News

Healthcare and NHS IT

• April 03, 2024 03 Apr'24

  RDP abused in over 90% of cyber attacks, Sophos finds

  Threat actors continue to see great success using simple, tried and tested methods, and many defenders are failing to do the basics

• March 29, 2024 29 Mar'24

  Organisations getting better at spotting identity fraud

  As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report

• March 27, 2024 27 Mar'24

  Ransomware gang leaks data stolen from Scottish NHS board

  Data stolen from an earlier attack on NHS Dumfries and Galloway has been leaked by a ransomware gang that claims to be in possession of much more content

• March 27, 2024 27 Mar'24

  HMRC’s online IR35 status checker tool CEST not updated in five years, FOI confirms

  Despite a previous pledge that HMRC’s IR35 online status checker tool will be continually updated as employment cases and tribunals occur, a freedom of information request confirms CEST has not been updated since October 2019

• March 27, 2024 27 Mar'24

  Cyber spies, not cyber criminals, behind most zero-day exploitation

  Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime

• March 26, 2024 26 Mar'24

  Shareholders win when businesses do better at cyber

  The more advanced a company’s cyber security performance, and the more engaged its board is with security issues, the greater the return for shareholders, a report has found

• March 26, 2024 26 Mar'24

  NHS SBS launches digital advisory framework

  The Digital Health Advisory Services framework agreement aims to provide a way for health and care organisations to get help with digital transformation and skills

• March 21, 2024 21 Mar'24

  NCSC guidance to help CEOs work through cyber incidents

  The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow

• March 21, 2024 21 Mar'24

  IR35 reforms: IT contractors urged to reclaim tax they may have overpaid in off-payroll settlements

  With the government set to fix the settlements offset issue from 6 April, contractor insurance firm Qdos is urging individuals who worked for non-compliant IR35 organisations to see if they can reclaim any money they have overpaid

• March 20, 2024 20 Mar'24

  UK’s cyber resilience stagnates as more fall victim to attacks

  The government is calling on businesses to ramp up their cyber protections as study shows improvements to resilience are stagnating amid an ever-growing volume of attacks

• March 18, 2024 18 Mar'24

  The Security Interviews: Alex Yampolskiy, SecurityScorecard

  Alex Yampolskiy conceived the idea for risk management specialist SecurityScorecard after getting stung by a SaaS supplier that was being cavalier with its customer data. He tells his story to Computer Weekly

• March 18, 2024 18 Mar'24

  CCS slammed over errors in G-Cloud 14 data protection documents

  The government’s procurement arm is under fire again, after prospective suppliers to the G-Cloud 14 framework raised complaints about CCS’s quality control procedures

• March 18, 2024 18 Mar'24

  Liverpool to get AI hub for health and social care

  Artificial intelligence platform set to use NHS Integrated Care System Data to make better and decisions for patients in Liverpool, with a focus on mental health services

• March 17, 2024 17 Mar'24

  UK’s AI ambitions pointless while cyber security is still neglected

  The UK’s AI ambitions may be at considerable risk without stronger cyber defences across the private and public sectors

• March 15, 2024 15 Mar'24

  NHS to extend use of AI to cut waiting times and missed appointments

  Following a pilot of AI software predicting likely missed appointments at Mid and South Essex NHS Foundation Trust, 10 further trusts will deploy the system

• March 14, 2024 14 Mar'24

  Questions raised over NHS deletion of thousands of emails during whistleblower tribunal

  NHS doctor Chris Day has won the right to challenge a tribunal ruling that found no procedural unfairness when an NHS trust deleted thousands of emails. The case that raises wider questions about the use of electronic evidence

• March 13, 2024 13 Mar'24

  Microsoft AI-powered cyber service to go live in April

  After a year being previewed by beta customers, Microsoft’s much vaunted Copilot for Security service is about to go on general release, promising time savings and improved accuracy for hard-pressed security pros

• March 12, 2024 12 Mar'24

  March Patch Tuesday throws up two critical Hyper-V flaws

  Two critical vulnerabilities in Windows Hyper-V stand out on an otherwise unremarkable Patch Tuesday

• March 12, 2024 12 Mar'24

  Labour will use AI to grow the economy by 0.5%, says shadow tech secretary Peter Kyle

  The Labour Party plans to promote the use of artificial intelligence in small businesses and across government to grow the economy, but transparency and building trust with the public will be key

• March 11, 2024 11 Mar'24

  Government not facing up to CNI cyber risks, committee warns

  The Joint Committee on the National Security Strategy has accused the government of burying its head in the sand over the cyber threat to UK critical infrastructure

• March 06, 2024 06 Mar'24

  Chancellor targets £36bn productivity boost with £4.2bn digital transformation plan

  In his 2024 spring budget, Jeremy Hunt announced funding to use tech to improve productivity across the public sector, with most of the cash focused on digital initiatives in the NHS

• March 05, 2024 05 Mar'24

  ALPHV/BlackCat gang vanishes amid ransomware ‘turmoil’

  Mystery surrounds the apparent disappearance of the ALPHV/BlackCat cyber crime gang amid reports that a prominent US victim paid a $22m ransom

• March 05, 2024 05 Mar'24

  Banning ransomware payments back on the agenda

  The idea of banning ransomware payments to cyber criminals is back on the agenda, with former NCSC chief Ciaran Martin arguing that tougher measures need to be taken

• March 04, 2024 04 Mar'24

  Jeremy Hunt to deliver tech-laden Spring Budget

  The chancellor’s 2024 Budget will cover a £800m funding package to boost public sector productivity through technology, with cash for police tech, the justice system transformation programme and the NHS

• March 04, 2024 04 Mar'24

  G-Cloud 14 insurance requirements ‘under review’ by CCS after SME supplier backlash

  CCS has confirmed to Computer Weekly the insurance requirements for Lots 1 to 3 of the G-Cloud 14 framework are under review, as SME-focused minister pledges to investigate matter

• February 28, 2024 28 Feb'24

  New version of ALPHV/BlackCat ransomware hits victims

  An updated version of the ALPHV/BlackCat ransomware has been spotted in the wild amid a series of attacks on American healthcare providers, prompting a new alert from the authorities

• February 28, 2024 28 Feb'24

  75% of third-party breaches target software, IT supply chains

  Data drawn from SecurityScorecard’s telemetry reveals how supply chain breaches are becoming a weapon of choice for threat actors

• February 28, 2024 28 Feb'24

  Users love their cyber teams, but find them frustrating

  Despite strong support for security teams, a good number of ordinary workers see them as obstructive to business goals, and would like to see them operate more transparently

• February 28, 2024 28 Feb'24

  CCS accused of pricing G-Cloud SMEs out of framework with £20m insurance cover hike

  The Crown Commercial Service’s commitment to helping SMEs win more government cloud deals is being called into question again, following news that it is planning to up the insurance cover required by G-Cloud 14 suppliers by £20m

• February 27, 2024 27 Feb'24

  Black Basta and Bl00dy ransomware gangs exploiting ConnectWise vulns

  More ransomware gangs have been observed exploiting two dangerous vulnerabilities in ConnectWise ScreenConnect software, prompting new warnings for users to get patching

• February 27, 2024 27 Feb'24

  VulnCheck bug listing to help track new threats quicker

  Exploit intelligence firm VulnCheck launches a proprietary Known Exploited Vulnerabilities catalogue in hopes of improving end-user access to intel on emerging threats and reaching those that the likes of CISA do not

• February 27, 2024 27 Feb'24

  Majority of UK employees ‘willingly gamble’ with security

  Human-centric threats originating from employees continue to damage organisations both financially and reputationally, according to a report

• February 27, 2024 27 Feb'24

  Cozy Bear and other APTs changing tack as cloud adoption increases

  A change in APT tactics has been observed resulting from greater adoption of cloud-based services, according to the NCSC

• February 23, 2024 23 Feb'24

  ConnectWise users see cyber attacks surge, including ransomware

  ConnectWise ScreenConnect users who have yet to patch against a critical vulnerability are now being targeted by a barrage of cyber attacks, including ransomware

• February 22, 2024 22 Feb'24

  Mid and South Essex sets out plans for shared care record

  The Essex-based integrated care system is developing a shared care record for health and social care, aiming to go live in spring 2024

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 16, 2024 16 Feb'24

  Government awards £10m to medtech developers

  The government has awarded £10m to eight technology companies to create innovative medical devices and bring them to market

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 13, 2024 13 Feb'24

  DSIT pumps £100m into biotech projects

  The funding will be given to six engineering biology mission hubs, aiming to pioneer new technologies and address global challenges

• February 13, 2024 13 Feb'24

  NHS England awards £1m for wireless tech trials

  The funding is split between seven trusts, which will be running wireless technology pilots aimed at improving patient care and improving connectivity

• February 09, 2024 09 Feb'24

  Europe carves out niche in quantum computing

  As the US, China and Europe accelerate investment in quantum computing, Europe is beginning to develop its own unique position in the fledgling global ecosystem

• February 08, 2024 08 Feb'24

  University Hospital of Wales launches digital cardiology test requests

  The Cardiff-based hospital is switching from a paper-based system to a digital service, which is integrated into the Welsh Clinical Portal

• February 07, 2024 07 Feb'24

  NCSC warns CNI operators over ‘living-off-the-land’ attacks

  Malicious, state-backed actors may well be lurking in the UK’s most critical networks right now, and their operators may not even know until it is too late, warn the NCSC and its partners

• February 06, 2024 06 Feb'24

  UK’s McPartland Cyber Review to probe trust in technology

  The UK government has launched a cyber security review that will investigate how best to give businesses the confidence they need to use new technologies

• January 25, 2024 25 Jan'24

  Bugcrowd sees surge in vulnerability submissions, led by public sector

  Crowdsourced vulnerability disclosure and bug bounty platform Bugcrowd says it saw a 151% uptick in submissions related to government and public sector organisations in 2023

• January 25, 2024 25 Jan'24

  Tony Blair Institute calls for creation of NHS Data Trust

  The NHS would have a majority stake in the data trust, with additional investment from private sector companies, harnessing anonymised data as a competitive asset, proposes the think thank

• January 24, 2024 24 Jan'24

  WebKit vulnerability sparks Apple’s first major security update of 2024

  A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences