News

IT for telecoms and internet organisations

• May 02, 2024 02 May'24

  Dropbox Sign user information accessed in data breach

  Account data belonging to Dropbox Sign users was accessed by an unknown threat actor after they hacked into the organisation’s backend infrastructure

• May 02, 2024 02 May'24

  BBC instructs lawyers over allegations of police surveillance of journalist

  Lawyers for the BBC have written to the Investigatory Powers Tribunal over allegations that the Police Service of Northern Ireland spied on investigative journalist Vincent Kearney

• May 01, 2024 01 May'24

  EMEA CISOs must address human factors behind cyber incidents

  The 17th annual Verizon report on data breaches makes for sobering reading for security pros, urging them to do more to address the human factors involved in cyber incidents, and highlighting ongoing issues with zero-day patching

• May 01, 2024 01 May'24

  Secure coding benchmark to increase standards among developers

  Developer security advocate Secure Code Warrior has launched what it claims is the industry’s first benchmark designed to quantify the security competence of its customers’ software developer teams

• April 29, 2024 29 Apr'24

  UK’s long-awaited device security law kicks in

  The Product Security and Telecommunications Infrastructure Act has become law across the UK, enforcing basic cyber security standards across connected products sold to the public

• April 24, 2024 24 Apr'24

  TikTok ban sails through US Senate

  A law that will ban TikTok in the US unless its owner sells up pronto passed the US Senate by a landslide majority after being included in a package of military aid

• April 22, 2024 22 Apr'24

  IT leaders hiring CISOs aplenty, but don’t fully understand the role

  Most businesses now have a CISO, but perceptions of what CISOs are supposed to do, and confusion over the value they offer, may be holding back harmonious relations, according to a report

• April 21, 2024 21 Apr'24

  Crime agency criticises Meta as European police chiefs call for curbs on end-to-end encryption

  Law enforcement agencies step up demands for ‘lawful access’ to encrypted communications

• April 19, 2024 19 Apr'24

  Report reveals Northern Ireland police put up to 18 journalists and lawyers under surveillance

  Disclosures that the Police Service of Northern Ireland obtained phone communications data from journalists and lawyers leads to renewed calls for inquiry

• April 19, 2024 19 Apr'24

  Tech companies operating with opacity in Israel-Palestine

  Tech firms operating in Occupied Palestinian Territories and Israel are falling “woefully short” of their human rights responsibilities amid escalating devastation in Gaza, says Business & Human Rights Resource Centre

• April 16, 2024 16 Apr'24

  CISOs not yet convinced to invest in AI

  CISOs say their eyes are fixed firmly on threats like ransomware and supply chain attacks, and while AI is becoming a threat that needs to be dealt with, it’s not yet an immediate spending priority

• April 11, 2024 11 Apr'24

  How GenAI use is evolving for Google Cloud customers

  With more than one million developers now using Google Cloud’s generative AI systems to power their tools, Google customers have gone beyond experimentation and are now building their own agents

• April 09, 2024 09 Apr'24

  UK plc failing on multiple cyber measures

  Government report shows 50% of businesses and 32% of charities reported a cyber attack or breach in the past 12 months and organisations across the UK are failing on multiple cyber measures

• April 09, 2024 09 Apr'24

  Is a cyber arms control treaty out of reach?

  The world needs cyber arms control more than ever, but the challenges facing a multilateral agreement will be hard to surmount, according to researchers at Germany’s Digital Society Institute

• April 09, 2024 09 Apr'24

  Police forces check intelligence and criminal databases after errors discovered in O2 phone data

  Criminal Bar Association calls for information about reliability of communications data used in criminal trials to be disclosed

• April 03, 2024 03 Apr'24

  RDP abused in over 90% of cyber attacks, Sophos finds

  Threat actors continue to see great success using simple, tried and tested methods, and many defenders are failing to do the basics

• March 29, 2024 29 Mar'24

  Organisations getting better at spotting identity fraud

  As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report

• March 27, 2024 27 Mar'24

  Cyber spies, not cyber criminals, behind most zero-day exploitation

  Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime

• March 26, 2024 26 Mar'24

  Shareholders win when businesses do better at cyber

  The more advanced a company’s cyber security performance, and the more engaged its board is with security issues, the greater the return for shareholders, a report has found

• March 25, 2024 25 Mar'24

  Which? calls for government action on fake banking sites

  Amid high volumes of spoofed, fraudulent banking websites, Which? is calling for the government to implement new legal obligations for domain registrars

• March 22, 2024 22 Mar'24

  Court finds EncroChat hacked messages admissible as former footballer is jailed

  A judge in ‘lead’ EncroChat case found that messages obtained by police from the encrypted phone network can be lawfully used in evidence

• March 21, 2024 21 Mar'24

  NCSC guidance to help CEOs work through cyber incidents

  The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow

• March 21, 2024 21 Mar'24

  Three UK sees top-line revenue growth but first EBIT loss since 2010

  UK mobile network operator reports earnings loss for the first time since 2010 but growth in certain customer segments driven by business-to-business, 5G, home broadband and Smarty service

• March 20, 2024 20 Mar'24

  Ukrainians crack network that stole 100m email, social accounts

  Three members of an organised cyber criminal group who hacked and appropriated personal email and social media accounts face up to 15 years in prison

• March 20, 2024 20 Mar'24

  UK’s cyber resilience stagnates as more fall victim to attacks

  The government is calling on businesses to ramp up their cyber protections as study shows improvements to resilience are stagnating amid an ever-growing volume of attacks

• March 18, 2024 18 Mar'24

  Spring Budget risks funding legally questionable police tech

  Open legal questions around how UK police are using facial recognition and cloud technology could undermine the £230m investment committed in the Spring Budget to “time and money-saving technology” for police

• March 18, 2024 18 Mar'24

  The Security Interviews: Alex Yampolskiy, SecurityScorecard

  Alex Yampolskiy conceived the idea for risk management specialist SecurityScorecard after getting stung by a SaaS supplier that was being cavalier with its customer data. He tells his story to Computer Weekly

• March 18, 2024 18 Mar'24

  Deep fake AI services on Telegram pose risk for elections

  Deep fake services advertised on Telegram and other platforms pose a risk to upcoming elections in Europe, Asia and the US

• March 17, 2024 17 Mar'24

  UK’s AI ambitions pointless while cyber security is still neglected

  The UK’s AI ambitions may be at considerable risk without stronger cyber defences across the private and public sectors

• March 15, 2024 15 Mar'24

  UK government calls on comms firms to limit installation of telegraph poles

  After public demonstrations, minister urges communications industry to ‘do whatever it takes’ to share existing infrastructure to avoid ‘inappropriately or unnecessarily throwing up’ new telegraph poles

• March 13, 2024 13 Mar'24

  US authorities move a step closer to banning TikTok

  Lawmakers in Washington DC have moved a step closer to enacting a broad national ban on controversial video app TikTok in the US, with global ramifications

• March 13, 2024 13 Mar'24

  Microsoft AI-powered cyber service to go live in April

  After a year being previewed by beta customers, Microsoft’s much vaunted Copilot for Security service is about to go on general release, promising time savings and improved accuracy for hard-pressed security pros

• March 12, 2024 12 Mar'24

  March Patch Tuesday throws up two critical Hyper-V flaws

  Two critical vulnerabilities in Windows Hyper-V stand out on an otherwise unremarkable Patch Tuesday

• March 11, 2024 11 Mar'24

  TechUK calls for next government to introduce ‘industrial strategy’ for AI

  Trade group TechUK publishes blueprint calling for winner of next election to boost tech startups, digitise government services and accelerate technology R&D

• March 05, 2024 05 Mar'24

  Unexpected costs hit many as they move to cloud storage

  A Wasabi survey of cloud storage customers finds more moving to the cloud, but they are experiencing busted budgets and unexpected fees, and expect big demands from artificial intelligence workloads

• March 05, 2024 05 Mar'24

  Banning ransomware payments back on the agenda

  The idea of banning ransomware payments to cyber criminals is back on the agenda, with former NCSC chief Ciaran Martin arguing that tougher measures need to be taken

• February 29, 2024 29 Feb'24

  Home Office GPS tagging of asylum seekers breaches data protection law

  The Information Commissioner’s Office has issued an enforcement notice against the Home Office after finding its programme to tag asylum seekers with GPS monitors breaches data protection law

• February 28, 2024 28 Feb'24

  75% of third-party breaches target software, IT supply chains

  Data drawn from SecurityScorecard’s telemetry reveals how supply chain breaches are becoming a weapon of choice for threat actors

• February 28, 2024 28 Feb'24

  Users love their cyber teams, but find them frustrating

  Despite strong support for security teams, a good number of ordinary workers see them as obstructive to business goals, and would like to see them operate more transparently

• February 27, 2024 27 Feb'24

  Black Basta and Bl00dy ransomware gangs exploiting ConnectWise vulns

  More ransomware gangs have been observed exploiting two dangerous vulnerabilities in ConnectWise ScreenConnect software, prompting new warnings for users to get patching

• February 27, 2024 27 Feb'24

  VulnCheck bug listing to help track new threats quicker

  Exploit intelligence firm VulnCheck launches a proprietary Known Exploited Vulnerabilities catalogue in hopes of improving end-user access to intel on emerging threats and reaching those that the likes of CISA do not

• February 27, 2024 27 Feb'24

  Majority of UK employees ‘willingly gamble’ with security

  Human-centric threats originating from employees continue to damage organisations both financially and reputationally, according to a report

• February 27, 2024 27 Feb'24

  Cozy Bear and other APTs changing tack as cloud adoption increases

  A change in APT tactics has been observed resulting from greater adoption of cloud-based services, according to the NCSC

• February 23, 2024 23 Feb'24

  ConnectWise users see cyber attacks surge, including ransomware

  ConnectWise ScreenConnect users who have yet to patch against a critical vulnerability are now being targeted by a barrage of cyber attacks, including ransomware

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 14, 2024 14 Feb'24

  Dutch Supreme Court approves use of EncroChat evidence

  Defence lawyers plan appeal to European Court of Human Rights after Supreme Court upholds a conviction based on intercepted messages from the EncroChat encrypted phone network

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 14, 2024 14 Feb'24

  Security experts: Investigatory powers plans will delay security updates

  Cyber security experts warn that government proposals to amend the Investigatory Powers Act will limit tech companies’ ability to respond to security threats and could hamper the use of end-to-end encryption

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 08, 2024 08 Feb'24

  Executive alleged to be behind EncroChat encrypted phone network arrested

  A businessman allegedly behind EncroChat, an encrypted phone network that was used by organised crime groups, has been extradited from the Dominican Republic to France