News

IT governance

• April 02, 2024 02 Apr'24

  Risks and rewards of AI in HCM

  Research from Citi Commercial Bank warns of the risks associated with overusing AI in human capital management

• April 01, 2024 01 Apr'24

  Open source alert over intentionally placed backdoor

  A backdoor in the open source XZ Utils data compression library could have led to widespread compromise across the Linux ecosystem - and the community is on the trail of a developer who seems to be behind it

• March 29, 2024 29 Mar'24

  Organisations getting better at spotting identity fraud

  As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report

• March 28, 2024 28 Mar'24

  UK plc going backwards on cyber maturity, Cisco report claims

  Fewer UK organisations believe their cyber security postures have reached a mature level than did so 12 months ago, as they struggle to keep up with new challenges and a fast-evolving threat landscape

• March 28, 2024 28 Mar'24

  Sellafield to be prosecuted over alleged cyber compliance failure

  Sellafield Ltd, the organisation responsible for cleaning up and decommissioning the UK's largest nuclear waste site, is to be prosecuted over alleged cyber security failings dating back to 2019

• March 28, 2024 28 Mar'24

  Counter-eavesdropping agency unlawfully used surveillance powers to identify journalist’s source

  More than 750 journalists had their communications data accessed by law enforcement and government agencies between 2018 and 2022

• March 27, 2024 27 Mar'24

  Ransomware gang leaks data stolen from Scottish NHS board

  Data stolen from an earlier attack on NHS Dumfries and Galloway has been leaked by a ransomware gang that claims to be in possession of much more content

• March 27, 2024 27 Mar'24

  Cyber spies, not cyber criminals, behind most zero-day exploitation

  Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime

• March 27, 2024 27 Mar'24

  Lord Holmes: UK cannot 'wait and see' to regulate AI

  Legislation is needed to seize the benefits of artificial intelligence while minimising its risks, says Lord Holmes - but the government’s ‘wait and see’ approach to regulation will fail on both fronts

• March 26, 2024 26 Mar'24

  Qilin ransomware gang claims cyber attack on the Big Issue

  A ransomware attack on the systems of publisher and social enterprise Big Issue Group has been claimed by the Qilin gang

• March 26, 2024 26 Mar'24

  Shareholders win when businesses do better at cyber

  The more advanced a company’s cyber security performance, and the more engaged its board is with security issues, the greater the return for shareholders, a report has found

• March 26, 2024 26 Mar'24

  Apple, Meta and Alphabet under EU scrutiny

  Under the new Digital Markets Act, European commissioners are looking at potential issues with the way Apple, Alphabet and Meta operate their platforms

• March 26, 2024 26 Mar'24

  NCSC reaffirms guidance for those at risk of Chinese state hacking

  As the UK and US governments announce sanctions and indictments of a Chinese state threat actor, the NCSC has reiterated its security advice for individuals at risk of being targeted for espionage purposes

• March 26, 2024 26 Mar'24

  US authorities charge seven over Chinese hacking

  The US Department of Justice has charged seven Chinese nationals linked to the APT31 threat actor that targeted politicians in the UK and US

• March 26, 2024 26 Mar'24

  Sums of money Post Office ‘stole’ from subpostmasters may never be known

  MP asks government minister for figure on how much money the Post Office took from subpostmasters who were wrongly blamed for accounting shortfalls

• March 25, 2024 25 Mar'24

  Which? calls for government action on fake banking sites

  Amid high volumes of spoofed, fraudulent banking websites, Which? is calling for the government to implement new legal obligations for domain registrars

• March 22, 2024 22 Mar'24

  Open Data Institute launches digital policy manifesto

  The Open Data Institute has launched a policy manifesto ahead of the UK general election that outlines policies and issues it believes must be part of the political discussion around digital and data

• March 21, 2024 21 Mar'24

  US sues Apple, alleging smartphone monopoly

  A major legal action against Apple over its dominance of the smartphone market has kicked off in the US, alleging anticompetitive practices on Apple’s part that have damaged the sector and restricted consumer choice

• March 21, 2024 21 Mar'24

  NCSC guidance to help CEOs work through cyber incidents

  The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow

• March 21, 2024 21 Mar'24

  Post Office scandal fallout for Fujitsu could open UK public sector to Indian giants

  Post Office scandal has damaged public trust in Japanese IT supplier Fujitsu, which could open door to primed rivals

• March 20, 2024 20 Mar'24

  Ukrainians crack network that stole 100m email, social accounts

  Three members of an organised cyber criminal group who hacked and appropriated personal email and social media accounts face up to 15 years in prison

• March 20, 2024 20 Mar'24

  UK’s cyber resilience stagnates as more fall victim to attacks

  The government is calling on businesses to ramp up their cyber protections as study shows improvements to resilience are stagnating amid an ever-growing volume of attacks

• March 20, 2024 20 Mar'24

  Inclusive approaches to AI governance needed to engage public

  Technology practitioners and experts gathered at an annual Alan Turing Institute-run conference discussed the need for more inclusive approaches to AI governance that actually engage citizens and workers

• March 18, 2024 18 Mar'24

  Spring Budget risks funding legally questionable police tech

  Open legal questions around how UK police are using facial recognition and cloud technology could undermine the £230m investment committed in the Spring Budget to “time and money-saving technology” for police

• March 18, 2024 18 Mar'24

  The Security Interviews: Alex Yampolskiy, SecurityScorecard

  Alex Yampolskiy conceived the idea for risk management specialist SecurityScorecard after getting stung by a SaaS supplier that was being cavalier with its customer data. He tells his story to Computer Weekly

• March 18, 2024 18 Mar'24

  Deep fake AI services on Telegram pose risk for elections

  Deep fake services advertised on Telegram and other platforms pose a risk to upcoming elections in Europe, Asia and the US

• March 18, 2024 18 Mar'24

  Government needs ‘realistic plan’ for adopting AI, says NAO

  Benefits of artificial intelligence in public sector will only be realised if government ensures overall programme for adoption is supported by realistic plan to tackle range of longstanding barriers

• March 17, 2024 17 Mar'24

  UK’s AI ambitions pointless while cyber security is still neglected

  The UK’s AI ambitions may be at considerable risk without stronger cyber defences across the private and public sectors

• March 15, 2024 15 Mar'24

  Global McDonalds IT outage result of third-party error

  An IT outage that forced McDonald's to temporarily shutter thousands of restaurants has been blamed on a configuration error by a third-party supplier, but there is no suspicion of foul play

• March 15, 2024 15 Mar'24

  London Mayor’s Office reprimanded over data breach

  The London Mayor’s Office has been reprimanded by the ICO after an internal error exposed the data of people who had made complaints against the Metropolitan Police

• March 14, 2024 14 Mar'24

  MPs will attempt to amend law on overturning Post Office scandal convictions

  Business and trade select committee chair says the job is not done with legislation to overturn wrongful subpostmaster convictions and provide financial redress

• March 13, 2024 13 Mar'24

  US authorities move a step closer to banning TikTok

  Lawmakers in Washington DC have moved a step closer to enacting a broad national ban on controversial video app TikTok in the US, with global ramifications

• March 13, 2024 13 Mar'24

  British Library opens up over ransomware attack to help others

  The British Library has opted for full transparency after experiencing a devastating ransomware attack, publishing details of the intrusion, its response and the lessons it has learned

• March 13, 2024 13 Mar'24

  Unprecedented bill to exonerate hundreds of wrongly convicted Post Office workers arrives

  Unprecedented legislation that will see hundreds of former subpostmaster convictions for fraud and theft overturned begins its journey through Parliament

• March 12, 2024 12 Mar'24

  March Patch Tuesday throws up two critical Hyper-V flaws

  Two critical vulnerabilities in Windows Hyper-V stand out on an otherwise unremarkable Patch Tuesday

• March 12, 2024 12 Mar'24

  Nationwide IT infrastructure poised to absorb Virgin Money

  A Nationwide takeover of Virgin Money will be the biggest financial services acquisition since 2008, but what about the IT challenges and opportunities that go with it?

• March 12, 2024 12 Mar'24

  Industry partnerships and data key to better public services

  Using public-private partnerships and improving the use of data are key to improving public services and the government’s ‘science and technology superpower’ ambitions, says digital secretary Michelle Donelan

• March 12, 2024 12 Mar'24

  Current subpostmaster account shortfalls reveal extent of Post Office’s pre-2019 neglect

  Hundreds of current subpostmasters might have been hounded for money or prosecuted had the Post Office not been forced to change its ways in 2019

• March 11, 2024 11 Mar'24

  Government not facing up to CNI cyber risks, committee warns

  The Joint Committee on the National Security Strategy has accused the government of burying its head in the sand over the cyber threat to UK critical infrastructure

• March 11, 2024 11 Mar'24

  Dutch organisations vulnerable to deepfake fraud

  With the information many employees share on social media, Dutch companies are especially vulnerable to a new form of fraud

• March 11, 2024 11 Mar'24

  How Microsoft is easing GenAI adoption into financial services

  Microsoft is supporting enterprise deployment models, addressing the risks of the technology and leveraging its industry cloud capabilities to ease generative AI adoption in the financial sector

• March 11, 2024 11 Mar'24

  TechUK calls for next government to introduce ‘industrial strategy’ for AI

  Trade group TechUK publishes blueprint calling for winner of next election to boost tech startups, digitise government services and accelerate technology R&D

• March 08, 2024 08 Mar'24

  OSS leaders detail commitments to bolster software security

  CISA has announced a number of actions to help secure the global open source ecosystem, as leading package repositories including the Python and Rust foundations advance their own initiatives

• March 07, 2024 07 Mar'24

  Government insists it is acting ‘responsibly’ on military AI

  The government has responded to calls from a Lords committee that it must “proceed with caution” when it comes to autonomous weapons and military artificial intelligence, arguing that caution is already embedded throughout its approach

• March 07, 2024 07 Mar'24

  Indian government issues advisory to mitigate AI risks

  Tech firms will require permission from the government to use and provide under-tested or unreliable AI models and software to Indian users

• March 07, 2024 07 Mar'24

  MPs call for Post Office exclusion from compensation schemes, as trust hits rock bottom

  Former subpostmasters and MPs do not trust the Post Office to do the right thing for victims of the Horizon IT scandal

• March 06, 2024 06 Mar'24

  Apple patches zero-days amid ‘foundational’ post-quantum update

  Apple’s iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard users against future attacks

• March 06, 2024 06 Mar'24

  ‘Brutal’ decisions required to sort out Post Office mess, says select committee chair

  Liam Byrne, chair of the business and trade select committee, tells Computer Weekly about the group’s focus on getting Horizon scandal victims what they are owed

• March 06, 2024 06 Mar'24

  Post Office prosecutions during Horizon go-live phase are ‘frightening’

  The Post Office used subpostmasters as guinea pigs to test its software and take the rap for its errors

• March 05, 2024 05 Mar'24

  Rapid7 hits out over botched vulnerability disclosure

  Software development firm JetBrains and security specialist Rapid7 fall out over the handling of a critical vulnerability disclosure, while customers are left rushing to patch