News
IT for leisure and hospitality industry
- 
				March 07, 2025
				
					07
					Mar'25
				
Interview: Madoc Batters, head of cloud and IT security, Warner Leisure Hotels
The hotel chain has embarked on a major cloud migration programme to improve innovation and enhance the security of its network and applications
 - 
				March 06, 2025
				
					06
					Mar'25
				
CFIT publishes blueprint for digital company business IDs
Plan to increase the use of digital identities by businesses could add billions of pounds to UK economy through compliance savings and reduced fraud
 - 
				February 27, 2025
				
					27
					Feb'25
				
CVE volumes head towards 50,000 in 2025, analysts claim
Many trends, notably a big shift to open source tools, are behind an expected boom in the number of disclosed vulnerabilities
 - 
				February 26, 2025
				
					26
					Feb'25
				
CISOs spending more on insider risk
Insider risk management budgets have more than doubled in the past 12 months and look set to grow further still in 2025, according to a report
 
- 
			February 21, 2025
			
				21
				Feb'25
			
A landscape forever altered? The LockBit takedown one year on
The NCA-led takedown of the LockBit ransomware gang in February 2024 heralded a transformative year in the fight against cyber crime. One year on, we look back at Operation Cronos and its impact
 - 
			February 18, 2025
			
				18
				Feb'25
			
Meta’s planned subsea cable will exceed circumference of Earth and support AI innovation
Meta’s planned 50,000 km subsea cable will be the world’s longest and connect the five major continents
 - 
			February 14, 2025
			
				14
				Feb'25
			
Gartner: CISOs struggling to balance security, business objectives
Only 14% of security leaders can ‘effectively secure organisational data assets while also enabling the use of data to achieve business objectives’, according to Gartner
 - 
			February 14, 2025
			
				14
				Feb'25
			
Government launches consultation on plan to streamline business through e-invoicing
Government announces 12-week consultation on electronic invoicing as part of its plan for change
 - 
			February 12, 2025
			
				12
				Feb'25
			
Cisco Live EMEA: Network supplier tightens AI embrace
At its annual EMEA show, Cisco tech leadership unveiled a raft of new products, services and features designed to help customers do more with artificial intelligence
 - 
			February 07, 2025
			
				07
				Feb'25
			
US lawmakers move to ban DeepSeek AI tool
US politicians have introduced a bill seeking to ban the use of the DeepSeek AI tool on government-owned devices, citing national security concerns due to its alleged links to the Chinese state
 
- 
			February 07, 2025
			
				07
				Feb'25
			
Ransomware payment value fell over 30% in 2024
Several factors, including the impact of law enforcement operations disrupting cyber criminal gangs and better preparedness among users, may be behind a significant drop in the total value of ransomware payments
 - 
			February 06, 2025
			
				06
				Feb'25
			
UK’s Cyber Monitoring Centre begins incident classification work
The Cyber Monitoring Centre will work to categorise major incidents against a newly developed scale to help organisations better understand the nature of systemic cyber attacks and learn from their impact
 - 
			January 29, 2025
			
				29
				Jan'25
			
Vallance rejects latest charge to reform UK hacking laws
Science minister Patrick Vallance rejects proposed amendments to the Computer Misuse Act, arguing that they could create a loophole for cyber criminals to exploit
 - 
			January 27, 2025
			
				27
				Jan'25
			
Cyber incident that closed British Museum was inside job
An IT incident that disrupted visitor access to the British Museum last week was the work of a disgruntled contractor who had been let go
 - 
			January 23, 2025
			
				23
				Jan'25
			
ICO launches major review of cookies on UK websites
ICO sets out 2025 goals, including a review of cookie compliance across the UK’s top 1,000 websites, as it seeks to achieve its ultimate goal of giving the public meaningful control over how their data is used
 - 
			January 22, 2025
			
				22
				Jan'25
			
Privacy professionals expect budget cuts, lack confidence
Over 50% of privacy professionals in Europe expect to see less money earmarked for data security initiatives in 2025, and many don’t have faith their organisations are taking the issue seriously, according to an ISACA report
 - 
			January 22, 2025
			
				22
				Jan'25
			
Funksec gang turned up ransomware heat in December
The criminal ransomware fraternity was hard at work over the festive period, with attack volumes rising and a new threat actor emerging on the scene
 - 
			January 17, 2025
			
				17
				Jan'25
			
US Supreme Court upholds TikTok ban
The US Supreme Court has upheld a legal ban on TikTok, meaning that the video-sharing application will be shut down from midnight on Sunday 19 January
 - 
			January 15, 2025
			
				15
				Jan'25
			
Users protest, flee TikTok as clock ticks on US ban
As the US Supreme Court prepares to rule on the future of TikTok, rumours of a sale are swirling around Washington DC while panicked users make plans for an exodus
 - 
			January 15, 2025
			
				15
				Jan'25
			
Biggest Patch Tuesday in years sees Microsoft address 159 vulnerabilities
The largest Patch Tuesday of the 2020s so far brings fixes for more than 150 CVEs ranging widely in their scope and severity – including eight zero-day flaws
 - 
			January 10, 2025
			
				10
				Jan'25
			
Mandiant: Latest Ivanti vulns exploited by Chinese cyber spooks
Threat actors are once again lining up to exploit vulnerabilities in the widely used Ivanti product suite, with an apparent link to Chinese espionage activity
 - 
			January 03, 2025
			
				03
				Jan'25
			
US Treasury incident a clear warning on supply chain security in 2025
A cyber incident at the US Department of the Treasury – blamed on a Chinese state actor – raises fresh warnings about supply chain risk after it was found to have originated via vulnerabilities in a remote tech support product
 - 
			December 19, 2024
			
				19
				Dec'24
			
LockBit ransomware gang teases February 2025 return
An individual associated with the LockBit ransomware gang has broken cover to tease details of a new phase of the cyber criminal operation's activity, which they claim is set to begin in February 2025
 - 
			December 19, 2024
			
				19
				Dec'24
			
Latest attempt to override UK’s outdated hacking law stalls
Amendments to the Data Bill that would have given the UK cyber industry a boost by updating restrictive elements of the Computer Misuse Act have failed to progress beyond a Lords committee
 - 
			December 18, 2024
			
				18
				Dec'24
			
The Security Interviews: Martin Lee, Cisco Talos
Threat intel expert and author Martin Lee, EMEA technical lead for security research at Cisco Talos, joins Computer Weekly to mark the 35th anniversary of the first ever ransomware attack
 - 
			December 18, 2024
			
				18
				Dec'24
			
Top 10 cyber security stories of 2024
Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are ...
 - 
			December 18, 2024
			
				18
				Dec'24
			
Top 10 cyber crime stories of 2024
From ransomware targeting the NHS to nation-state-backed intrusions, 2024 was another big year for cyber criminals and cyber spooks alike, but they didn't have it all their own way as the good guys fought back
 - 
			December 16, 2024
			
				16
				Dec'24
			
Top 10 IT leadership interviews of 2024
The top technology leaders talk to Computer Weekly to discuss the challenges they face and the strategies, solutions and successes they are delivering
 - 
			December 13, 2024
			
				13
				Dec'24
			
Computer Misuse Act reform gains traction in Parliament
An amendment to the proposed Data (Access and Use) Bill that will right a 35-year-old wrong and protect security professionals from criminalisation is to be debated at Westminster
 - 
			December 12, 2024
			
				12
				Dec'24
			
Emerging Ymir ransomware heralds more coordinated threats in 2025
A newly observed ransomware strain has the community talking about more collaboration, and blurred lines, between threat groups next year, according to NCC’s monthly cyber barometer
 - 
			December 10, 2024
			
				10
				Dec'24
			
Dangerous CLFS and LDAP flaws stand out on Patch Tuesday
Microsoft has fixed over 70 CVEs in its final Patch Tuesday update of the year, and defenders should prioritise a zero-day in the Common Log File System Driver, and another impactful flaw in the Lightweight Directory Access Protocol
 - 
			December 10, 2024
			
				10
				Dec'24
			
iOS vuln leaves user data dangerously exposed
Jamf threat researchers detail an exploit chain for a recently patched iOS vulnerability that enables a threat actor to steal sensitive data, warning that many organisations are still neglecting mobile updates
 - 
			December 02, 2024
			
				02
				Dec'24
			
NCSC boss calls for ‘sustained vigilance’ in an aggressive world
NCSC CEO Richard Horne is to echo wider warnings about the growing number and severity of cyber threats facing the UK as he launches the security body’s eighth annual report
 - 
			November 26, 2024
			
				26
				Nov'24
			
Russian threat actors poised to cripple power grid, UK warns
UK government escalates cyber rhetoric in a speech at a Nato event, saying Russian advanced persistent threats stand ready to conduct cyber attacks that could ‘turn off the lights for millions’
 - 
			November 25, 2024
			
				25
				Nov'24
			
Microsoft calls on Trump to ‘push harder’ on cyber threats
Microsoft’s Brad Smith urges president-elect Donald Trump to keep the faith when it comes to fighting back against hostile cyber actors from China, Iran and Russia
 - 
			November 25, 2024
			
				25
				Nov'24
			
Geopolitical strife drives increased ransomware activity
The lines between financially motivated cyber criminals and nation state APTs are rapidly blurring, as geopolitical influences weigh heavily on the threat landscape, according to data from NCC
 - 
			November 21, 2024
			
				21
				Nov'24
			
BianLian cyber gang drops encryption-based ransomware
The Australian and American cyber authorities have published updated intelligence on the BianLian ransomware gang, which has undergone a rapid evolution in tactics
 - 
			November 21, 2024
			
				21
				Nov'24
			
Microsoft slaps down Egyptian-run rent-a-phish operation
Microsoft’s Digital Crimes Unit has conducted a successful takedown of almost 250 malicious websites used in the cyber criminal ONNX phishing-as-a-service operation
 - 
			November 20, 2024
			
				20
				Nov'24
			
Apple addresses two iPhone, Mac zero-days
Two zero-day vulnerabilities uncovered in Apple’s operating systems could have allowed for arbitrary code execution and cross-site scripting attacks
 - 
			November 19, 2024
			
				19
				Nov'24
			
Interview: Raymond Boyle, vice-president of data and analytics, Hyatt Hotels
Data culture is a key focus for the strategy at the global hotel chain, especially as AI opens up new opportunities to drive personalisation and trust with customers
 - 
			November 18, 2024
			
				18
				Nov'24
			
AWS widening scope of MFA programme after early success
AWS reports strong take-up of multi-factor authentication among customers since making it compulsory for root users earlier this year, and plans to expand the scope of its IAM programme in spring 2025
 - 
			November 18, 2024
			
				18
				Nov'24
			
UK consumers losing more than ever to holiday scams
Last Christmas, UK consumers lost over £11m to cyber criminals. This year, to save them from tears, the NCSC and Action Fraud are teaming up to launch an anti-fraud campaign
 - 
			November 12, 2024
			
				12
				Nov'24
			
Microsoft fixes 89 CVEs on penultimate Patch Tuesday of 2024
High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update
 - 
			November 12, 2024
			
				12
				Nov'24
			
Zero-day exploits increasingly sought out by attackers
Threat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023
 - 
			November 07, 2024
			
				07
				Nov'24
			
Google Cloud MFA enforcement meets with approval
Latest Google Cloud policy to enforce multifactor authentication across its user base is welcomed by security professionals
 - 
			November 07, 2024
			
				07
				Nov'24
			
AI a force multiplier for the bad guys, say cyber pros
CIISec’s annual report on the security profession finds evidence of growing concern that artificial intelligence will ultimately prove more useful to threat actors than defenders
 - 
			November 01, 2024
			
				01
				Nov'24
			
CISA looks to global collaboration as fraught US election begins
The US' CISA cyber agency has unveiled a two-year International Strategic Plan to advance collaboration and improve resilience against shared risks and threats
 - 
			October 30, 2024
			
				30
				Oct'24
			
Interview: Rahul Todkar, head of data and AI, Tripadvisor
The travel website generates huge amounts of data – as a result, artificial intelligence offers equally huge opportunities for the business and its customers
 - 
			October 29, 2024
			
				29
				Oct'24
			
EMEA businesses siphoning budgets to hit NIS2 goals
With NIS2 now in effect, European business leaders are having to divert budget from elsewhere to achieve compliance
 - 
			October 22, 2024
			
				22
				Oct'24
			
Danish government reboots cyber security council amid AI expansion
Denmark’s government relaunches digital security initiative to protect business sectors and society at large
 
