News

IT for retail and logistics

• October 14, 2022 14 Oct'22

  Fujitsu to finally face blame for its part in Post Office Horizon scandal

  Fujitsu’s part in causing the extreme suffering of subpostmasters will be made clear as the IT supplier begins giving evidence at a statutory inquiry

• October 13, 2022 13 Oct'22

  Dutch influence standards for post-quantum cryptography

  Cryptology group at Dutch research institute is involved in the two primary algorithms of the next NIST portfolio comprising four new standards

• October 13, 2022 13 Oct'22

  Perpetrators of subpostmaster suffering in Horizon scandal must face public inquiry

  Victims demand that the perpetrators of the Post Office Horizon IT scandal face the public inquiry

• October 12, 2022 12 Oct'22

  NCSC urges organisations to secure supply chains

  NCSC’s latest guidance package centres supply chain security, helping medium to large organisations assess and mitigate cyber risks from suppliers

• October 11, 2022 11 Oct'22

  Post Office scandal inquiry restarts with call for a pause amid disclosure controversy

  The statutory public inquiry into the Post Office Horizon scandal has begun phase two with a request for an adjournment amid allegations that the Post Office is failing to meet its obligation to disclose all relevant documents

• October 06, 2022 06 Oct'22

  Tech Nation and PwC launch joint climate tech accelerator

  The Net Zero X programme by Tech Nation and PwC will help climate tech companies to overcome common growth challenges and scale faster

• October 03, 2022 03 Oct'22

  Security regulation cuts online payment fraud at 73% of retailers

  New online payments security standard, Strong Customer Authentication (SCA), sees immediate fall in fraudulent payments to retailers

• September 30, 2022 30 Sep'22

  Interview: Rachel Hilliam, chair, Alliance for Data Science Professionals

  Rachel Hilliam talks about the origins, mission and future plans for the Alliance for Data Science Professionals

• September 22, 2022 22 Sep'22

  Dr Martens goes feetfirst into cloud-to-cloud backup

  Iconic bootmaker laces up for a strategy to move all applications to the cloud, beginning with cloud-to-cloud backup for Microsoft 365 apps plus on-site VMware operations

• September 21, 2022 21 Sep'22

  NCSC publishes cyber guidance for retailers

  The NCSC has published tailored advice to support online retailers, hospitality providers and utility services in protecting themselves and their customers from cyber crime

• September 20, 2022 20 Sep'22

  Dutch student team aims to enable uninterrupted drone cargo delivery

  Dutch student team aims to make the world of flying more sustainable by creating a global network of autonomously flying cargo drones that can have their batteries swapped mid-air

• September 15, 2022 15 Sep'22

  Organisations failing to account for digital trust

  The vast majority of businesses are well aware of the importance of digital trust, yet very few have a dedicated staff role responsible for it, report finds

• September 14, 2022 14 Sep'22

  Ex-CISA head Krebs: Disrupt ransomware support networks to win the war

  Speaking at an event hosted by data protection specialist Rubrik, former CISA director Chris Krebs calls for the security community to work collectively to kick out the supports from under ransomware gangs

• September 14, 2022 14 Sep'22

  US to see huge increase in embedded finance transactions

  Retailers and other non-financial businesses are increasingly offering their customers financial services, such as credit and payment options

• September 12, 2022 12 Sep'22

  CISOs should spend on critical apps, cloud, zero-trust, in 2023

  Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts

• September 05, 2022 05 Sep'22

  UK payments upgrade to add more than £3bn to GDP, but much more on offer

  UK GDP will increase when its ageing payments infrastructure is replaced with the latest technology to enable real-time payments

• September 05, 2022 05 Sep'22

  Huge leap to contactless payments in past three years

  Covid-19 pushes the use of contactless payments for face-to-face transactions to 90% of total

• September 01, 2022 01 Sep'22

  Police interview Horizon scandal victim in investigation into potential perjury by Fujitsu staff

  The Met Police have interviewed a former subpostmaster as part of an investigation into potential perjury by former Fujitsu staff

• August 30, 2022 30 Aug'22

  IAM house Okta confirms 0ktapus/Scatter Swine attack

  Following last week’s disclosureby Group-IB researchers of a major phishing campaign, Okta has warned its customers to be on their guard

• August 25, 2022 25 Aug'22

  Adaptive RedAlert, Monster ransomwares go cross-platform

  Kaspersky researchers have shared new intelligence on two emergent cyber criminal groups that have adapted their ransomwares to target different operating systems at the same time

• August 25, 2022 25 Aug'22

  Security pros fret about stress and promotion over cyber attacks

  CIISec’s annual report on the state of the security profession reveals some home truths for security leaders

• August 25, 2022 25 Aug'22

  LockBit 3.0 cements dominance of ransomware ecosystem

  Ransomware attacks were up 47% in July compared with the previous month, according to the latest threat data from NCC Group, with the LockBit family largely to blame

• August 24, 2022 24 Aug'22

  Most CISOs think they’ve been attacked by a nation state

  Most organisations have made changes to their cyber strategies and policies following Russia’s invasion, and almost two-thirds suspect they have been directly targeted or impacted by a nation-state cyber attack

• August 22, 2022 22 Aug'22

  Kaspersky threat data added to Microsoft Sentinel service

  Microsoft and Kaspersky have agreed a collaboration to integrate Kaspersky’s threat data feeds into Microsoft’s cloud-native SIEM/SOAR service

• August 22, 2022 22 Aug'22

  Lloyd’s to end insurance coverage for state cyber attacks

  Lloyd’s of London has instructed its members to exclude nation state cyber attacks from insurance policies beginning in 2023, saying they pose unacceptable levels of risk

• August 19, 2022 19 Aug'22

  Cozy Bear targets MS 365 environments with new tactics

  Cozy Bear, or APT29, is trying out new tricks as it seeks access to its targets’ Microsoft 365 environments

• August 18, 2022 18 Aug'22

  Growing MFA use spurs ‘pass-the-cookie’ attacks

  The exploitation of stolen session cookies by cyber criminals is once again back on the agenda, thanks to the growing popularity of multifactor authentication tools

• August 18, 2022 18 Aug'22

  It takes a breach to force boards to take notice of cyber, says UK government

  Too often, it takes a major incident for business leadership to pay attention to cyber issues, according to a government-commissioned study of victims

• August 16, 2022 16 Aug'22

  Older customers prefer phone calls to chatbots

  Businesses are increasingly adopting customer-facing digital technologies, but the older generation are not so keen to embrace tech

• August 16, 2022 16 Aug'22

  Why organisations need to harmonise their CIO and CISO roles

  Unless properly managed, conflicting responsibilities between the chief information officer and the chief information security officer can cause project delays and budget overruns, says Netskope’s Mike Anderson

• August 12, 2022 12 Aug'22

  UK Amazon workers stage series of wildcat strikes over pay offers

  Amazon warehouse workers across the UK have organised a series of spontaneous strike actions after the e-commerce giant’s management offered them pay rises between 35p and 50p

• August 10, 2022 10 Aug'22

  Online retail sales see year-on-year drop of 2.3% in July 2022

  Despite another year-on-year drop in online retail sales in July, the fall is smaller than those seen in previous months of 2022 as online sales decline slows

• August 10, 2022 10 Aug'22

  Microsoft fixes two-year-old MSDT vulnerability in August update

  August’s Patch Tuesday drop fixes more than 120 CVEs, including another MSDT RCE zero-day that is being actively exploited.

• August 10, 2022 10 Aug'22

  Waterstones’ supply chain disrupted in Blue Yonder implementation

  Bookseller Waterstones is recovering from the effects of a Blue Yonder implementation that has seen authors and readers up in arms

• August 10, 2022 10 Aug'22

  ‘Coopetition’ a growing trend among ransomware gangs

  Sophos shares data from its new X-Ops unit at Black Hat in Las Vegas, revealing a growing number of ransomware victims being attacked by multiple gangs at the same time

• August 04, 2022 04 Aug'22

  Spyware activity particularly impactful in July

  After a quiet June, vulnerability exploitation ramped up in July, with intrusions linked to spyware seeing unusually high volumes of activity, according to a report

• July 29, 2022 29 Jul'22

  Austrian data firm accused of selling malware, conducting cyber attacks

  Microsoft has accused DSIRF, an Austrian data services firm, of involvement in a string of cyber attacks

• July 28, 2022 28 Jul'22

  NCSC startups scheme turns focus to operational technology, SME security

  NCSC for Startups initiative turns its focus to supporting innovation around securing operational technology and addressing the challenges facing small businesses

• July 28, 2022 28 Jul'22

  Cyber criminals pivot away from macros as Microsoft changes bite

  As Microsoft resumes blocking macros by default in its Office application suite, reversing a temporary reversal, analysis from Proofpoint suggests the action has had a remarkable effect

• July 28, 2022 28 Jul'22

  Teams in Grenoble work on 6G breakthrough technology

  Even as 5G networks are being rolled out, new requirements are driving scientists, and engineers in Europe are back to the lab to start developing 6G

• July 28, 2022 28 Jul'22

  Ocado revenue drops despite distribution centre successes

  Ocado has spent the past six months rolling out new customer fulfilment centres and signing partners for its smart platform, but the cost-of-living crisis still sees revenue taking a hit

• July 27, 2022 27 Jul'22

  Consumers left out of pocket as security costs soar

  As the average cost of a security incident reaches an all-time high of nearly $4.5m, an IBM Security study reveals how these costs are being passed on to ordinary people

• July 27, 2022 27 Jul'22

  Retail software firm PrestaShop warns users about SQL injection attacks

  Open source e-commerce platform PrestaShop warns thousands of small retailers that their customers’ credit card details may be at risk of compromise

• July 27, 2022 27 Jul'22

  Cyber security training ‘boring’ and largely ignored

  Two-thirds of employees don’t bother to pay attention to cyber security training – and the fault does not lie with them

• July 26, 2022 26 Jul'22

  No More Ransom initiative helps 1.5 million people in six years

  One and a half million people have now taken advantage of free ransomware decryption tools offered by a joint European project

• July 26, 2022 26 Jul'22

  Post Office attacked subpostmasters who questioned Horizon, say victims

  When the Post Office’s lie about the Horizon system failed to silence subpostmaster critics, it took more extreme measures, say victims of the scandal

• July 26, 2022 26 Jul'22

  Ducktail infostealer targets Facebook Business users

  Newly uncovered Ducktail operation targets individuals with access to Facebook Business service and tries to steal their accounts

• July 26, 2022 26 Jul'22

  Six more subpostmaster convictions overturned in Horizon scandal

  More former subpostmasters have their wrongful convictions for theft and fraud overturned in the Court of Appeal

• July 25, 2022 25 Jul'22

  Latest Atlassian Confluence vulnerability raises concerns

  CVE-2022-26138 is the second major vulnerability disclosure made for Atlassian’s Confluence collaboration platform in recent months

• July 25, 2022 25 Jul'22

  The Security Interviews: Why you need to protect abandoned digital assets

  The war in Ukraine and subsequent boycott of Russia resulted in a swathe of digital infrastructure being abandoned, becoming a potential vulnerability for many organisations, says Cyberpion’s Ran Nahmias