News

Hackers and cybercrime prevention

June 21, 2019 21 Jun'19
Parents don’t know enough about cyber careers

Research by the SANS Institute finds that while parents are aware of cyber security, they don’t know enough to encourage their children into cyber roles
June 21, 2019 21 Jun'19
Small business not necessarily weakest security link

Small businesses may not be the weakest link in the supply chain after all, with a lack of skills and best practices being bigger factors, a study by (ISC)² reveals
June 20, 2019 20 Jun'19
Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work
June 20, 2019 20 Jun'19
Enterprises challenged with security basics

Visibility, security tool overload and manual reporting are cited as top concerns by UK security leaders, a report reveals

June 20, 2019 20 Jun'19
UK to launch security standard for surveillance cameras

The UK is launching the world’s first voluntary cyber security standard and compliance certification mark for the manufacturers of surveillance cameras
June 20, 2019 20 Jun'19
Most mobile apps vulnerable to malware

iOS and Android apps equally vulnerable to being exploited remotely by malware, report reveals
June 19, 2019 19 Jun'19
IoT Security Foundation publishes smart building whitepaper

The IoT Security Foundation has published a guide on security for smart buildings to highlight key issues and gather feedback to inform future guidance for industry stakeholders
June 19, 2019 19 Jun'19
Converged security takes centre stage at IFSEC

The importance and benefits of combining physical and cyber security was underlined in the opening session of the 2019 IFSEC security conference
June 18, 2019 18 Jun'19
Singapore faced fewer cyber threats in 2018

Despite the fall in the number of common cyber threats last year, Singapore will continue to face advanced persistent threats, CSA warns
June 17, 2019 17 Jun'19
DevSecOps is key to uniting opposing forces

Unifying DevOps and security teams with the aid of automation will bring harmony and added business benefits, says systems engineer

June 17, 2019 17 Jun'19
Asco breaks silence on ransomware attack

A week after reportedly being hit by a ransomware attack, Belgium-based mechanical equipment manufacturer Asco has finally provided some details
June 17, 2019 17 Jun'19
Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors
June 14, 2019 14 Jun'19
Innovation drives Nominet to cyber security

Embracing an innovation strategy for a mature organisation led domain name registry Nominet to found a cyber security business based on its core expertise, its CEO tells London Tech Week
June 13, 2019 13 Jun'19
UK firms need to address risky user habits

McAfee calls for companies to ramp up their security culture and improve the integration of technical security controls to minimise exposure from workers
June 13, 2019 13 Jun'19
Facebook London hiring spree focuses on tackling online harms

Facebook is hiring for 500 tech jobs in the capital in the next six months, with a particular focus on seeking out and clamping down on malicious content and fake accounts, and curbing other harmful behaviour on its platforms
June 13, 2019 13 Jun'19
AI-enabled cyber attacks a reality soon, warns Mikko Hypponen

Technology continues to shape human conflict and artificial intelligence will be no exception, so business needs to up its ability to detect attacks and respond, says security expert
June 12, 2019 12 Jun'19
Operational technology security improving, but attack surface continues to grow

Critical national infrastructure providers and others are improving cyber security capabilities around industrial control systems, but the cyber threat remains high and continues to evolve, a study shows
June 11, 2019 11 Jun'19
Most code-signing processes insecure, study shows

The majority of organisations are failing to enforce security for code-signing processes, providing opportunities for cyber criminals, a survey reveals
June 11, 2019 11 Jun'19
MP brands Huawei exec a ‘moral vacuum’ as operators demand 5G clarity

Huawei chief security officer John Suffolk faces tough questions from parliament’s Science and Technology Select Committee over the firm’s links to the Chinese government
June 11, 2019 11 Jun'19
Implementing Dmarc a top priority for UK

Basic email security should be a top priority for UK firms, followed by reducing third-party web exposure and monitoring data flows leaving the enterprise, a Rapid7 study reveals
June 10, 2019 10 Jun'19
Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security
June 07, 2019 07 Jun'19
NotPetya offers industry-wide lessons, says Maersk’s tech chief

There are several key industry-wide lessons to be learned from the NotPetya attack in 2017, according to the information chief at one of the companies most heavily impacted
June 07, 2019 07 Jun'19
Misconfigured container services are a security risk

Researchers at Palo Alto Networks have released details of the scale of misconfigured and exposed container services putting organisations at risk of cyber attack
June 07, 2019 07 Jun'19
How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike
June 06, 2019 06 Jun'19
Weak cyber security top challenge, says NCSC chief Ciaran Martin

UK cyber security agency NCSC is focusing on practical support and making the internet and technology safer to use, but says the area that needs most attention is improving basic cyber security in firms, says agency chief
June 06, 2019 06 Jun'19
Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard
June 06, 2019 06 Jun'19
Legacy IT systems a significant security challenge

Information security professionals need to work closely with the business to identify critical legacy IT systems to ensure security risks are managed effectively, CISO tells Infosecurity Europe
June 06, 2019 06 Jun'19
Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe
June 05, 2019 05 Jun'19
London could be world cyber risk leader, says ex-Lloyd’s chief

Collaboration across the cyber insurance, technology and security organisations in London could make the capital a leading world centre on these topics, says former Lloyd’s of London boss
June 05, 2019 05 Jun'19
DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees
June 05, 2019 05 Jun'19
Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability
June 04, 2019 04 Jun'19
Businesses investing blindly in cyber security

Businesses need to find out what their real cyber risks and weaknesses are before investing in new technologies, says ethical hacker
June 04, 2019 04 Jun'19
Deterministic data-based AI key for security

AI-based cyber security systems have enormous potential, but under specific conditions that are essential for success, AI expert tells Infosecurity Europe
June 04, 2019 04 Jun'19
Cyber crime widely under-reported, Isaca study shows

Cyber crime, which is the top cyber threat to business, remains widely under-reported, and only a third of organisations are confident in their ability to detect and respond to threats, a study reveals
June 03, 2019 03 Jun'19
Australia’s Notifiable Data Breaches scheme drives compliance but issues remain

Australia’s data breach notification rules have largely been complied with, but some quarters are calling for more clarity on the reporting threshold and tougher action against errant firms
June 03, 2019 03 Jun'19
Business leaders failing to address cyber threats

Businesses are failing to address growing cyber threats as business leaders admit to knowledge gaps, a lack of resources and confusion about who is responsible for data breaches, a report reveals
May 31, 2019 31 May'19
Facebook loses bid to halt European court decision on EU-US data sharing

Irish Supreme Court dismisses attempt by Facebook to prevent the European Court of Justice considering the validity of US-EU data transfers, after Austrian lawyer Max Schrems argued that they put the privacy of EU citizens at risk
May 30, 2019 30 May'19
A lack of skills and ownership are top challenges to OT security

A lack of skills, visibility and clarity on which business function is responsible for securing operational technology are the biggest challenges to managing the risk, a study shows
May 30, 2019 30 May'19
2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals
May 29, 2019 29 May'19
Hackers targeting UK universities a threat to national security

Poorly defended UK university research that is mainly commissioned by government is a top target for hackers, putting national security at risk, a study reveals, underlining the need for better cyber security
May 29, 2019 29 May'19
Cyber weapons readily available to criminals, researchers warn

Security researchers have discovered an attack campaign infrastructure designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers
May 29, 2019 29 May'19
Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block
May 28, 2019 28 May'19
Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities
May 28, 2019 28 May'19
Dutch IT security firm dumps corporate structure

Boss of Netherlands-based Computest turns to self-management model to make company more nimble
May 24, 2019 24 May'19
Just over half of UK firms don’t have a cyber resilience plan

Many UK firms still lack cyber resilience and data protection capabilities covering email a year after the implementation of the GDPR aimed at improving personal data protection
May 23, 2019 23 May'19
IBM’s investment in automation pays off in GDPR’s first year

The first year of the EU’s General Data Protection Regulation has demonstrated the value of IBM’s investment in machine learning-based automation and the importance of having the right strategy and systems in place, according to the firm’s data ...
May 23, 2019 23 May'19
Lapse in LinkedIn security certificate update

A lapse in the update of LinkedIn’s security certificate has once again underlined the importance of keeping track to avoid disruptions and phishing attacks, and how even big players are failing to get it right
May 23, 2019 23 May'19
Police shut down Bestmixer bitcoin laundering service

The Bestmixer cryptocurrency laundering service has been shut down by Dutch anti-fraud police with support from Europol after a tip off by cyber security researchers at McAfee, significantly disrupting cyber criminal money flows
May 22, 2019 22 May'19
TalkTalk admits new failings in 2015 data breach notification

TalkTalk’s failure to notify all those affected by its 2015 data breach highlights the importance of data visibility so that breach notifications are fast and accurate – a key requirement of the GDPR
May 21, 2019 21 May'19
US grants Huawei stay of execution

US Commerce Department temporarily restores Huawei’s ability to maintain its existing networks and smartphone user base
May 21, 2019 21 May'19
Dutch lecturer researches the person behind the cyber criminal

Dutch academic is trying to get inside the mind of cyber criminals by understanding what makes them tick
May 21, 2019 21 May'19
Planned UK age verification checks risky for internet users

Proposed controversial online age verification checks could increase the risk of identity theft and other cyber crimes, warn security experts, who advise parents to set technological boundaries and ensure their families are aware of risks
May 21, 2019 21 May'19
Cyber security scholarships on offer in Belfast

Queen’s University Belfast is backing the cyber security sector with funding for master of science scholarships
May 20, 2019 20 May'19
Danske Bank launches initiative to help SME customers with cyber security

Danske Bank launches initiative to support the cyber security efforts of its SME customers
May 20, 2019 20 May'19
GDPR an opportunity to improve data systems and processes

A year after the official implementation of the GDPR, it is important to highlight the positive opportunities that compliance provides and the insights breach reports are providing, say Deloitte consultants
May 17, 2019 17 May'19
Identity custodians needed in digital era

Digital identity systems will fail if they do not take humans into account, warns identity innovator, suggesting that a ‘digital guardian’ could help overcome most of these challenges
May 17, 2019 17 May'19
GozNym bust underlines cyber crime threat

A criminal network using GozNym malware has been shut down in an international law enforcement operation, but others are still operating, underlining the need for vigilance, warns a security expert
May 16, 2019 16 May'19
Norwegian industry and state must combine to counter cyber threats

Norway has been targeted by two large ransomware attacks in recent months – and public and private organisations must react in a coordinated way
May 16, 2019 16 May'19
Fujitsu sets out to restore trust in technology

Trust in technology, how to recapture it, and how to ensure AI doesn’t overstep its bounds were the big messages on the opening day of Fujitsu Forum in Tokyo
May 15, 2019 15 May'19
Microsoft working to support decentralised identity

Microsoft is among the big tech players aiming to help enable personalisation of products and services without putting privacy at risk
May 15, 2019 15 May'19
Implement multifactor authentication, urges expert panel

Multifactor authentication should be a top priority for organisations to defend users from cyber attacks, coupled with zero-trust architecture and artificial intelligence-based technologies, says expert panel
May 14, 2019 14 May'19
APAC firms on the back foot in cyber security

Most Asia-Pacific organisations did not consider cyber security until after their digital transformation projects had begun, new survey finds
May 14, 2019 14 May'19
Spyware targets WhatsApp users

Social media platform issues update after it discovered a flaw being exploited by commercial spyware
May 13, 2019 13 May'19
National Crime Agency calls for additional funding to tackle 21st century crime

Organised criminal gangs represent the biggest cyber threat to the UK, and law enforcement has identified rogue servers hosted in the UK
May 13, 2019 13 May'19
Security standard for surveillance cameras set for launch

A long-overdue cyber security standard for the manufacturer of surveillance cameras is on track for an official launch in June
May 10, 2019 10 May'19
Key lessons from an ethical hacker

Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker
May 10, 2019 10 May'19
Dutch businesses not yet implementing NIS Directive

Little urgency to comply with the Network and Information Systems Security Act, which seeks to protect the Netherlands’ vital infrastructure and digital services from cyber attack
May 09, 2019 09 May'19
Northern Ireland generating cyber security knowledge and jobs

Northern Ireland is establishing itself as an international hub of cyber security research and innovation, providing growing employment opportunities
May 08, 2019 08 May'19
Some Australian firms still in the dark about cyber security

A report suggesting Australian firms are experiencing fewer cyber incidents has left its co-author perplexed with the findings
May 08, 2019 08 May'19
Cyber criminals targeting C-suite, DBIR shows

Executives and cloud-based services are gaining popularity as targets for cyber criminals, according to the latest data breach investigations report
May 07, 2019 07 May'19
Privileged access management moving to cloud

Survey shows nearly half of information security professionals are either planning to move privileged access management to the cloud or are exploring the possibility
May 06, 2019 06 May'19
AWS to power Australia’s 2021 online census

PwC Australia, one of two firms appointed by the government to run the next Census, will build and operate an online form and a website on Amazon Web Services
May 03, 2019 03 May'19
Zero trust: A 21st century security model

Traditional corporate security models date back to a time when there were fewer, lower-level threats, but a zero trust model is better suited to the 21st century, according to the originator of the idea
May 03, 2019 03 May'19
Norsk Hydro urges caution as it counts cost of cyber attack

Norwegian aluminium giant Norsk Hydro is urging partners to be cautious in the wake of a damaging ransomware attack in March as financial impact estimates come in above initial estimates
May 03, 2019 03 May'19
Police down two dark web markets

Europol-supported coordinated law enforcement approach across Europe and the US was key to operations’ success
May 02, 2019 02 May'19
Firms urged to embrace positive security trends to win cyber war

Modern cyber security challenges overshadow the information security successes of the past, but several positive trends are emerging as defenders come to grips with new threats, says Deloitte
May 02, 2019 02 May'19
Microservices introduce hidden security complexity, analyst warns

Microservice architecture – an approach to application development in which applications are built as a suite of modular services – simplifies development but complicates security, says KuppingerCole
May 02, 2019 02 May'19
Businesses unprepared for cyber breaches

Study shows many organisations lack IT security and operations basics, including visibility across their IT operations
May 02, 2019 02 May'19
Defence secretary sacked over Huawei leak

Defence secretary Gavin Williamson has been sacked after leaking confidential discussions over the use of Huawei networking equipment
May 01, 2019 01 May'19
BSA releases framework for secure software

Software industry advocacy group releases framework to facilitate flexible and comprehensive software security assessments
May 01, 2019 01 May'19
Get more proactive on cyber security, says ex Europol chief

Business needs to get more proactive, collaborative, resilient and analytical to manage cyber risks posed by cyber criminals down to acceptable levels, says former Europol chief
April 30, 2019 30 Apr'19
UK gears up for new laws on IoT security

The UK plans to introduce measures to require that basic cyber security features are built into internet-connected devices
April 30, 2019 30 Apr'19
Cyber criminals increase use of fileless attacks

Fileless attacks are increasingly popular with cyber criminals, while Russia and China top the league of nation state data exfiltrators, threat data shows
April 30, 2019 30 Apr'19
Most businesses vulnerable to supply chain cyber attacks

UK firms trail the leaders US and Germany in knowing the most about their partners’ cyber security practices, but most companies globally are in the dark about this growing source of vulnerabilities
April 30, 2019 30 Apr'19
Nearly half of UK IT pros report serious data breaches

Integration of security systems and employee training recognised as key ways to reduce the growing severity of data breaches
April 29, 2019 29 Apr'19
Fix the basics first, then worry about AI, advise experts

The freedom of the internet is at risk, with the cyber arms race and the industrialisation of hacking are set to continue as attackers move up the value chain to target trust mechanisms, threat experts predict
April 29, 2019 29 Apr'19
Australians lost half a billion dollars to scams in 2018

Most of the losses went to investment scams as tricksters found innovative ways to dupe victims into parting with their money
April 26, 2019 26 Apr'19
Top lessons from cyber attacks

Cyber security experts weigh in on lessons learned from cyber attack experiences, underlining that recovery capability is as important as defence
April 26, 2019 26 Apr'19
Huawei leak inquiry launched

Cabinet secretary Mark Sedwill has instituted an inquiry aimed at discovering who leaked confidential discussions about UK mobile operators’ use of Huawei in their future 5G networks to the press
April 26, 2019 26 Apr'19
GDPR cases drive bigger budgets for Nordic regulators

High-profile General Data Protection Regulation cases in Finland and Sweden have increased the workload for regulators, which are to receive an increase in funding
April 25, 2019 25 Apr'19
Public becoming more aware of privacy abuses and unethical tech

Widespread abuses of privacy, biometric information and artificial intelligence mean the internet is in poor health, but growing popular awareness of its problems gives some cause for hope, says the Mozilla Foundation
April 25, 2019 25 Apr'19
UK up for cyber challenge but work to be done, says minister

Lidington says National Cyber Security Strategy has “revolutionised the UK’s fight against cyber threats”
April 25, 2019 25 Apr'19
NCSC and ICO pledge to support data breach victims

The UK’s cyber security agency and privacy watchdog have agreed to work together to improve support for data breach victims and enhance cyber guidance
April 25, 2019 25 Apr'19
No final decision taken on Huawei 5G ban, government claims

Culture secretary tells MPs that a final decision on use of Huawei in UK 5G networks has not been taken, and says government is taking the leak of confidential discussions at the National Security Council very seriously
April 25, 2019 25 Apr'19
Cabinet Office addresses 5G security issue

Cabinet Office uses NCSC conference to lay out government’s approach to the security of 5G networks, as controversy grows around using equipment from Chinese supplier Huawei
April 25, 2019 25 Apr'19
NCSC looks to industry to scale Active Cyber Defence

The national cyber security agency is calling on wider government organisations as well as industry to help scale automated cyber attack blocking systems country-wide
April 24, 2019 24 Apr'19
NCSC to scale up intelligence sharing, says GCHQ director

The GCHQ director has outlined the agency’s cyber security mission in the third decade of the internet age at CyberUK, promising to scale up the sharing of declassified cyber intelligence with industry
April 23, 2019 23 Apr'19
Global intelligence agencies share UK stage for first time

Representatives of intelligence agencies from the Five Eyes alliance are to share a public platform in the UK for the first time at this year’s NCSC CyberUK conference
April 23, 2019 23 Apr'19
Casual collaboration comms pose security risk, survey shows

UK employees have a worryingly casual attitude to workplace communications, underling the need for employers to take steps to counter related cyber attack vulnerabilities
April 23, 2019 23 Apr'19
WannaCry hero pleads guilty, urges others to stay on ‘good side’

Briton hailed as WannaCry hero finally pleads guilty to charges of writing and distributing malware, but urges security researchers to stay away from the “dark side”