News

Endpoint security

• March 31, 2020 31 Mar'20

  Too late to protect online privacy, say Brits

  Most UK consumers are concerned about data privacy, but think it’s too late to do much about it, according to a report

• March 31, 2020 31 Mar'20

  Houseparty denies hack as credential stuffing attacks spread

  Social media service denies its service has been hacked, and is offering a million-dollar bounty to anybody who can prove otherwise

• March 27, 2020 27 Mar'20

  Lorca calls on security scaleups to tackle coronavirus challenge

  Lorca innovation programme has launched an open call for its next cohort of cyber security scaleups, with a timely focus on coronavirus challenges

• March 26, 2020 26 Mar'20

  Coronavirus: What are the latest free cyber security offers?

  We round up the latest free offers on cyber security products and services being made available during the Covid-19 coronavirus crisis

• March 26, 2020 26 Mar'20

  Coronavirus: Be alert to rogue mobile apps exploiting outbreak

  Well-meaning developers are beginning to offer medical apps to monitor coronavirus symptoms and provide information on the pandemic. Opportunists and cyber criminals are not far behind them

• March 24, 2020 24 Mar'20

  Coronavirus: Contactless spending limit increased to fight pandemic

  Banking and financial services trade body UK Finance to increase spending limit for contactless payments to £45 from the start of April

• March 24, 2020 24 Mar'20

  Fake antivirus site promises coronavirus protection, delivers trojan

  Researchers at Malwarebytes have warned of an increasing volume of scam sites exploiting the Covid-19 coronavirus

• March 24, 2020 24 Mar'20

  Tekya auto-clicker malware exploits kids’ Android apps

  Google has removed multiple apps for children that were found to contain Tekya auto-clicker malware

• March 23, 2020 23 Mar'20

  Coronavirus: Kaspersky, Bitdefender make products free to NHS

  Kaspersky and Bitdefender have both made various products and services available free to healthcare customers as the Covid-19 coronavirus pandemic intensifies

• March 23, 2020 23 Mar'20

  Thousands of Netflix, Disney+ streaming accounts being stolen

  Proofpoint has urged users of streaming services to be alert to cyber criminals hijacking their accounts

• March 23, 2020 23 Mar'20

  Interview: Jamil Farshchi, CISO, Equifax

  Equifax CISO Jamil Farshchi discusses public cloud and why it’s not something IT security professionals should be afraid of

• March 22, 2020 22 Mar'20

  Cyber gangsters hit UK medical firm poised for work on coronavirus with Maze ransomware attack

  The Maze ransomware group has published personal and medical details of thousands of former patients of a London-based medical research company after a failed attempt to disable the firm's computer systems

• March 20, 2020 20 Mar'20

  Coronavirus: Sans Institute issues cyber security advice for parents

  With schools now shut across the UK, parents will bear more responsibility for keeping children safe online and educating them about online harms

• March 20, 2020 20 Mar'20

  Unpatched Zyxel storage devices co-opted into IoT botnet

  Owners of Zyxel network-attached storage devices are in danger of being hijacked by Mukashi, a descendant of the infamous Mirai botnet, if they don’t patch a critical vulnerability

• March 19, 2020 19 Mar'20

  IT Priorities 2020: ANZ firms to spend more on cyber security

  Over half of respondents in Australia and New Zealand plan to invest more in cyber security, especially in key areas such as data loss prevention

• March 19, 2020 19 Mar'20

  Volume of computer misuse incidents falling, says ONS

  Downward trend comes despite an overall increase in fraud, according to new statistics

• March 18, 2020 18 Mar'20

  Coronavirus now possibly largest-ever cyber security threat

  The cumulative volume of coronavirus-related email lures and other threats is the largest collection of attack types exploiting a single theme for years, possibly ever

• March 17, 2020 17 Mar'20

  Covid-19: NCSC issues secure remote working guidance

  With hundreds of thousands likely to be working remotely for some time, the UK’s NCSC has issued best practice guidance to enable security teams to support them

• March 17, 2020 17 Mar'20

  SentinelOne makes security platform free to support remote workers

  Endpoint protection platform service will be made free until 16 May 2020 to help protect remote workers during the Covid-19 coronavirus crisis

• March 17, 2020 17 Mar'20

  Covid-19: Three technology areas that CIOs must address

  CIOs will need to consider the IT measures that will be needed to support their organisations as the government ramps up its response to the coronavirus

• March 13, 2020 13 Mar'20

  Coronavirus-linked hacks likely as Czech hospital comes under attack

  The world of cyber security is on high alert to heightened vulnerabilities as the spread of the Covid-19 coronavirus changes daily life across Europe

• March 12, 2020 12 Mar'20

  Cookie-stealing trojans found lurking on Android phones

  Kaspersky discovers two new Android malware modifications that could give hackers control of their victims’ social media accounts

• March 12, 2020 12 Mar'20

  APAC remains hotbed for digital transformation

  Nearly half of organisations in the Asia-Pacific region see digital transformation as their top priority, followed by cloud infrastructure deployment and artificial intelligence, survey finds

• March 11, 2020 11 Mar'20

  Microsoft locks down new vulnerability with EternalBlue echoes

  Microsoft has moved to get ahead of a serious remote code execution vulnerability in Microsoft Server Message Block 3.1.1, which was accidentally disclosed then missed in its March Patch Tuesday update

• March 11, 2020 11 Mar'20

  Microsoft fixes 26 critical vulnerabilities in another heavy Patch Tuesday

  March’s Patch Tuesday is another big one for Microsoft, addressing 115 vulnerabilities, 26 of them critical

• March 10, 2020 10 Mar'20

  Schoolgirl security experts prepare to do battle

  The finals of the CyberFirst Girls contest will take place on 16 March as the culmination of the NCSC’s annual competition to unearth future security talent

• March 10, 2020 10 Mar'20

  Hacking community targeted by cyber criminals in new trojan campaign

  Cybereason’s Nocturnus threat research team has uncovered a cyber criminal campaign that weaponises popular hacking tools

• March 05, 2020 05 Mar'20

  Boots and Tesco loyalty card schemes plagued by security issues

  High-street retailers deal with fraudulent attempts to access the accounts of thousands of customers

• March 04, 2020 04 Mar'20

  F-Secure reports a steep rise in hacking attempts

  An increase in distributed denial of service attacks pushes up the volume of identified rogue internet traffic to almost three billion

• March 03, 2020 03 Mar'20

  Horangi and Tokio Marine team up on cyber security services

  Singapore-based Horangi will provide penetration testing, among other cyber security services, to Tokio Marine Insurance Singapore’s cyber risk insurance clients

• March 03, 2020 03 Mar'20

  NCSC issues smart camera security guidance to protect consumers from unauthorised snoops

  Government’s latest push to safeguard users of in-home connected devices sees National Cyber Security Centre issue guidance to help consumers tighten up security of smart cameras and baby monitors

• March 02, 2020 02 Mar'20

  The Security Interviews: Inside the world of bug bounties

  You may not make a million as a bug bounty hunter, but you might help remove some of the stigma that persists around cyber security, says HackerOne’s Shlomie Liberow

• February 25, 2020 25 Feb'20

  Google warns users not to mess with Huawei devices

  Google tells users of Huawei devices to try to avoid bypassing controls preventing them from loading its apps

• February 25, 2020 25 Feb'20

  The Security Interviews: Gil Shwed’s 10-year vision for security

  Check Point founder Gil Shwed discusses his new Infinity Next concept and how he plans to remodel the world of cyber security in the next 10 years

• February 24, 2020 24 Feb'20

  McAfee buys Light Point to enhance web browser protection

  Acquisition of Light Point Security will extend the capabilities of multiple McAfee products

• February 24, 2020 24 Feb'20

  Open security group unveils common OpenDXL language

  Open Cybersecurity Alliance announces the availability of OpenDXL Ontology, the first open source language for connecting disparate security tools through a common messaging framework

• February 24, 2020 24 Feb'20

  Cisco goes all-in on security integration with SecureX platform

  CISOs are struggling to stitch together disparate cyber security products and services – Cisco believes its cloud-native SecureX platform will change their working lives for the better

• February 20, 2020 20 Feb'20

  Facilities firm ISS World crippled by ransomware attack

  An apparent ransomware attack has compromised some IT and email systems at Danish facilities firm ISS World

• February 18, 2020 18 Feb'20

  Girlguiding hosts interactive cyber security workshop

  100 Guides from South West England took part in an NCSC event to learn more about security fundamentals

• February 17, 2020 17 Feb'20

  Australians more savvy about cyber security

  More Australians look out for signs of security features such as SSL encryption even as they remain sceptical of the data protection capabilities of small businesses

• February 17, 2020 17 Feb'20

  Ex-soldiers to become ethical hackers

  A new programme will give armed forces veterans in Scotland a grounding in cyber security skills, including penetration testing and ethical hacking

• February 12, 2020 12 Feb'20

  Internet Explorer zero day among 99 Patch Tuesday problems

  After an eventful January Patch Tuesday that marked the end of support for Windows 7, the February 2020 update is another whopper, fixing close to 100 vulnerabilities

• February 11, 2020 11 Feb'20

  Mac-based security threats outpacing Windows

  Security threats targeting Apple endpoints are growing more quickly than those targeting Windows machines, according to Malwarebytes

• February 05, 2020 05 Feb'20

  Darktrace signs to McLaren for 2020 F1 season

  McLaren Racing has enlisted Darktrace to become its official artificial intelligence cyber security partner

• February 05, 2020 05 Feb'20

  Scammers using fake PayPal emails stole over £1m in the UK in last quarter

  Fraudsters tricked Brits into sending over £1m worth of goods to them that they hadn't paid for

• February 05, 2020 05 Feb'20

  Web app ubiquity gives cyber criminals new opportunities

  The popularity and ubiquity of web-based apps such as Office 365 and Salesforce is a temptation too good to miss for cyber criminals

• February 05, 2020 05 Feb'20

  Check Point pledges end to security updates

  Check Point’s Gil Shwed expands on a vision for the next 10 years of cyber security, which he calls Infinity Next

• February 05, 2020 05 Feb'20

  IoT network flaw left Philips Hue bulbs open to attack

  Vulnerabilities in the ZigBee internet of things networking protocol have left market-leading smart devices, including Philips Hue lightbulbs, open to exploitation

• February 04, 2020 04 Feb'20

  Acronis CEO bullish as specialist goes beyond backup

  Acronis is set to launch Cyber Protect as it rides a wave of confidence based on increasing revenues and investor funding. Will the backup-plus-cyber protection calculation pay off?

• February 03, 2020 03 Feb'20

  NHS adds supplier security audits to procurement platform

  A new feature in the NHS’s Edge4Health procurement platform will help NHS suppliers improve their cyber security posture and NHS organisations make better buying decisions

• January 30, 2020 30 Jan'20

  NCSC launches study on cyber security diversity

  The UK’s National Cyber Security Centre wants to improve the diversity of the cyber security sector

• January 29, 2020 29 Jan'20

  UK cyber security sector worth more than £8bn

  The UK’s cyber security industry employs 43,000 full-time workers, and contributed nearly £4bn to the UK economy in 2019, according to DCMS

• January 29, 2020 29 Jan'20

  NHS suffers fewer ransomware attacks, but threat persists

  Ransomware attacks against the NHS have tapered off dramatically, according to statistics obtained under FoI legislation, but this does not mean the threat has diminished

• January 27, 2020 27 Jan'20

  UK in catch-22 decision over Huawei security

  The UK’s final decision on whether to permit mobile operators to use Huawei equipment is expected imminently, and its decision will have ramifications far beyond the technology sphere

• January 27, 2020 27 Jan'20

  Government tightens law around IoT cyber security

  New legislation developed by DCMS and the NCSC may help guarantee the security and privacy of users of consumer IoT devices

• January 27, 2020 27 Jan'20

  SANS Institute calls on Manchester security pros

  Manchester will play host to a week-long cyber security training event during February

• January 24, 2020 24 Jan'20

  NHS alerted to severe vulnerabilities in GE health equipment

  A series of vulnerabilities in patient monitoring equipment manufactured by General Electric could have left patient data exposed in hospitals around the world, including the UK

• January 24, 2020 24 Jan'20

  Milan hosts Cisco’s first European security innovation unit

  Cisco has cut the ribbon on its first Cyber Security Co-Innovation Centre in Europe, at Milan’s Leonardo da Vinci Science and Technology Museum

• January 23, 2020 23 Jan'20

  Seven projects funded to explore CAV security

  The winners of the Cyber Securities Feasibility Studies contest, exploring cyber security for self-driving cars, have been revealed

• January 23, 2020 23 Jan'20

  End-user security ignorance laid bare in new report

  Proofpoint’s 2020 State of the Phish report highlights an urgent need for better user training and reporting

• January 22, 2020 22 Jan'20

  Citrix releases IoC scanner for ADC and Gateway vulnerabilities

  As patches for its compromised NetScaler ADC and Gateway products begin to roll out, Citrix enlists FireEye Mandiant to develop an indicator of compromise scanner for end-users

• January 21, 2020 21 Jan'20

  5G builders test vulnerabilities in Finnish hackathon

  University hackathon puts 5G security to the test as new wireless technology’s roll-out nears

• January 17, 2020 17 Jan'20

  App developers sue Facebook over ‘anti-competitive conduct’

  Lawsuit is based on leaked internal Facebook documents obtained and published by Computer Weekly and NBC last year

• January 17, 2020 17 Jan'20

  Emotet reinvigorated after Christmas break

  The high-volume Emotet campaign is back in action after the Christmas holidays, and is just as dangerous as ever

• January 16, 2020 16 Jan'20

  A quarter of users will fall for basic phishing attacks

  Phishing emails that appear to be security alerts are the most effective method of compromise, says KnowBe4

• January 15, 2020 15 Jan'20

  Lorca announces new cohort of 20 security scaleups

  20 scaleups will focus their attention on automation, zero trust and supply chain security

• January 15, 2020 15 Jan'20

  Last Windows 7 patch updates critical remote desktop flaw

  It is no longer being supported with free updates, but Microsoft's final Patch Tuesday for Windows 7 fixes a major flaw in the 10-year-old operating system

• January 15, 2020 15 Jan'20

  LGBTQ+ social app Grindr accused of breaching GDPR

  Norwegian Consumer Council files complaints about LGBTQ+ social networking app, alleging it is in breach of the General Data Protection Regulation

• January 15, 2020 15 Jan'20

  Threat landscape grew in complexity in 2019, no respite in sight

  Check Point’s annual state of security report shares some 2019 trends and looks ahead to 2020

• January 14, 2020 14 Jan'20

  Two-thirds of UK healthcare organisations breached last year

  The majority of healthcare organisations in the UK experienced a cyber security incident during 2019, with almost half the result of viruses and malware introduced on third party devices

• January 14, 2020 14 Jan'20

  Researchers find cryptojacker hiding in Wav audio file

  Victim network was compromised by obfuscated malware hiding a Monero cryptominer, lurking inside a Wav audio file

• January 14, 2020 14 Jan'20

  Cyber criminals spend three months lurking in target networks

  Cyber criminals are spending longer hiding in target networks before launching their attacks, as more organised groups turn to business disruption to achieve their objectives

• January 14, 2020 14 Jan'20

  Turn the end of Windows 7 support into a security advantage

  CISOs can take advantage of the end of support for Microsoft Windows 7 by making the case for more investment in cyber security

• January 14, 2020 14 Jan'20

  Citrix NetScaler vulnerabilities won’t be patched until end of January

  Some vulnerabilities identified in Citrix products will not be fully patched until the end of January 2020

• January 13, 2020 13 Jan'20

  Sextortion campaign hits Nest home security cameras

  Owners of Google’s Nest home security cameras are being targeted in a sextortion scam by criminals playing on fears over IoT security

• January 10, 2020 10 Jan'20

  National Lottery hacker jailed for nine months

  Small-time cyber criminal jailed for his role in a cyber attack on lottery operator Camelot that netted him just £5

• January 09, 2020 09 Jan'20

  Retail group Dixons Carphone fined £500,000 over data breach

  Dixons Carphone receives maximum possible pre-GDPR fine from the ICO following a 2018 data breach

• January 09, 2020 09 Jan'20

  Don’t become the next Travelex: Get ready for ransomware

  With Travelex’s IT still in disarray and banks and travellers left without access to funds more than a week after it was hit by a ransomware attack, we ask what others can learn from the foreign exchange services company’s response to the incident

• January 08, 2020 08 Jan'20

  TikTok video-sharing app left user data exposed

  Check Point uncovered serious vulnerabilities in the TikTok video-sharing app that left users exposed

• January 07, 2020 07 Jan'20

  Broadcom flogs Symantec enterprise security unit to Accenture

  Acquisition is set to make Accenture a global leader in managed cyber security services

• December 24, 2019 24 Dec'19

  Top 10 cyber crime stories of 2019

  Here are Computer Weekly’s top 10 cyber crime stories of 2019

• December 23, 2019 23 Dec'19

  Top 10 cyber security stories of 2019

  Here are Computer Weekly’s top 10 cyber security stories of 2019

• December 20, 2019 20 Dec'19

  Finnish government supports local authorities in cyber security initiative

  The Finnish government has committed resources to a cyber security project aimed at local authorities

• December 17, 2019 17 Dec'19

  Group-IB CEO talks up global threat landscape

  Public attribution of cyber attacks could backfire while a global cyber norms framework won’t emerge until a catastrophic incident occurs, says the head of Singapore-based Group-IB

• December 16, 2019 16 Dec'19

  Barco fixes ClickShare wireless flaw, but users still at risk

  Supplier patches a major vulnerability in its popular ClickShare wireless presentation system with a firmware upgrade, but experts warn that users are not out of the woods yet

• December 13, 2019 13 Dec'19

  Alarm bells ring, the IoT is listening

  With Christmas bearing down on us, a series of vulnerability disclosures has drawn attention to the parlous state of IoT security, and serves as a timely warning to people planning to buy smart devices as gifts

• December 09, 2019 09 Dec'19

  Public sector still losing user devices in high numbers

  The Ministry of Justice has lost 354 smartphones, PCs, laptops and tablets in the past 12 months, according to a Freedom of Information request, and other government departments are in the same boat

• December 09, 2019 09 Dec'19

  Jailed hacker ordered to pay back £270k

  An Essex man jailed in April over malware offences dating back years has been ordered to pay back the profits of his crime spree, and sell valuable assets

• December 09, 2019 09 Dec'19

  China bans foreign computing kit from government contracts

  All government offices and public institutions must eliminate foreign hardware and software within three years, according to a leaked directive dubbed 3-5-2

• December 06, 2019 06 Dec'19

  How commodities firm ED&F Man solved its threat detection challenges

  After a minor server breach, leading commodities trader turned to Vectra’s Cognito service to expose hidden threats, spot privilege misuse, and conduct conclusive investigations

• December 06, 2019 06 Dec'19

  Dutch government must facilitate and coordinate a broad eID system

  The Dutch government should push for an electronic ID system for its citizens that works across the public and private sectors, according to a report

• December 05, 2019 05 Dec'19

  Aviatrix VPN vulnerability left user endpoints wide open

  Immersive Labs has disclosed a serious vulnerability in VPN supplier Aviatrix’s enterprise client that could have granted hackers elevated user privileges across enterprise targets

• December 05, 2019 05 Dec'19

  Hackers primed to exploit 5G to Wi-Fi handover flaws

  Warning that attackers will find new vulnerabilities to access voice and data on 5G mobile phones as carriers hand off calls and data to Wi-Fi networks to save bandwidth

• December 04, 2019 04 Dec'19

  Black Hat Europe: Red teams and blue teams must evolve in the 2020s

  The red team versus blue team dichotomy is somewhat arbitrary and risks pigeonholing skilled security professionals into certain roles, says Facebook’s Amanda Rousseau

• December 03, 2019 03 Dec'19

  Biometrics to enable $2.5tn of mobile payments by 2024

  Juniper Research study predicts that biometric technology will be present on 90% of smartphones in five years’ time

• December 02, 2019 02 Dec'19

  Top Android apps at risk from StrandHogg vulnerability

  Researchers at Promon say all of the 500 most-downloaded Android apps are at risk from a newly discovered vulnerability

• November 29, 2019 29 Nov'19

  Cyber criminal RAT busted by cops

  Police forces around the UK have arrested nine people as part of an international operation targeting users of a remote access trojan

• November 25, 2019 25 Nov'19

  Conservatives propose national cyber crime force

  Manifesto also says Tories would “empower the police to safely use new technologies like biometrics and artificial intelligence, along with the use of DNA, within a strict legal framework”

• November 20, 2019 20 Nov'19

  Mimecast blocked 99 billion suspicious emails in third quarter

  Latest threat intelligence report reveals the scale of the threat posed by malicious emails, with the transport, legal and financial sectors hit hardest

• November 20, 2019 20 Nov'19

  Carbon Black to open Australia datacentre in 2020

  Australia datacentre comes on the heels of VMware’s acquisition of Carbon Black and will serve organisations with data sovereignty requirements