News

Data breach incident management and recovery

• November 17, 2018 17 Nov'18

  Credit card fraud in ANZ showing no signs of abating

  The value of fraudulent transactions more than doubled that of legitimate purchases during the third quarter this year

• November 16, 2018 16 Nov'18

  UK firms in the dark around the impact of cyber attacks

  UK firms have a long way to go in building the business resilience required to withstand cyber threats and other major disruptions, a study shows

• November 15, 2018 15 Nov'18

  Enterprises lack capability against persistent cyber attacks

  A report urges organisations to strengthen their cyber defence capabilities to pre-empt, detect and respond to post-breach attacks

• November 12, 2018 12 Nov'18

  Government considering dedicated internet regulator, says digital minister

  An upcoming white paper is likely to set out proposals for an internet regulator, a House of Lords committee has been told

• November 12, 2018 12 Nov'18

  Norway’s IT industry must tackle security vulnerabilities

  Report reveals growing threat posed by “hostile foreign actors” against Norway’s IT systems and critical national infrastructure

• November 02, 2018 02 Nov'18

  Facebook to appeal EU-US data transfer ruling in Irish Supreme Court

  Facebook will appeal a decision by the Irish High Court to refer questions over the legality of EU-US data transfers to the European Court of Justice in January, as the Dublin court rejects attempt by a UK IT expert to join the case

• October 30, 2018 30 Oct'18

  Australia’s data breaches are a ‘sign of naiveté’

  McAfee executive attributes Australia’s poor cloud security record to the lack of data protection measures amid “new and confusing” cloud configurations

• October 26, 2018 26 Oct'18

  British Airways data breach worse than thought

  British Airways has admitted that up to 185,000 more people than first thought may have had personal details compromised in August’s data breach

• October 24, 2018 24 Oct'18

  Sibos 2018: ‘Black swan’ cyber event is inevitable

  With security experts and bankers expecting a 9/11-style cyber event, deeper collaboration between companies and governments is necessary to identify emerging threats before they occur

• October 24, 2018 24 Oct'18

  Yahoo to pay at least $85m for data breach settlement

  Yahoo has agreed to a settlement in a class action lawsuit on behalf of 200 million consumers affected by a data breach in 2013

• October 24, 2018 24 Oct'18

  Datacentre glitches expose data loss risks

  A new study has highlighted the fragility of corporate datacentres and the very real risk of data loss

• October 18, 2018 18 Oct'18

  'Sealed cloud' promises better data security

  TÜV SÜD’s Singapore Sealed Cloud does not grant administrators access to data, reducing the possibility of hackers breaking into databases using compromised administrator credentials

• October 16, 2018 16 Oct'18

  APAC security spending tipped to reach new highs

  Security services will be the largest and fastest-growing slice of the overall security pie in the Asia-Pacific region

• October 16, 2018 16 Oct'18

  UK faces 10 cyber attacks a week as hostile states step up hacking, says NCSC

  The UK’s National Cyber Security Centre has thwarted more than 1,600 attacks over the past two years – many by hostile nation states

• October 12, 2018 12 Oct'18

  AI is no silver bullet for cyber security

  A security expert has called for businesses to manage the risks of adopting new technologies and improve their cyber hygiene, rather than see artificial intelligence as a panacea for their security woes

• October 11, 2018 11 Oct'18

  MEPs urge Facebook to roll out election fraud prevention measures

  Facebook is coming under pressure from European lawmakers to do more to prevent its user data from being misappropriated during elections

• October 10, 2018 10 Oct'18

  Detail of Dutch reaction to Russian cyber attack made public deliberately

  Four Russian intelligence officials were expelled from the Netherlands after an attempted hack on the global chemical weapons watchdog. The Dutch government has been open about the detail

• October 08, 2018 08 Oct'18

  ICO hits Heathrow Airport with £120,000 data breach fine over lost USB stick

  Information Commissioner’s Office fines airport after a member of the public came across a USB stick containing sensitive personal information about airport staff

• October 05, 2018 05 Oct'18

  GDPR case work swamps Denmark’s data protection agency

  The agency investigating alleged breaches of GDPR in Denmark is recruiting additional resources to cope with the increase in work

• September 27, 2018 27 Sep'18

  Norwegian state discusses vulnerabilities with IT sector

  Government is collaborating with the country’s IT industry to improve the availability of security expertise

• September 19, 2018 19 Sep'18

  Equifax fined by ICO for security failings

  The Information Commissioners Office has fined Equifax UK in relation to a data breach at its UK parent last year

• September 19, 2018 19 Sep'18

  IT sector advises Swedish government on elections and voting system

  Swedish IT secure is helping the government make election systems more secure and reduce external influence

• September 17, 2018 17 Sep'18

  Singapore government to start bug bounty programme

  Singapore’s bug bounty programme will help the authorities identify cyber blind spots and benchmark its defences against skilled hackers

• September 12, 2018 12 Sep'18

  NCSC issues core questions to help boards assess cyber risk

  The National Cyber Security Centre has published its first in a series of guidance for board members which highlights what businesses should be asking security teams

• September 12, 2018 12 Sep'18

  Two-thirds of emails not clean, says research

  Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research

• September 11, 2018 11 Sep'18

  British Airways data breach: Security researchers name suspects and query attack timeline

  Security researchers claim to have pinpointed the cause and perpetrators of the British Airways data breach, and also claim the attackers may have had access to its customer data for far longer than previously thought

• September 10, 2018 10 Sep'18

  Cyber criminals outspend businesses in cyber security battle

  Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result

• September 07, 2018 07 Sep'18

  BA praised for swift GDPR-aligned action on data breach

  British Airways has been praised for its swift response to a customer data breach, which could be the first test case under the EU’s GDPR and new UK GDPR-aligned data protection laws

• August 21, 2018 21 Aug'18

  New Zealand to run national cyber security exercise

  The island-nation will test the resilience of its critical infrastructure in November 2018, bringing together multiple agencies to protect assets of national significance

• August 14, 2018 14 Aug'18

  UK banks under pressure to improve downtime reporting under new FCA rules

  To make it easier for customers to compare and switch between current account providers, UK banks are under pressure to improve their reporting processes for downtime and security incidents

• August 12, 2018 12 Aug'18

  Over 146 billion records to be stolen over next five years

  The US will bear the brunt of data exfiltration efforts by cyber criminals, though Asia-Pacific nations such as Singapore will not be spared

• August 10, 2018 10 Aug'18

  Butlin’s warns of potential personal data breach

  Holiday camp chain blames cyber breach on a phishing attack, implying that attackers were able to steal user credentials to access customer data – and underlining the need for security awareness training

• August 08, 2018 08 Aug'18

  Australia calls for interventionist approach in new cyber agenda

  The Australian government is forming a cyber defence network comprising security agencies and private sector partners to support a more interventionist approach towards cyber security

• August 02, 2018 02 Aug'18

  GDPR harmonised with local laws in Nordic EU states

  Sweden provides an interesting challenge for the European Union’s data protection regulation due to its laws around freedom of press and free speech

• July 31, 2018 31 Jul'18

  Australia’s health sector reports most data breaches again

  In the first full quarter since Australia’s mandatory breach disclosure scheme came into effect, healthcare providers reported the most data breaches amid controversy over the national health record system

• July 29, 2018 29 Jul'18

  Burden of data protection rests on firms and governments

  A senior executive at Singapore’s Cyber Security Agency stressed the role of corporate data governance and government regulations in raising the bar on cyber security

• July 24, 2018 24 Jul'18

  Singapore public healthcare sector limits internet use

  Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system

• July 18, 2018 18 Jul'18

  Singapore to bolster threat intelligence sharing in financial sector

  Singapore’s Cyber Security Agency has partnered the Financial Services Information Sharing and Analysis Centre to glean cyber threat intelligence for the country’s financial industry

• July 17, 2018 17 Jul'18

  A third of organisations do not have a security expert, survey shows

  Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey

• July 12, 2018 12 Jul'18

  Brexit proposal calls for standards alignment and data sharing

  Although the government’s Brexit whitepaper focuses on curbing immigration, collaboration on cyber crime, data sharing and services are among the bargaining chips

• July 11, 2018 11 Jul'18

  Cloudian adds Storage Made Easy file-sync-and-share compliance

  Object storage maker adds file-sync-and-share with compliance filters from Storage Made Easy to restrict movement of potentially sensitive data between endpoints and datacentres

• July 09, 2018 09 Jul'18

  Inside one of the world’s largest bug bounty programmes

  Trend Micro’s Zero Day Initiative may be the top external supplier of software bug reporting for Microsoft and Adobe, but that does not mean it purchases every type of bug

• July 03, 2018 03 Jul'18

  NHS data breach caused details of 150,000 patients to be shared

  The NHS has inadvertently shared the confidential data of 150,000 patients over a three-year period due to a coding error in one of the most common GP IT systems

• June 26, 2018 26 Jun'18

  Norway’s National Security Agency warns IT industry about security obligations

  IT service providers serving organisations in Norway have received a timely reminder about their security obligations.

• June 19, 2018 19 Jun'18

  Singapore remains hotbed for cyber threats

  Singapore was a victim of advanced persistent threats, phishing and website defacements in 2017, according to the latest threat landscape report by the Cyber Security Agency

• June 18, 2018 18 Jun'18

  Singapore faced cyber attacks during Trump-Kim summit

  Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful

• June 12, 2018 12 Jun'18

  Investigators close Nokia extortion probe without finding a motive or making an arrest

  New details of €2m blackmail of Nokia in 2007 emerge as Finland’s NBI calls a halt to its investigation

• June 11, 2018 11 Jun'18

  Singapore career website hit by PageUp malware scare

  A Singapore government career website was among others affected by a malware attack on an Australian recruitment technology supplier

• June 04, 2018 04 Jun'18

  One-third of firms would pay ransoms rather than invest in security

  Report says businesses are still making the same mistakes, failing to make any progress in crucial areas such as cyber security awareness and preparedness

• May 24, 2018 24 May'18

  Grab outlines its approach to cyber security

  Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement