News

Business continuity planning

• May 03, 2023 03 May'23

  Cyber Action Plan for Wales launched

  The devolved Welsh government has set out four priorities in an action plan designed to foster cyber resilience, talent and innovation across the country

• May 02, 2023 02 May'23

  UK Cyber Security Council launches certification mapping tool

  Cyber careers body aims to offer clarity for professionals seeking to advance through security certification

• April 27, 2023 27 Apr'23

  Tenable opens playground for generative AI cyber tools

  A set of generative AI cyber tools designed to help security researchers in reverse engineering, debugging and other areas of work have been made available for the community to experiment with

• April 27, 2023 27 Apr'23

  Google Cloud seals bug that could have led to data breaches

  The Asset Key Thief vulnerability gave rise to multiple potential attack scenarios that could have impacted thousands of Google Cloud users, but has now been safely fixed

• April 25, 2023 25 Apr'23

  CISOs under-supported, under pressure, Trellix finds

  The vast majority of CISOs say they are finding it difficult to get sign-off on the resources they need to do their job

• April 25, 2023 25 Apr'23

  Almost three-quarters of cyber attacks involve ransomware

  Data from Sophos’s annual Active Adversary Report reveals that almost three-quarters of the cyber security incidents it responded to in 2022 involved ransomware

• April 21, 2023 21 Apr'23

  CyberUK 23: New advice on smart city security issued

  The NCSC and key allies have drawn up new guidance to help communities balance the cyber security risks involved with creating smart cities

• April 20, 2023 20 Apr'23

  Good Friday Agreement key to growth of Northern Ireland cyber hub

  Now 25 years since the historic Good Friday Agreement ended the Troubles, Northern Ireland has become a flourishing centre of cyber security excellence and has ambitions to grow further

• April 20, 2023 20 Apr'23

  New GovAssure cyber regime launches across UK government

  An enhanced cyber security regime is being put in place to better protect UK government IT systems from growing threats

• April 19, 2023 19 Apr'23

  UK plc sees fewer cyber breaches and attacks, but lacks resilience

  Latest government figures reveal UK businesses and charities reported lower volumes of cyber breaches and attacks over the past 12 months, but the statistics mask widespread underreporting and the true state of cyber readiness and resilience appears...

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC CEO calls for collaboration and warns against complacency

  NCSC boss Lindy Cameron kicked off the annual CyberUK conference in Belfast with a plea for collaboration and a warning against complacency

• April 19, 2023 19 Apr'23

  Global finance firms take part in NATO cyber attack simulation

  Global financial services organisations take part in NATO annual event which simulates cyber attacks on critical infrastructure

• April 19, 2023 19 Apr'23

  CyberUK 23: Alert over mercenary Russian threat to CNI

  Russian hacktivists supportive of their government’s war on Ukraine are turning their attention to disruptive or destructive attacks on critical infrastructure in the UK, the NCSC has warned

• April 18, 2023 18 Apr'23

  CyberUK 23: NCSC conference centres cyber collaboration

  The NCSC’s annual CyberUK conference gets underway in Belfast this week, with collaboration and cooperation high on the agenda

• April 18, 2023 18 Apr'23

  Focus on these three risky behaviours to boost cloud security

  Some 80% of cloud security alerts are triggered by just 5% of security rules. Security teams can substantially improve their resilience by zeroing in on a small set of risky behaviours, according to a report

• April 18, 2023 18 Apr'23

  UK presses on with post-Brexit data protection reform

  The revised version of the Data Protection and Digital Information Bill has had its second reading in Parliament as the government presses on with post-Brexit changes, but critics remain sceptical that the EU will be convinced to maintain the UK's ...

• April 17, 2023 17 Apr'23

  Charity data stolen in ransomware attack on supplier

  A number of charities in Ireland and the UK have had their data compromised following a ransomware attack on an IT supplier

• April 12, 2023 12 Apr'23

  April Patch Tuesday fixes zero-day used to deliver ransomware

  A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update

• April 12, 2023 12 Apr'23

  Gartner: Rebalance cyber investment towards human-centric elements

  Security decision-makers need to reprioritise their investment outlooks towards people, rather than technology, according to the latest market forecast from Gartner

• April 11, 2023 11 Apr'23

  Anne Keast-Butler named as new director of GCHQ

  The government has appointed current MI5 deputy director general Anne Keast-Butler to head signals and cyber agency GCHQ

• April 11, 2023 11 Apr'23

  KFC, Pizza Hut data stolen in January ransomware attack

  Yum!, the parent organisation behind KFC and Pizza Hut in the UK, has disclosed that employee data was accessed and exfiltrated in a January 2023 ransomware attack

• April 06, 2023 06 Apr'23

  IBM's Nataraj Nagaratnam on the cyber challenges facing cloud services

  Governments are introducing increasingly prescriptive data protection policies, but with organisations becoming ever more reliant on multiple cloud service platforms for essential business needs, how can they ensure they meet regulatory requirements?

• April 06, 2023 06 Apr'23

  Prioritise automated hardening over traditional cyber controls, says report

  A report from strategic risk specialist Marsh McLennan advises security buyers to funnel their budgets towards automated cyber security hardening techniques, saying they have a much better chance of reducing risk in a meaningful way

• April 06, 2023 06 Apr'23

  Clop ransomware booms in March as Fortra zero-day pays off for gang

  Backed by the threat actor tracked variously as Gold Tahoe and TA505, the Clop ransomware operation hit new ‘heights’ of activity last month, according to researchers

• April 05, 2023 05 Apr'23

  Quick-acting Rorschach ransomware appears out of nowhere

  Emergent Rorschach ransomware strain is highly advanced and quite unusual in its capabilities, warn researchers, who say they have been unable to link it to any other known strains

• April 05, 2023 05 Apr'23

  Italy’s ChatGPT ban: Sober precaution or chilling overreaction?

  Italy’s data protection authority issued a temporary ban on ChatGPT citing data protection concerns and alleged breaches of the GDPR. Is this a reasonable precaution, or a chilling restriction on personal freedoms?

• April 04, 2023 04 Apr'23

  Threat researchers dissect anatomy of a Royal ransomware attack

  Trellix researchers share the inside track on a Royal ransomware attack that hit one of its customers in late 2022

• April 04, 2023 04 Apr'23

  Over 90% of organisations find threat hunting a challenge

  Understaffed security teams and high levels of background noise are making basic security operations tasks a chore for defenders, according to a report

• March 30, 2023 30 Mar'23

  OSC&R supply chain security framework goes live on Github

  The OSC&R framework for understanding and evaluating threats to supply chain security has made its debut on Github to allow anybody to contribute to the framework

• March 30, 2023 30 Mar'23

  NCSC issues revised security Board Toolkit for business leaders

  National Cyber Security Centre calls on CEOs and senior business leaders to take a more hands-on approach to cyber resilience with the launch of revised board-level tools

• March 30, 2023 30 Mar'23

  Reactive approach to cyber procurement risks damaging businesses

  Too many organisations are following a reactive approach to cyber security, which WithSecure believes is stifling security teams ability to demonstrate value and align with business outcomes

• March 28, 2023 28 Mar'23

  Microsoft expands AI Copilot project into security realm

  New Microsoft service, Security Copilot, will supposedly expand the reach, speed and effectiveness of cyber teams

• March 28, 2023 28 Mar'23

  Apple security updates fix 33 iPhone vulnerabilities

  A larger-than-usual update to Apple’s mobile operating system fixes more than 30 distinct vulnerabilities, including two serious issues that may potentially affect device kernels

• March 28, 2023 28 Mar'23

  Inside Group-IB’s cyber security playbook

  A focus on threat intelligence, fraud protection and its work with Interpol has enabled Group-IB to compete against bigger rivals in the market

• March 28, 2023 28 Mar'23

  Europol warns cops to prep for malicious AI abuse

  In a report looking at how large language models can be used by criminals, Europol’s Innovation Lab calls on law enforcement agencies to prepare themselves for wide-ranging impacts on their work

• March 28, 2023 28 Mar'23

  Ethical hackers urged to respond to Computer Misuse Act reform proposals

  The deadline for submissions to the government’s consultation on reform of the Computer Misuse Act is fast approaching, and ethical hackers and security experts need to make their voices heard, says Bugcrowd

• March 24, 2023 24 Mar'23

  National Crime Agency sting operation infiltrates cyber crime market

  The UK National Crime Agency has tricked thousands of potential cyber criminals into registering with a fake website pretending to offer tools for creating DDoS attacks

• March 22, 2023 22 Mar'23

  Why Veeam thinks ransomware warranty payouts are unlikely

  Veeam Data Platform v12 offers a financial guarantee to customers that can’t restore after ransomware attacks, but the backup supplier is convinced it won’t be making many payouts

• March 22, 2023 22 Mar'23

  Government launches seven-year NHS cyber strategy

  The new Cyber Security Strategy for Health and Adult Social Care lays out a plan for promoting cyber resilience in the sector by 2030 to protect services and patients alike

• March 21, 2023 21 Mar'23

  Nordics move towards common cyber defence strategy

  Nordic countries agree to work together to improve their cyber defences amid increasing threat

• March 21, 2023 21 Mar'23

  How Mimecast thinks differently about email security

  Mimecast CEO Peter Bauer believes the company’s comprehensive approach towards email security has enabled it to remain relevant to customers for two decades

• March 21, 2023 21 Mar'23

  Hitachi Energy emerges as victim of Clop gang’s Fortra attack

  The power and energy division of Japanese conglomerate Hitachi has disclosed that it has fallen victim to a Clop cyber attack, but insists customer data is safe

• March 21, 2023 21 Mar'23

  Ransomware gangs harass victims to ‘bypass’ backups

  Analysis reveals how cyber criminal gangs are turning to extensive, targeted harassment campaigns to force victims to pay up, even if their backups are in good order

• March 20, 2023 20 Mar'23

  BBC cracks down on TikTok after review

  The BBC is asking staff not to install TikTok on corporate-owned devices without a justified business purpose, although its use will still be allowed to share media content with its audiences

• March 17, 2023 17 Mar'23

  UK TikTok ban gives us all cause to consider social media security

  The UK government’s ban on TikTok should give all organisations cause to look into what information social media platforms are collecting on us, and what they are using it for

• March 16, 2023 16 Mar'23

  BEC attacks doubled in 2022, outstripping ransomware

  Massive growth in the volume of Business Email Compromise or BEC attacks was linked to a surge in successful phishing campaigns, according to data from Secureworks

• March 16, 2023 16 Mar'23

  Mandiant: Dangerous MS Outlook zero-day widely used against Ukraine

  A zero-day vulnerability in Microsoft Outlook that was fixed in the March Patch Tuesday update has likely been actively exploited by Russian actors for a year or more, and its use will now spread rapidly

• March 15, 2023 15 Mar'23

  Microsoft patches Outlook zero-day for March Patch Tuesday

  A highly dangerous privilege escalation bug in Outlook is among 80 different vulnerabilities patched in Microsoft’s March Patch Tuesday update

• March 13, 2023 13 Mar'23

  MI5 to oversee new National Protective Security Authority

  The new National Protective Security Authority will address various national security threats including state-sponsored cyber espionage against UK targets

• March 13, 2023 13 Mar'23

  HSBC buys Silicon Valley Bank UK arm for £1 following collapse

  UK tech ecosystem welcomes government intervention to facilitate HSBC purchase after the collapse of SVB left many UK startups unable to access their deposits