News

Business continuity planning

August 12, 2020 12 Aug'20
Microsoft patches two zero-days with active exploits

Microsoft drops another major Patch Tuesday update, including fixes for two zero-day exploits that are already being exploited by cyber criminals
August 11, 2020 11 Aug'20
French data protection authorities to probe TikTok as suitors circle

France’s CNIL has confirmed a new investigation into TikTok’s data protection practices
August 11, 2020 11 Aug'20
Hospitality sector is failing on contact-tracing obligations

Cyber security experts urge the government to do more to help small hospitality businesses improve their contact-tracing data-handling practices
August 10, 2020 10 Aug'20
Security teams struggle to keep pace with cloud threats

Security professionals face challenges in keeping pace with cloud deployments and migrations, and the additional security threats they open up

August 06, 2020 06 Aug'20
Business leaders banking on technology to drive coronavirus recovery

GDP and IT spending are down, but business leaders see technology as the way to go when it comes to coping with the global pandemic
August 05, 2020 05 Aug'20
Seven questions you need to ask when buying security insurance

Find out what you need to ask to make an informed decision on cyber security insurance with new help from the UK’s NCSC
August 05, 2020 05 Aug'20
Second wave of Covid-19 cyber attacks locked in

More cyber attacks exploiting the pandemic seem likely, says Interpol
August 04, 2020 04 Aug'20
Five signs you’re about to get hit with ransomware

A series of Sophos reports on the ransomware threat landscape shows how security professionals can sniff out a potential ransomware attack before it happens
July 31, 2020 31 Jul'20
Labour Party is latest victim of Blackbaud ransomware attack

Widening Blackbaud data breach ensnares the Labour Party as the cloud software firm continues to duck questions about its behaviour
July 28, 2020 28 Jul'20
De Montfort, KCL, Newcastle universities join list of Blackbaud victims

Embattled cloud services provider now has big questions to answer over its handling of data belonging to UK universities and charities

July 28, 2020 28 Jul'20
Digital bank customer data breached through third party

FBI is investigating digital bank customer data breach that occurred via a former third-party supplier
July 28, 2020 28 Jul'20
NCSC names national security expert Lindy Cameron as new CEO

New National Cyber Security Centre head joins from the Northern Ireland Office and has spent 20 years in government at home and abroad
July 28, 2020 28 Jul'20
Scotland’s security resilience centre concept goes national

Based on the success of the Scottish Business Resilience Centre, a series of regional Cyber Resilience Centres are now launching across the rest of the UK
July 28, 2020 28 Jul'20
NCSC inducts six security startups to Cyber Accelerator

10-week programme will guide some of the UK’s most innovative security startups as they scale their businesses for future growth
July 24, 2020 24 Jul'20
Investment in neurodiverse talent a win-win for security

Current careers guidance and recruitment processes for security jobs are not working for people with ADHD, autism, dyslexia and dyspraxia, but the problem is fixable with a little attention to detail
July 23, 2020 23 Jul'20
Post-Privacy Shield, what chance for a Brexit data adequacy deal?

The striking down of Privacy Shield has been hailed as a victory for digital rights and privacy campaign groups, but it will have consequences that go beyond transatlantic data transfers
July 23, 2020 23 Jul'20
Microsoft results show impact of tech-driven business resilience

While economies are set to shrink, businesses are leaning on tech to support operations, says Microsoft CEO Satya Nadella
July 22, 2020 22 Jul'20
NCSC reveals scale of cyber attacks on UK sports industry

The UK’s sports industry is under near constant cyber attack, according to new statistics from the National Cyber Security Centre
July 22, 2020 22 Jul'20
No let-up in cyber attacks as lockdown eases

Cyber attacks are up by one-third as the coalescence of cyber activity and nation state-linked threats around the pandemic bears fruit for bad actors
July 21, 2020 21 Jul'20
Australian industry panel calls for ‘clear consequences’ of cyber attacks

A government-appointed panel recommends strong deterrence and other measures to be implemented in Australia’s next cyber security strategy
July 20, 2020 20 Jul'20
ICO hails transformative year as average fine trebles

Information Commissioner’s Office annual report reflects on a busy period, during which it levied two of the largest fines so far seen under the GDPR
July 17, 2020 17 Jul'20
Twitter hack fallout: Investigators on trail of cyber criminals

Investigators are hunting the cyber criminals who broke into Twitter’s systems to hijack prominent accounts, amid concerns that more attacks may come
July 16, 2020 16 Jul'20
Coronavirus shines spotlight on cyber security

Programme committee chair of this year's RSA Conference Asia-Pacific and Japan talks up the challenges that IT security professionals in APAC are facing to mitigate security risks amid the Covid-19 pandemic
July 15, 2020 15 Jul'20
Patch Tuesday: Microsoft fixes 123 bugs in July 2020 update

The bugs start coming and they don’t stop coming; Microsoft has issued yet another bumper Patch Tuesday update
July 14, 2020 14 Jul'20
CISOs undervalued, overworked, burning out, warns CIISec

The vast majority of security professionals say they are under immense pressure, according to a report
July 13, 2020 13 Jul'20
NCSC launches pen testing service for remote workers

An expansion to the successful Exercise in a Box toolkit will enable SMEs to probe the cyber security defences of remote workers
July 09, 2020 09 Jul'20
Majority of security pros fed up with alert fatigue

A vast majority of security professionals say they experience alert fatigue, and 88% are facing challenges with their current SIEM setup, according to a report
July 06, 2020 06 Jul'20
Need to secure industrial IoT more acute than ever

A report from the Lloyd’s Register Foundation is calling for urgent action to secure industrial infrastructure, as the IoT leaves it increasingly exposed
July 02, 2020 02 Jul'20
Locked-down teens flock to NCSC CyberFirst training scheme

A record number of 14 to 17-year-olds have signed up to the National Cyber Security Centre’s CyberFirst summer school
July 01, 2020 01 Jul'20
UK’s unsung cyber security heroes sought

Nominations have opened for the fifth annual Security Serious Unsung Heroes Awards
July 01, 2020 01 Jul'20
Zoom making progress on cyber security and privacy, says CEO

Three months after being hit by a spate of security incidents, Zoom’s CEO, Eric Yuan, has been discussing progress towards a more secure product
July 01, 2020 01 Jul'20
Remote workers more aware of security, but still flout the rules

Almost three-quarters of remote workers reckon they have gained in cyber security awareness during lockdown, but don’t seem to be especially bothered about keeping themselves safe
June 30, 2020 30 Jun'20
The Security Interviews: What CISOs can learn from Covid-19

Mike Lloyd, CTO at Redseal, holds 21 cyber security patents and a PhD in stochastic epidemic modelling from Heriot-Watt University in Edinburgh, so is probably the man to talk to when it comes to cyber security in the world of Covid-19
June 30, 2020 30 Jun'20
Complex security estates hinder incident response

The more disparate security tools in use in an organisation, the harder it becomes to mount an effective incident response
June 29, 2020 29 Jun'20
Phishing back in vogue as ransomware vector

Researchers have observed an increase in phishing as a means to deliver ransomware payloads – and organisations don’t appear to be prepared
June 29, 2020 29 Jun'20
Post-pandemic security market still set for growth, but slower

Frost & Sullivan report says the global security industry will withstand the economic crash caused by the Covid-19 pandemic, but growth will be slower for a few years
June 26, 2020 26 Jun'20
Coronavirus: Cyber crime landscape evolving as lockdown eases

As some countries begin to gradually ease Covid-19 lockdown measures, cyber criminals’ tactics are changing, but the pandemic remains a tempting lure
June 25, 2020 25 Jun'20
Pub ‘check-in’ apps provoke fresh privacy concerns

With pubs and restaurants required to collect customer data for contact tracing when they reopen, data privacy risks will be heightened
June 25, 2020 25 Jun'20
Veeam bullish on growth in APAC

Veeam’s top executive in Asia-Pacific expects the company’s growth momentum in the region to continue despite the Covid-19 pandemic, and is setting sights on growth areas such as container backups
June 24, 2020 24 Jun'20
EU judges GDPR an overall success, but changes still needed

Two years after its implementation, an EU report says that the GDPR is achieving what it set out to do, with a few reservations
June 23, 2020 23 Jun'20
Neurodiversity on the rise among career hackers

More diverse hackers enhance the ability of both traditional and cutting-edge cyber security solutions to find and fix vulnerabilities, according to a new report from Bugcrowd
June 23, 2020 23 Jun'20
Concern over digital risk falls dramatically during pandemic

Brits are understandably more worried about the NHS than personal cyber security
June 23, 2020 23 Jun'20
Huawei to invest S$5m in Singapore to boost tech ecosystem

Huawei is pumping in S$5m this year to develop joint partner offerings in Singapore with a focus on artificial intelligence
June 17, 2020 17 Jun'20
Coronavirus: Cyber security spend to slow in 2020

Analysts revise down previous growth targets for security technology as the Covid-19 pandemic bites
June 17, 2020 17 Jun'20
Coronavirus: 50% of security pros had no pandemic contingency plan

A survey of security professionals conducted on behalf of Bitdefender reveals the lack of forward planning for events such as the Covid-19 coronavirus pandemic
June 11, 2020 11 Jun'20
CISOs buying into unified security proposition

The time is right for all-in-one security solutions, according to a report
June 10, 2020 10 Jun'20
Decade-old vulnerability among 129 Patch Tuesday fixes

A 10 year-old bug in Windows Group Policies could easily enable attackers to gain highly privileged user status on target systems, opening the doors to a wave of cyber attacks
June 10, 2020 10 Jun'20
Nasty surprises lurking in furloughed employees’ inboxes

Research conducted by KnowBe4 points to a looming email security problem as furloughed employees head back to work
June 09, 2020 09 Jun'20
Honda investigates suspected Snake ransomware attack

Attack disrupts global operations at carmaker, with assembly lines falling silent and sales suspended
June 09, 2020 09 Jun'20
Cyber security needs more women role models, says report

A report compiled by security assurance organisation Crest highlights the progress made on gender diversity in cyber security, and offers pointers for next steps
June 04, 2020 04 Jun'20
Small businesses failing on remote worker protection

Only one-third of people working for small businesses have received any guidance from their employers on how to secure their remote working set-up
June 03, 2020 03 Jun'20
Sodinokibi data auctions highlight changing criminal tactics

The operators of the Sodinokibi ransomware strain are auctioning off swathes of stolen data in an apparent bid to raise cash. What is motivating this new tactic?
June 03, 2020 03 Jun'20
Security procurement framework goes live for NHS and public sector

Cyber Security Services Framework, developed by NHS Shared Business Services, has formally launched
June 03, 2020 03 Jun'20
Infosec 2020: Covid-19 an opportunity to change security thinking

The annual Infosecurity Europe is being held virtually this year, and speakers at an online panel session have been considering the impact of the pandemic on security awareness
June 03, 2020 03 Jun'20
Aston Martin swaps out legacy antivirus for AI-driven service

Luxury car manufacturer says the advent of artificial intelligence-powered services will revolutionise its security posture
June 02, 2020 02 Jun'20
NIS security regulations proving effective, but more work to do

The UK’s NIS cyber security and risk regulations are proving somewhat effective, according to a government report
June 01, 2020 01 Jun'20
How managed threat hunting helps bust malicious insiders

Managed threat hunting services can help take some of the pressure off security operations centres and help ensure potential breaches don’t escalate into something far worse. We explore one such case with a happy ending
May 29, 2020 29 May'20
Test and Trace has not passed data protection impact assessment

Public Health England failed to complete the required impact assessment before launching the Covid-19 Test and Trace programme
May 28, 2020 28 May'20
Public Health England to keep contact-tracing data for 20 years

PHE will retain the data it collects via the NHS Test and Trace programme for 20 years
May 27, 2020 27 May'20
Enterprise clouds hammered by cyber attacks during pandemic

Remote workers logging onto enterprise cloud service accounts are an easy access point for attackers, says McAfee
May 27, 2020 27 May'20
Fears contact-tracing app will open the floodgates for cyber criminals

Study of UK consumers reveals worries over an uptick in cyber crime and a lack of trust in government
May 26, 2020 26 May'20
The Security Interviews: Temper tantrums ahead as GDPR enters its terrible twos?

On the General Data Protection Regulation’s second birthday, Tim Hickman, a data protection lawyer and partner at White & Case LLP, discusses the regulation’s teething troubles and assesses how best to maintain optimum compliance
May 22, 2020 22 May'20
EasyJet to be sued over customer data breach

If successful, airline’s potential liability for the loss of millions of customer records could be as high as £18bn
May 22, 2020 22 May'20
Covid-19 will leave organisations exposed to higher cyber risks

Hacking attacks and phishing emails could become the new norm, according to research by the World Economic Forum
May 22, 2020 22 May'20
Coronavirus: How MyIX is keeping Malaysians connected

Malaysia’s MyIX internet exchange has been classed as critical national infrastructure, with member telcos adding more capacity to meet the surge in demand for internet services
May 20, 2020 20 May'20
Personal devices putting Singapore employers at risk

More than half of Singapore respondents to a CrowdStrike-commissioned survey believe their devices are only somewhat secure against advanced cyber threats
May 20, 2020 20 May'20
Responsible Cyber acquires Secucial in S$7m deal

Singapore startup Responsible Cyber plans to bolster its Immune platform with access control management capabilities, and sets out to expand its global footprint
May 19, 2020 19 May'20
Cancelled NCSC CyberUK event gets green light for 2021

The NCSC’s popular CyberUK event has been rescheduled to next year, and will again take place in Newport in south Wales
May 18, 2020 18 May'20
Why a pandemic-specific BCP matters

Many organisations still do not have scenario-specific business continuity plans, which are helpful when the situation requires a customised response, such as a pandemic, according to Forrester
May 14, 2020 14 May'20
China targeting Covid-19 researchers through IT suppliers, claims US

The US CISA says it is seeing targeting and attempted network compromise of Covid-19 research centres by China
May 13, 2020 13 May'20
Report reveals inadequate cyber security at Schiphol Airport

A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport
May 13, 2020 13 May'20
Nation state APT groups prefer old, unpatched vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have published details of the most commonly exploited vulnerabilities of recent years, and there are some “classics” on the list
May 13, 2020 13 May'20
Microsoft fixes 16 critical vulnerabilities on Patch Tuesday

The trend towards mammoth Patch Tuesdays continues as Microsoft fixes 111 vulnerabilities
May 12, 2020 12 May'20
Maze ransomware attack will cost Cognizant at least $50m to $70m

Cognizant’s clients cut off the IT supplier’s access to their networks to contain a Maze ransomware attack – effectively putting projects on hold
May 11, 2020 11 May'20
Four in 10 Australians will share GPS data for alerting

Amid the Covid-19 pandemic, 40% of Australians are likely to share GPS data with the government to facilitate alerting, new study finds
May 04, 2020 04 May'20
IT Priorities 2020: Compliance and risk are top security concerns

When it comes to security, buyers are prioritising solutions and services that address compliance issues, risk management and data protection, according to the Computer Weekly/TechTarget IT Priorities 2020 study
April 29, 2020 29 Apr'20
Coronavirus: GCHQ gets access to NHS data to beef up security

Health secretary gave GCHQ emergency powers to obtain information relating to the security of its networks and IT systems at the beginning of April, it has emerged
April 28, 2020 28 Apr'20
Under the spotlight, video apps rush to strengthen security

Most popular videoconferencing applications now meet Mozilla’s minimum security standards, with fierce competition and public pressure driving rapid improvement
April 28, 2020 28 Apr'20
Almost half of security pros being redeployed during pandemic

Close to half of cyber security professionals say they have been taken off some or all of their security duties to focus attention elsewhere during the Covid-19 coronavirus pandemic
April 27, 2020 27 Apr'20
Julian Assange extradition hearing postponed amid coronavirus lockdown

Julian Assange’s lawyers say they have been unable to communicate or share legal documents with the WikiLeaks founder to enable them to prepare a defence in time for a planned extradition hearing in May
April 27, 2020 27 Apr'20
Microsoft patches .gif file vulnerability in Teams

Vulnerability could have enabled cyber criminals to use a malicious .gif file to scrape user data and take over Teams accounts
April 23, 2020 23 Apr'20
Ransomware-stricken Travelex up for sale

Travelex’s parent Finablr is washing its hands of the ransomware-stricken forex provider as it struggles with the twin shocks of the Covid-19 pandemic and a developing fraud scandal
April 23, 2020 23 Apr'20
Zoom to roll out fresh cyber security updates

New features include support for advanced AES 256-bit encryption
April 22, 2020 22 Apr'20
Coronavirus: Cyber criminals may be changing tactics

Cyber criminals “may soon shift to heavier exploitation of footholds established through phishing and other scams”, warns Cyber Threat Coalition
April 21, 2020 21 Apr'20
Coronavirus: HMRC job retention scheme targeted by cyber criminals

The UK government’s scheme to pay furloughed employees 80% of their wages is being targeted by cyber criminals
April 20, 2020 20 Apr'20
IT services company Cognizant warns customers after ‘Maze’ ransomware attack

US IT services company Cognizant alerts customers after the Maze ransomware group launches a cyber attack
April 20, 2020 20 Apr'20
Zoom and WebEx users targeted by credential stealing attempts

Videoconferencing apps such as Zoom and Cisco’s WebEx are being targeted by cyber criminals trying to steal users’ personal data
April 20, 2020 20 Apr'20
Dutch organisations address business email compromise fraud

Public-private partnership in the Netherlands works to break the chains used by fraudsters to carry out BEC attacks
April 17, 2020 17 Apr'20
Coronavirus: Security certification body puts exams online

Candidates for certification by the International Association of Privacy Professionals will now be able to sit their exams remotely
April 16, 2020 16 Apr'20
Check Point sounds alarm over double extortion ransomware threat

Researchers say double extortion ransomware attacks are likely to increase in frequency, and warn organisations to be on guard
April 16, 2020 16 Apr'20
NHS Wales to get free security services during coronavirus pandemic

NHS Wales Informatics Services enlists Thales to help it face down security threats and let its teams focus on the Covid-19 coronavirus crisis
April 16, 2020 16 Apr'20
Coronavirus: Cyber attacks on banks seen spiking, says Carbon Black

VMware’s Carbon Black observes a spike in cyber attacks on financial services organisations
April 16, 2020 16 Apr'20
Coronavirus: Indian IT sector takes hit

India’s IT market will see slower growth this year though opportunities abound in artificial intelligence and cyber security
April 15, 2020 15 Apr'20
Coronavirus: ICO temporarily relaxes regulatory approach

The Information Commissioner’s Office sets out a revised approach to its regulatory duties during the Covid-19 coronavirus pandemic
April 15, 2020 15 Apr'20
Coronavirus: Standard Chartered bans employees from Zoom

Standard Chartered is the first bank to have instructed its staff to refrain from using Zoom
April 15, 2020 15 Apr'20
Coronavirus: Researcher finds security vulnerability in Slack

Some common assumptions about the security of cloud-based messaging platform Slack may not be entirely accurate, says an Alien Labs researcher
April 15, 2020 15 Apr'20
Microsoft patches 19 critical bugs in another heavy Patch Tuesday

The volume of vulnerabilities being uncovered by Microsoft remains high, with more than 100 fixes pushed out in April’s Patch Tuesday
April 14, 2020 14 Apr'20
Coronavirus: Zoom user credentials for sale on dark web

IntSight researchers say they have found a database containing thousands of Zoom usernames and passwords being sold on the dark web
April 10, 2020 10 Apr'20
Coronavirus: Warning over surge in Zoom security incidents

Check Point researchers have observed a surge in suspicious Zoom domains as cyber criminals target popular remote working and collaboration tools
April 09, 2020 09 Apr'20
Coronavirus: Zoom restricted or banned at multiple organisations

Use of videoconferencing tool has been banned at Google and in parts of the German and US governments