Data breach incident management and recovery

Iranian hacktivists muster their forces but state APTs lay low

Hacktivist activity surrounding the Iran war is sky-high but Iran’s state-backed cyber espionage actors have yet to show their hands, giving security teams a valuable window of time to shore up their defences Continue Reading

By

• Alex Scroxton, Security Editor

Tycoon2FA phishing platform dismantled in major operation

A Europol-led sting against the infamous Tycoon2FA MFA bypass phishing service has been successful, with operations disrupted and ringleaders and cyber criminal users identified Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: No increase in cyber threat from Iran, but be prepared

While cyber threat levels remain stable following the outbreak of war in the Middle East at the weekend, at-risk organisations in the UK should take steps to ward off potential reprisals from Iran-linked threat actors Continue Reading

By

• Alex Scroxton, Security Editor

Qilin crew continues to dominate ransomware ecosystem

The Qilin ransomware gang remained ‘top dog’ in January 2026, with over 100 observed cyber attacks to its name, amid a rapidly evolving and fragmenting cyber criminal ecosystem Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike touts agentic SOC to tackle security woes

By embedding AI agents across its platform, CrowdStrike is looking to help security teams automate repetitive security tasks, enabling them to focus on complex and stealthier threats that could slip under the radar Continue Reading

By

• Aaron Tan, Informa TechTarget

Cisco Catalyst SD-WAN users targeted in series of cyber attacks

The NCSC, Cisa, and other Five Eyes agencies have warned of mass exploitation of vulnerabilities in Cisco Catalyst SD-WAN, which Cisco is attributing to an unknown threat actor called UAT-8616 Continue Reading

By

• Alex Scroxton, Security Editor

Innovate UK cyber startup programme gets £10m funding booster

Graduates of DSIT and Innovate UK's CyberASAP scheme to commercialise cutting-edge cyber research projects have raised nearly £50m in the past decade Continue Reading

By

• Alex Scroxton, Security Editor

How to build an incident response plan, with examples, template

Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan.. Continue Reading

By

• Paul Kirvan

ICO wins appeal over data protection obligations in Currys cyber attack

The UK Information Commissioner’s Office has won an important appeal relating to data protection obligations arising from a 2017-18 cyber attack at electronics retailer Currys PC World Continue Reading

By

• Alex Scroxton, Security Editor

The year that speed changed cyber security

At a time when threat actors are operating at machine speed, understanding which essential systems are needed to keep the lights on can be the difference between business continuity and existential crisis Continue Reading

By

• Niraj Naidu

0APT ransomware crew makes embarrassing splash

A ransomware gang called 0APT has attracted attention, but many of its victims may not even be real, and its operators are being accused of over-egging their criminal pudding Continue Reading

By

• Alex Scroxton, Security Editor

Western cyber alliances risk fragmenting in new world order

The conduct of powerful nations is causing knock-on effects in the cyber world as long-standing security frameworks appear increasingly precarious Continue Reading

By

• Alex Scroxton, Security Editor

The evolution of threat research: Looking beyond best-of-breed

Traditional models of threat research as a service are changing and evolving towards a more bespoke model that puts more control in the hands of end-user cyber teams Continue Reading

By

• Matthew Staff

Government wages cyber campaign as half the UK’s SMEs are breached

UK government says half of all small businesses have been cyber breached in the recent past as it urges them to ‘lock the door’ Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Making sense of AI’s role in cyber security

Cyber security companies have jumped on the AI bandwagon. We look at where artificial intelligence is a useful add-on and where it poses potential risks Continue Reading

By

• Cliff Saran, Managing Editor

How to build an incident response framework

Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. Continue Reading

By

• Paul Kirvan

The Security Interviews: Mick Baccio, Splunk

Mick Baccio, global security advisor at Splunk SURGe and Cisco Foundation AI, reveals how the experience of running cyber on a dime for a US presidential campaign has informed how he does security, and why the basics still matter Continue Reading

By

• Alex Scroxton, Security Editor

The world’s default productivity tool is becoming a national security liability

The rapid exploitation of a bug in Office by Russian cyber attackers shows that the current system of patching - for a software application that is practically ubiquitous in enterprise IT - has become a security risk for everyone Continue Reading

By

• Bill McCluggage

Arctic Wolf targets mid-market security gap in APAC

Following the launch of its full portfolio in Malaysia, the SOC provider discusses the security challenges facing lean IT teams, the value of supplier neutrality, and its roadmap for AI and ransomware protection Continue Reading

By

• Stephen Withers

Researchers delve inside new SolarWinds RCE attack chain

Researchers at Huntress and Microsoft have shared findings from their analysis of a new SolarWinds Web Help Desk vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Singapore mounts largest ever cyber operation to oust APT actor

Operation Cyber Guardian mobilised over 100 defenders to neutralise UNC3886, which infiltrated Singtel, StarHub, M1 and Simba networks, operators issue joint pledge on defence-in-depth Continue Reading

By

• Aaron Tan, Informa TechTarget

Russia’s cyber attacks on Polish utilities draws NCSC alert

A series of Russian cyber attacks targeting Poland’s energy infrastructure has prompted a warning from the UK’s National Cyber Security Centre Continue Reading

By

• Alex Scroxton, Security Editor

10 types of information security threats for IT teams

Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

UK government must get its hands dirty on security, report says

As the UK government develops its National Cyber Action Plan, a report from the Rusi think tank urges Westminster to take a more interventionist approach Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware gangs focus on winning hearts and minds

Ransomware-as-a-service operations are increasingly seeking to forge connections with employees, contractors and trusted partners of their target organisations as an alternative to straight-up hacking, says NCC Continue Reading

By

• Alex Scroxton, Security Editor

Security now one of the UK’s fastest-growing career paths

The number of people working in the cyber security field has almost trebled in the 2020s, with one cyber professional for every 68 businesses in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Wave of ShinyHunters vishing attacks spreading fast

The ShinyHunters hacking collective that caused chaos in 2025 is ramping up a new voice phishing campaign, with several potential victims already identified Continue Reading

By

• Alex Scroxton, Security Editor

Broken decryptor leaves Sicarii ransomware victims adrift

A coding error in an emergent strain of ransomware leaves victims unable to recover their data, even if they cooperate with the hackers’ demands Continue Reading

By

• Alex Scroxton, Security Editor

US punts renewal of threat data sharing law to September

US lawmakers have extended the Cybersecurity Information Sharing Act of 2015 for another nine months, buying time to enact a replacement for the legislation. Continue Reading

By

• Alex Scroxton, Security Editor

Sportswear firm Under Armour falls victim to data breach

Details of over 70 million customers of US sportswear giant Under Armour were leaked following a supposed ransomware attack by the Everest gang Continue Reading

By

• Alex Scroxton, Security Editor

UK and China reach out across cyber no-man's land

London and Beijing have supposedly conducted high-level talks seeking to establish a joint security forum to help de-escalate potential cyber flashpoints, according to reports Continue Reading

By

• Alex Scroxton, Security Editor

UK public sector, CNI in Russian hacktivist crosshairs

Hacktivists aligned to the Russian state are ramping up their targeting of UK organisations with denial of service attacks Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft DCU uses UK courts to hunt down cyber criminals

Microsoft has taken down the RedDVS cyber crime-as-a-service network after obtaining a UK court order, marking its first civil legal action outside of the US Continue Reading

By

• Alex Scroxton, Security Editor

Intersec Dubai highlights why AI has become critical in the race against cyber attackers

Cigna Healthcare’s Jean Wiles warns that healthcare security teams must act faster without sacrificing accuracy or compliance as threats driven by artificial intelligence scale Continue Reading

By

• Andrea Benito , Computer Weekly

Personal data of thousands stolen in attack on London councils

The West London council at the centre of a major cyber incident has now started the process of informing residents that their personal data was compromised in the attack Continue Reading

By

• Alex Scroxton, Security Editor

UK government to spend £210m on public sector cyber resilience

The UK government unveils a £120m Cyber Action Plan to help reinforce and promote IT security resilience across the country's public services Continue Reading

By

• Alex Scroxton, Security Editor

Identity: the new perimeter of ransomware defence

Ransomware exponents can target identity, bypassing technical defences. Boards should prioritise identity security, align investments, and embed cyber risk in governance Continue Reading

By

• Jamie Collier

Top 10 cyber security stories of 2025

AI dominated all tech conversations this year, but the concerns of cyber security professionals extend far beyond. From remote work to supply chains, quantum to identity, there were plenty of other topics for the industry to chew over in 2025. Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber crime stories of 2025

In many regards, 2025 proved to be a relatively normal year for the cyber security world as threat actors and security pros continued their long-running cat-and-mouse game, but it was also a stand-out year that saw some of the largest cyber attacks ever to befall the UK. Discover more in Computer Weekly’s top 10 cyber crime stories of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 ANZ stories of 2025

The 2025 tech landscape in Australia and New Zealand was dotted with major data breaches even as organisations continue to press on with their digital transformation efforts in areas such as AI and automation Continue Reading

By

• Aaron Tan, Informa TechTarget

‘Sensitive’ data stolen in Westminster City Council cyber attack

London borough confirms that data breach affecting three neighbouring councils in a shared IT services operation led to personal information being copied by a third party Continue Reading

By

• Bryan Glick, Editor in chief

UK government confirms Foreign Office cyber attack

Reports blame Chinese hacking group but minister insists the source of the attack is unclear Continue Reading

By

• Bryan Glick, Editor in chief

Passwords to prompts: Identity and AI redefined cyber in 2025

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Daniel Gordon, PA Consulting

Cyber resilience will define winners and losers in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Nick New, Optalysys

ClickFix attacks that bypass cyber controls on the rise

NCC’s monthly threat report details the growing prevalence of ClickFix attacks in the wild Continue Reading

By

• Alex Scroxton, Security Editor

Security platform consolidation in 2026: The AI imperative

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• John Bruce, Quorum Cyber

Incident response: How to implement a communication plan

Communication is critical to an effective incident response plan. Here are best practices for communication planning and an editable template to help you get started. Continue Reading

By

• Paul Kirvan

Top IT predictions in APAC in 2026

Enterprises across the Asia-Pacific region are expected to prioritise sovereign architectures, double down on securing agentic systems and rewrite their infrastructure playbooks, among other tech trends Continue Reading

By

• Aaron Tan, Informa TechTarget

The three cyber trends that will define 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

In cyber security, basics matter, even in 2025

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

What is driving the rise of infostealer malware?

Infostealer malware is a growing problem for cyber security teams, and these attacks have the potential to cause significant damage to businesses. What is enabling them to thrive? Continue Reading

By

• Anne Heim, Socura

OAIC to launch blitz on privacy compliance

Australia’s privacy watchdog will begin the new year with a compliance sweep targeting businesses that run afoul of privacy rules, including the over-collection of personal information in-person, warning that non-compliance could trigger fines Continue Reading

By

• Aaron Tan, Informa TechTarget

Ethical hackers can be heroes: It's time for the law to catch up

The UK government's plan to finally rewrite the 1990 Computer Misuse Act to provide much-needed legal protections for ethical hackers is welcome, but now we need firm action. Continue Reading

By

• Ed Parsons, Intigriti

Cyber teams on alert as React2Shell exploitation spreads

Exploitation of an RCE flaw in a widely used open source library is spreading quickly, with China-backed threat actors in the driving seat Continue Reading

By

• Alex Scroxton, Security Editor

From trust to turbulence: Cyber's road ahead in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Aditya K Sood, Aryaka

NCC supporting London councils gripped by cyber attacks

Three west London councils hit by a cyber attack continue to investigate as services remain disrupted nearly two weeks on Continue Reading

By

• Alex Scroxton, Security Editor

Constrained budgets left security teams short-handed in 2025

With 2024 seeing surges in security funding cuts, lay-offs and hiring freezes, 2025 brought some relief for cyber pros, but constrained budgets are leaving security teams short-staffed Continue Reading

By

• Alex Scroxton, Security Editor

In 2026, collaboration, honesty and humility in cyber are key

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Rik Ferguson, Forescout

UK government pledges to rewrite Computer Misuse Act

Campaigners celebrate as security minister Dan Jarvis commits to amending the outdated Computer Misuse Act to protect security professionals from prosecution Continue Reading

By

• Alex Scroxton, Security Editor

Post Office avoids £1m fine over botched website upgrade data breach

The Information Commissioner’s Office considered fining the Post Office £1m for a 2024 data breach that let subpostmasters down again Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Women in Cybersecurity Middle East marks five years of impact at Black Hat MEA

As AI reshapes the regional cyber security landscape, diversity and skills development remain at the heart of building a resilient digital workforce Continue Reading

By

• Andrea Benito , Computer Weekly

UK's Cyber Bill should be just one part of a wider effort

New cyber legislation is necessary but a wider effort is needed to harden the UK's security and resilience. Continue Reading

By

• James Morris, CSBR

Cyber's defining lessons of 2025, and what comes next

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Dave Gerry, Bugcrowd

What lies in store for the security world in 2026?

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Anthony Young, Bridewell

How headlines can drive change in cyber security

Big news stories can shift attitudes. There’s no doubt that insurance vendors and brokers are using major cyber attacks to promote their products, but can security teams also use it to help their businesses be better prepared? Continue Reading

By

• Robert Johnston, N-able

London councils endure wave of cyber attacks, shared IT services hit

Four London councils – Kensington and Chelsea; Hackney; Westminster; and Hammersmith and Fulham – have suffered cyber attacks, disrupting services and prompting NCSC-supported investigation Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

US breach reinforces need to plug third-party security weaknesses

Cyber breach at US financial sector tech provider highlights the risk of third-party vulnerabilities in finance ecosystems Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Protecting the defenders: Addressing cyber's burnout crisis

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• Mandy Andress, Elastic

UK targets ‘bulletproof’ services that hosted ransomware gangs

The UK’s NCA and partners have cracked down on ‘bulletproof’ services that hosted cyber criminal infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware resilience may be improving in the health sector

A Sophos report on ransomware highlights resilience improvements among healthcare organisations but warns that the wider threat is still live and growing Continue Reading

Fintech leaders call for united front against AI-driven cyber crime

As AI makes financial scams more personalised and convincing, fintech experts have called for deeper collaboration and the use of behavioural analytics and other technologies to protect consumers Continue Reading

By

• Aaron Tan, Informa TechTarget

Cl0p claims ransomware hit on NHS

Ransomware gangsters claim to have attacked the NHS, but clarity on the nature of the incident is yet to emerge Continue Reading

By

• Alex Scroxton, Security Editor

US cyber intel sharing law set for temporary extension

The CISA 2015 cyber intelligence sharing law, which lapsed just over a month ago amid a wider shutdown, will receive a temporary lease of life should attempts to reopen the federal government succeed Continue Reading

By

• Alex Scroxton, Security Editor

Synnovis to notify NHS of data breach after nearly 18 months

Synnovis, the pathology lab services provider hit by a Qilin ransomware attack in 2024, is notifying its NHS partners that their patient data was compromised, following a lengthy investigation Continue Reading

By

• Alex Scroxton, Security Editor

Cohesity leverages AI and cloud flexibility to boost cyber resilience in the Middle East

As data threats grow, Cohesity helps enterprises and government institutions in the UAE and wider Middle East secure, manage, and derive value from their data Continue Reading

By

• Andrea Benito , Computer Weekly

IT services companies and datacentres face regulation as cyber security bill reaches Parliament

The Cyber Security and Resilience Bill will require large IT services companies, including datacentres, to report security incidents within 24 hours Continue Reading

By

• Bill Goodwin, Investigations Editor

Google: Don’t get distracted by AI, focus on real cyber threats

While hackers are using artificial intelligence to optimise attacks, many of the most damaging breaches still rely on old-school methods, says a top security analyst from Google Continue Reading

By

• Aaron Tan, Informa TechTarget

Nikkei data breach exposes personal data of over 17,000 staff

Hackers used stolen login details from an employee's computer to access the Japanese media giant’s Slack messaging platform, with names, email addresses and chat histories potentially exposed Continue Reading

By

• Aaron Tan, Informa TechTarget

Resilience for resilience: Managing burnout among cyber leaders

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• John Skipper and Farrukh Ahmad, PA Consulting

We need to build psychological readiness into cyber security

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• Haris Pylarinos, Hack The Box

CISO burnout: A crisis of expectation and isolation

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• Mike Gillespie and Ellie Hurst, Advent IM

US indicts three cyber pros who moonlit for ransomware gang

US prosecutors indict three men who allegedly attacked multiple victims with ALPHV/BlackCat ransomware while working as professional cyber incident responders Continue Reading

By

• Alex Scroxton, Security Editor

M&S profits tumble after cyber attack

M&S profits fall by over 90% in the wake of the spring 2025 cyber attack that crippled the retailer’s systems for weeks Continue Reading

By

• Alex Scroxton, Security Editor

Dutch boardroom cyber security knowledge gap exposed

Cyber security governance professor warns that executives lack the capability to assess cyber threats in implementation approaches Continue Reading

By

• Kim Loohuis

The Security Interviews: Colin Mahony, CEO, Recorded Future

Recorded Future’s CEO talks threat intelligence, AI in cyber security and the ever-changing cyber threat landscape Continue Reading

By

• Danny Palmer

We can alleviate the expanding burden on the CISO

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• Sam Thornton, Bridewell

Fewer data breaches in Australia, but human error now a bigger threat

Australian privacy commissioner warns that the human factor is a growing threat as notifications caused by staff mistakes rose significantly even as total breaches declined 10% from a record high Continue Reading

By

• Aaron Tan, Informa TechTarget

CISOs in court: Balancing cyber resilience and legal accountability

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path. Continue Reading

By

• Aditya K Sood, Aryaka

CrowdStrike: Europe second only to North America for cyber attacks

Europe faces rising cyber threats from criminals and nation-states, according to CrowdStrike. Ransomware attacks now take just 24 hours, with 22% of global victims being European Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Ransomware resilience: It’s time to be ‘more Bruce Lee’

The growing threat of ransomware attacks requires cyber to evolve from a defensive posture to being increasingly proactive. Building threat intel can enable this, helping better predict, prioritise and prevent ransomware attacks. Continue Reading

By

• Jason Steer, CISO, Recorded Future

Rapid7: Cyber defences stuck in the 1980s as threats mount

The company’s chief product officer notes that many defence tactics are still stuck in the past, urging organisations to adopt AI-driven security platforms to improve threat detection and response Continue Reading

By

• Stephen Withers

Effective cyber sanctions require a joined-up approach, says Rusi

Calling out and sanctioning cyber threat actors can be an effective tool, but is not a universal panacea, and needs to be considered as part of a wider, strategic approach, say Rusi think tank analysts Continue Reading

By

• Alex Scroxton, Security Editor

Pulling the plug: A way to halt a cyber attacker in your network?

Rumours of an organisation taking its systems offline during a cyber attack spurred conversation on the consequences of simply pulling the power, or internet access, to stop intruders. We consider the ethics and practicality Continue Reading

By

• Dan Raywood

LockBit 5.0 expands targeting amid ransomware escalation

The LockBit RaaS operation is back in action, with technical features and expanded targeting, and is contributing to a steadily growing number of ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Why layered resilience is the only true safeguard for SMEs

Real resilience doesn’t come from last minute panic once the storm has hit, it comes from layering defences through education, prevention, cure and – most importantly – recovery. Continue Reading

By

• Richard Abrams, Kick ICT

UK ramps up ransomware fightback with supply chain security guide

Multinational guidance, developed by the UK and Singapore, is designed to help organisations reinforce their supply chain against ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

The US government shutdown is a wake-up call for cyber self-reliance

As the US government shutdown heads towards a second month, could the disruption to cyber security programmes be the impetus end-users need to pull themselves up by their own bootstraps? Continue Reading

By

• John Paul Cunningham, Silverfort Inc

Jaguar Land Rover attack to cost UK £1.9bn, say cyber monitors

The UK's Cyber Monitoring Centre calculates the overall cost of the Jaguar Land Rover cyber attack will be almost two billion pounds Continue Reading

By

• Alex Scroxton, Security Editor

New cyber resilience centre to help SMEs fend off cyber threats

Spearheaded by the Singapore Business Federation, the cyber resilience centre will equip SMEs in the city-state with cyber security capabilities to mitigate and recover from cyber attacks Continue Reading

By

• Aaron Tan, Informa TechTarget

F5 admits nation-state actor stole BIG-IP source code

F5 discloses that a nation-state actor has stolen source code and unpatched vulnerability data for its widely used BIG-IP products, raising supply chain security concerns across the industry Continue Reading

By

• Aaron Tan, Informa TechTarget