2021-38648, and CVE-2021-38647—which impact Azure VM Management Extensions. According to Microsoft, “[c]ustomers must update vulnerable extensions for their Cloud and On-Premises deployments as the updates become available…”

CISA encourages organizations to review Additional Guidance Regarding OMI Vulnerabilities within Azure VM Management Extensions for more information and to:

  • ensure automatic updates are applied 
  • ensure manual updates are applied, as patches are made available
  • restrict external access to Linux systems that expose OMI ports (TCP 5985, 5986, and 1270)

(Original, September 16)

Microsoft has released an update to address a remote code execution vulnerability—CVE-2021-38647—in Azure Linux Open Management Infrastructure (OMI). An attacker could use this vulnerability to take control of an affected system.

CISA encourages users and administrators to review the Microsoft Security Advisory to apply the necessary update.

The importance of empathy in customer service

The importance of empathy in customer service

This article is contributed. See the original author and article here.

The pandemic has been challenging in many ways. It has impacted nearly every facet of our lives with disruptions in supply chains, millions furloughed, and much more. Despite such, the pandemic was positive in one regardit tested our capacity to come together and innovateand frankly, we soared on so many levels. In a blink of an eye, we united to create solutions to blend the human spirit and technology to deliver resilient solutions to outlast the pandemic. This was never more evident than in customer service.

Together, we transformed into superheroes. Turning our kitchen tables into remote workspaces, sliding into our commuter slippers each morning, and logging in with a few taps on a keyboard. We accepted our instinctual need for human interaction and turned to relationship-building using communication tools like Microsoft Teams to maintain relationships and fight the isolation. We built AI-driven solutions that focus on the human element with conversational chatbots designed to answer questions at any hour of the day. We accelerated transformative changes that were expected to take years to deploy, but through sheer determination, these changes were achieved in a matter of weeks. We reached deep and ascended to new heights with empathy resonating with every word.

Customer service organizations became the epicenter of resilience, moving forward and boldly going where no customer service organization had gone before. We shifted mindsets and conquered the foreboding of implementing change and pivoted in ways we never thought possible. While the changes made were sometimes uncomfortable initially, we quickly adjusted and thrived. Customer service organizations did not combust or implode, but blossomed and prospered.

Customer service organizations overcame pandemic-induced barriers to safety and wellbeing. Maintaining social distancing and protecting employees within a contact center was next to impossible. But in a matter of weeks, agents began logging into their customer service app and resolving customer issues from the safety and comfort of their homes. Not only did cloud-based customer service and omnichannel communication solutions bridge the always-on customer service gap and help keep companies solvent, but agents also continued to strengthen relationships while resolving customer issues, growing call volumes, and less than patient customers.

Customer service managers learned much about themselves and their agents. But more importantly, they learned empathy. They learned to listen more and acknowledge the concerns of their team. Organizations that came out to stand behind their agents and their safety were rewarded with increased loyalty.

During the peak of the crisis, customer service agents became a life ring where both the organization and the customer held on tightly to maintain some sense of normalcy. The degree of empathy shared by the organization was reciprocated by the agent in terms of loyalty and lower turnover. The empathetic agent influenced the customer, creating a reciprocal and symbiotic rapport. Empathy created a domino effect and has now become a critical force in building trust and strengthening relationships with both employees and customers alike.

Empathetic organizations create a dynamic of mutual loyalty and dedication. Managers and agents are inspired and lend extra effort to achieve organizational goals. It’s no surprise that these organizations are more agile and resilient than other organizations in a volatile economic landscape.

In a recent study, empathy in the workplace positively related to job performance, and managers who practice empathetic leadership were viewed as better performers. Empathetic managers have lower turnover and increased productivity. Agents pay this empathy forward by humanizing the connection and personalizing the customer conversation. Empathetic agents are proactive, thinking, and connecting to make sure each interaction supports the customer. By demonstrating empathy, agents have the power to deliver the short-term benefit of resolving an issue and the long-term benefit of building brand loyalty through a two-way emotional connection.

Building empathy

Empathy is a skill and cannot be faked. It’s a mindset, a culture, and the core of a healthy organization. Empathy should be a driving force that envelops all activities inside an organization, whether or not it’s customer-facing. Empathy starts with listening, understanding, and anticipating the needs of another. In customer service, this means putting yourself in the shoes of the customer and seeing the issue from their point of view. Empathy is anticipating what the wants and needs are of the customer at a specific moment within their journey. Then, it is all about delivering on these wants and needs by creating a positive and friction-free experience. Remember, being empathetic doesn’t mean you have to agree with the personit simply means you understand their point of view. And unlike sympathy, in which you may feel sorrow or pity the customer’s situation, empathy reduces the distance between the two parties building upon respect and trust.

Empathy helps agents personalize the interaction, predict customer follow-up questions, and proactively answer them. Empathetic agents can also predict the customer’s response by understanding the customer’s point of view. Empathy has a direct effect on customer satisfaction and loyalty as customer satisfaction and loyalty translate to increased sales. Telling a customer “no” or that what they want will cost more or that the warranty has expired, for example, can be hard enough, but when conveyed with empathy, the agent can build trust and strengthen the relationship despite not being able to resolve the issue to the customer’s liking. When the customer’s point of view is understood, empathetic agents can address and make customers feel heard and respected, which is the first step in resolving issues.

When you don’t understand where the customer is coming from, it’s easy to assume they are overreacting. It’s not easy to be empathetic under these circumstances. To overcome this reach, figure out who your customers are and what your product or service means to them. Identify the age, gender, education, and other attributes so you can bridge the gap and grow more empathetic.

Expressing empathy

Active listening. Listening can be a challenge, especially in a noisy environment. To truly empathize, you must focus on the customer and determine the issue the customer is experiencing. Typically, customer service is contacted during the peak of customer frustration so notice not just what the customer is saying, but how they are saying it. For example, determining the tone and language used during service delivery. Real-time customer sentiment analysis is a must-have tool for agents in identifying slight nuances in the customer’s mood and responding accordingly. This may mean mirroring the tone to help navigate through the problem. It can also mean remaining silent for much of the time so the customer can converse without interruption. Be sure to ask questions to delve deeper into the customer’s issues to avoid misunderstandings. Try to put yourself in the caller’s situation. Listen for subtle cues so you can tell when you’ve achieved a positive customer interaction.

Personalize interactions. When you see the customer’s profile, strive to see the person, not just the summary of their journey. Recognize the issue and validate the customer’s feelings. Respond, restate, and summarize using the same words your customer used. Validate their point of view to encourage additional information. Promote trust, respect, and understanding by asking pertinent questions about what course of action they have already tried. Never assume the customer hasn’t tried to resolve the issue before contacting customer service.

Collect feedback. Want deeper insights into the quality of your service delivery? Ask your customer. Gather feedback directly from your customers via email, SMS, live chat, or social media. Automatically sending customer service surveys following a service interaction can help deepen customer retention. Once the survey is completed, you can share insights across applications. If you spot patterns about customers not feeling heard, respected, or helped to the best of an agent’s ability, you can bridge those gaps.

Better together

COVID-19 has touched us all, but the gift we least expected from this tragedy was learning to empathize with other human beings. Empathy has become a vital ingredient to an organization’s ability to persist, to remain resilient in times of social and economic volatility. From empathetic managers becoming better leaders to the empathetic chain reaction of frontline workers paying it forward, we all benefit by returning dividends of kindness to each other. We don’t have to agree there is a problem, but we can agree that we all deserve respect and understanding of our point of view.

Learn how Dynamics 365 Customer Service can help your organization become more resilient by personalizing the customer experience and cultivating greater empathy toward the customer by better understanding their journey.

The post The importance of empathy in customer service appeared first on Microsoft Dynamics 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Office LTSC is now generally available

New collaborative app from ServiceNow brings employee experiences into the flow of work in Microsoft Teams

This article is contributed. See the original author and article here.

As the world shifts to hybrid work, people need tools that streamline daily tasks and bring them into the flow of their work. That’s why we’re excited about the Microsoft Teams collaborative apps our partners are delivering to customers.

The post New collaborative app from ServiceNow brings employee experiences into the flow of work in Microsoft Teams appeared first on Microsoft 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Announcing General Availability of Azure AD-joined VMs support

Announcing General Availability of Azure AD-joined VMs support

This article is contributed. See the original author and article here.

We’re pleased to announce that you can now join your Azure Virtual Desktop virtual machines directly to Azure Active Directory (Azure AD) and connect to the virtual machine from any device with basic credentials. You’ll also be able to automatically enroll the virtual machines with Microsoft Endpoint Manager.


 


Azure portal showing the new Azure AD and Intune options for Azure Virtual Desktop host pools.Azure portal showing the new Azure AD and Intune options for Azure Virtual Desktop host pools.


 


This new configuration allows you to provide access to cloud-only users (created in Azure AD and not synchronized from an on-prem directory) which wasn’t possible before. For certain scenarios, this will help eliminate the need for a domain controller, help reduce cost, and streamline your deployment. While this is a major milestone, it’s just the beginning of the journey towards full integration with Azure Active Directory. We will continue adding new capabilities such as support for FSLogix profiles, single sign-on, additional credential types like FIDO2, and Azure Files for cloud users.


 


To learn more, visit our documentation page.

The importance of empathy in customer service

Merging of HR offerings brings capabilities together for customers

This article is contributed. See the original author and article here.

It’s time for us to bring all new and future HR capabilities and enhancements within Dynamics 365 Human Resources to all our customers.

We currently have two separate sets of human resources capabilities on two different infrastructures within Dynamics 365:

  • Dynamics 365 Human Resources, which is a complete stand-alone application running on an independent infrastructure. Our customers use this application to increase organizational agility and get workforce insights. All investments over the last three years have been focused on this application.
  • The HR module, which is a legacy set of capabilities that was previously part of our Unified Operations licensing bundle. Our customers received these HR capabilities as part of Dynamics 365 Finance or Dynamics 365 Supply Chain Management. We have not been adding capabilities or enhancements to this module. The HR module runs on the same infrastructure as the other applications within our operations portfolio, which was previously named Finance and Operations.

As you can imagine, having two ways to access HR capabilities creates a lot of confusion. It also prevents our customers from experiencing the benefits that each set of capabilities offers.

By merging these capabilities onto the same infrastructure, our customers will see:

  • All the enhancements that we have added over the last three years, including improved leave and absence, benefit management, and reporting.
  • Improved extensibility through the Microsoft Power Platform and the ability to extend business logic to personalize screens and forms.
  • Improved deployment, updates, and maintenance with consistency in terms of Application Life Cycle Management, Lifecycle Services, Geographic availability, and more.
  • More technology innovation within the roadmap, as our engineering team now can utilize shared services, tooling, and reduce platform costs.

Dynamics 365 Human Resources will continue to be licensed and sold as a stand-alone application. With the merge, it will tap into the power of the Dynamics 365 shared infrastructure, the Power Platform, and the Dataverse.

This transition will impact customers that are currently running Dynamics 365 Human Resources and those that are using the HR module.

Here are some frequently asked questions and answers to help with the transition.

When will the Dynamics 365 Human Resources infrastructure merge be completed?

The infrastructure merge will roll out in phases to better support all customers and provide time for transition planning. You will see new capabilities begin to roll out in the 2021 Wave 2 release. For more details, see the Dynamics 365 Human Resources 2021 release wave 2 plan. These phases will align with the version service updates, which start with the One Version service updates that start as a preview in December 2021. The merge will be complete in the 2022 Wave 1 release. (These dates are subject to change, so refer to the release plans for the most up-to-date information.)

When should my organization transition into the new infrastructure?

The transition for each company will depend on your current configuration and readiness to move to the new infrastructure. We recommend working with your business partner to determine the best path forward for your company.

  • Organizations that use the HR module will receive new functionality as part of the regular One Version update process. Features are planned to become generally available beginning in January 2022 (dates are subject to change, so refer to the release plans for the most up-to-date information).
  • Organizations using Dynamics 365 Human Resources will have access to migration tools to complete the infrastructure merge. Please check the release plans regularly to get up-to-date information on when these tools will be available. We will work with our customers to make the transition without an interruption in service. Customers will need to make the transition 12-18 months from when the migration tooling is available.
  • Organizations that use both Dynamics 365 Human Resources and the HR module will also need to use the migration tooling.

Will I lose any features or capabilities that I currently use?

Our objective is to minimize the impact of this transition for our customers, and we will not be removing any features. There will be functional parity between Dynamics 365 Human Resources and the HR module. In cases where the feature exists in both infrastructures, the Dynamics 365 Human Resources experience will be used.

Will the experience change for my users?

New capabilities will be managed through Feature management. This will allow our customers to decide which features they want to utilize. In some cases, we may need to change the experience; however, in those cases, documentation will be provided.

Are there any licensing changes or minimum number of user requirements?

Customers that have purchased Dynamics 365 Human Resources will not require license changes. The additional sandbox stock-keeping unit (SKU) that was specific for Human Resources will no longer be applicable. Instead, customers can choose to buy a Finance and Operations apps Tier 2 sandbox at a lower cost. Existing customers who have purchased a Human Resources sandbox will be migrated to a Finance and Operations apps Tier 2 sandbox at no additional cost. We will continue to require five minimum users for Dynamics 365 Human Resources.

Customers using the HR module will be required to purchase licenses for Dynamics 365 Human Resources starting in February 2025. These customers will get the new functionality as part of their current contract until February 2025 or until the current licensing agreement expires, whichever is earlier. Customers can also choose to move to Dynamics 365 Human Resources licenses earlier if it helps them achieve better cost savings.

What training and resources will be available to help with the migration process?

Full documentation will be provided to describe each step of the migration process in detail. We will also determine if any additional training resources, such as videos and workshops, are needed to help our partners and customers with a smooth transition to the new infrastructure.

Next steps

We recommend that you work with your partner to determine a transition plan that works best for your company. Our objective is to provide customers with the time needed for a smooth transition. You can also email specific questions to the Microsoft Team.

 

The post Merging of HR offerings brings capabilities together for customers appeared first on Microsoft Dynamics 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Join the Azure Spring Cloud Enterprise preview and level up Spring Boot apps

Join the Azure Spring Cloud Enterprise preview and level up Spring Boot apps

This article is contributed. See the original author and article here.

In 2019, Microsoft and Pivotal (now VMware) announced Azure Spring Cloud, a fully managed service for Spring Boot applications. We set out to solve many of the common challenges enterprise developers face when running Spring Boot applications at scale. The service manages dynamic scaling, security patching, out-of-the-box instrumentation for monitoring, and more so developers can focus on their apps. Since then, we’ve worked with many customers including Kroger, Swiss Re, Raley’s, and Digital Realty to help them adopt the service.


We also learned that some customers need more. Many are running thousands of Spring Boot applications on-premises and need advanced capabilities to accelerate their Spring modernization projects. Based on our learnings, we started worked on a new Azure Spring Cloud tier with commercially supported components to meet the needs of enterprise customers. Now, we are announcing the availability of Azure Spring Cloud Enterprise in preview.


 


Azure Spring Cloud Enterprise is a managed service for Spring that is optimized for the needs of enterprise developers. We have collaborated with VMware to combine the cloud platform expertise of Microsoft with the innovation of the VMware Tanzu portfolio. Azure Spring Cloud Enterprise adds commercial Tanzu components built specifically to address enterprise requirements around configuration, integration, flexibility, and support.


 


nceres_0-1631636524395.png


 


Figure 1: Example—Azure Spring Cloud pricing tier selection, including Enterprise tier


 


Commercial VMware Tanzu components


With Azure Spring Cloud Enterprise, customers can use the VMware Tanzu components they know and love on managed Azure infrastructure. Tanzu Build Service, Tanzu Application Configuration Service, and Tanzu Service Registry are available during preview. Customers will have the flexibility to select which Tanzu components they want during or after instance creation. Microsoft and VMware will continue to add more Tanzu components such as Tanzu Spring Cloud Gateway and Spring Cloud Data Flow* to the service, providing increased value to customers.


 


*The Azure Spring Cloud Enterprise roadmap is not confirmed and is subject to change.


 


nceres_1-1631636524358.png


 


Figure 2: Example—VMware Tanzu settings and component selection in Azure portal


 


Advanced configurability and flexibility


Large enterprises often have complex workflows and need additional configuration options for their environments and development processes. Tanzu Build Service supports customizable Buildpack configurations that automate container creation and governance. Developers also get the full benefits of the Azure platform with limitless scaling and global deployment options, as well as integration with Azure services. And customers can move their existing Spring workloads built on Tanzu components to Azure Spring Cloud Enterprise, using the service to provide on-demand Spring Cloud infrastructure.


 


Spring Runtime support


Azure Spring Cloud Enterprise includes VMware Spring Runtime support for Spring projects. This gives you access to Spring experts and access to special versions of popular Spring projects specifically designed for enterprise use. With expert assistance, you can unlock the full potential of the Spring ecosystem and jumpstart your Spring application development.


 


Fully integrated with Azure


Azure Spring Cloud Enterprise runs on Azure in a fully managed environment. You get all the benefits of Azure, and the experience is familiar and intuitive. Just create your instances using a provisioning tool of your choice—Azure portal, Azure CLI, Azure Resource Manager Template, or Terraform.


 


nceres_2-1631636524376.png


 Figure 3: Example—Azure Spring Cloud Enterprise creation review


 


After you create your instance and deploy your applications, you can easily monitor with Application Insights or other application performance management (APM) tools of your choice. As with the standard tier, Azure Spring Cloud Enterprise comes with out-of-the-box support for aggregating logs, metrics, distributed app traces, and alerts.


 


nceres_3-1631636524407.png


 Figure 4: Example—Application transactions visible through Application Insights “Application Map”


 


Get started


Azure Spring Cloud Enterprise provides customers with advanced configuration capabilities and managed Tanzu components, all backed by the enterprise promises customers expect from VMware and Microsoft. We would love to see you try the service and share your feedback—sign up for the preview by clicking “Contact Me.”


 


You can also learn more about Azure Spring Cloud Enterprise from VMware.