News

IT governance

• December 22, 2020 22 Dec'20

  Ministry of Justice in the dock for catalogue of serious data breaches

  Annual report reveals major incidents of personal data loss affecting 121,355 people and including misplaced, unencrypted USB stick containing documents from a trial, accidental disclosure of identities, and staff files made visible to ...

• December 21, 2020 21 Dec'20

  Top 10 enterprise IT in the Nordics stories of 2020

  Here are Computer Weekly’s top 10 Nordic enterprise IT stories of 2020

• December 18, 2020 18 Dec'20

  Utility supplier People’s Energy has entire customer list stolen

  All 270,000 customers of People’s Energy, a renewable energy startup, have had their details compromised in a major data breach incident

• December 18, 2020 18 Dec'20

  SolarWinds cyber attack is ‘grave risk’ to global security

  More victims of the SolarWinds Orion Sunburst cyber attack are being identified as the massive scale of the Russia-linked cyber espionage campaign becomes more clear

• December 17, 2020 17 Dec'20

  Post Office suffers latest court defeat in Horizon IT scandal

  Court of Appeal indicates subpostmasters can pursue appeal route that could do more damage to Post Office’s reputation

• December 17, 2020 17 Dec'20

  EU security strategy a ‘step up’ on cyber leadership, says Brussels

  The EU’s new cyber security strategy forms a key component of Shaping Europe’s Digital Future, the Recovery Plan for Europe, and the EU Security Union Strategy

• December 17, 2020 17 Dec'20

  NHS Scotland taps Check Point to secure Covid-19 data

  NHS National Services Scotland is working with security firm Check Point to safeguard its sensitive data in the cloud and support its work on the coronavirus

• December 17, 2020 17 Dec'20

  UK police unlawfully processing over a million people’s data on Microsoft 365

  The roll-out of Microsoft 365 to dozens of UK police forces may be unlawful, because many have failed to conduct data protection checks before deployment and hold no information on their contracts

• December 15, 2020 15 Dec'20

  UK government unveils details of upcoming online harms rules

  Online Harms Bill due early 2021 will introduce GDPR-style fines for technology companies that breach online duty of care rules

• December 15, 2020 15 Dec'20

  SolarWinds cyber attack: How worried should I be, and what do I do now?

  Security teams across the world are on high alert as more details emerge of the widespread SolarWinds ‘Sunburst’ attack. What do defenders need to do next?

• December 15, 2020 15 Dec'20

  Air purifier manufacturer creates IoT service in the cloud

  Sweden’s Blueair introduces new functionality for customers through a cloud-based internet of things platform

• December 14, 2020 14 Dec'20

  FireEye identifies flaw in networking monitoring software as US agencies attacked

  Cyber security company says investigations have revealed security breach occurred because of a flaw in a network monitoring software

• December 14, 2020 14 Dec'20

  Digital Ethics Summit 2020: governance key to inclusive post-Covid economic recovery

  Pluralism key to developing and deploying technologies for an inclusive post-Covid economic recovery, according to a panel at Digital Ethics Summit 2020

• December 11, 2020 11 Dec'20

  The week in ransomware: Foxconn and Randstad are high-profile victims

  Foxconn and Randstad are laid low by cyber criminals, while Sophos spills on Egregor, and prognosticators turn to their crystal balls to divine how ransomware will develop in the next 12 months

• December 11, 2020 11 Dec'20

  Disputed PostgreSQL bug exploited in cryptomining botnet

  PGMiner cryptomining botnet remained unnoticed by exploiting a disputed CVE in PostgreSQL

• December 10, 2020 10 Dec'20

  French regulators fine Google and Amazon over cookie policies

  Google and Amazon rapped over their use of advertising cookies by the French data protection authorities

• December 10, 2020 10 Dec'20

  Data on Pfizer/BioNTech Covid-19 vaccine stolen in cyber attack

  The European Medicines Agency has launched a full investigation into an apparent security incident that has seen documents on the Pfizer/BioNTech Covid-19 vaccine stolen

• December 09, 2020 09 Dec'20

  Calls for Facebook break up as US issues lawsuits for anti-competitive behaviour

  Antitrust lawsuits issued by the US Federal Trade Commission and 48 attorneys general call for the breakup of Facebook following 10 years of anti-competitive behaviour

• December 09, 2020 09 Dec'20

  Amnesia:33 IoT flaws dangerous and patches unlikely, say experts

  The disclosure of multiple flaws by Forescout has raised big questions for the developers of connected products, and for their users

• December 09, 2020 09 Dec'20

  Patch Tuesday: Microsoft presents just 58 CVEs for Christmas

  The final Patch Tuesday of 2020 contains 58 fixes, a minnow compared to some recent drops, but many are still of high importance

• December 09, 2020 09 Dec'20

  FireEye’s ethical hacking tools stolen in state-backed attack

  Hacking tools used to conduct red team penetration testing were stolen in the state-backed attack on security firm FireEye

• December 08, 2020 08 Dec'20

  Home Office digital border programme has failed to deliver, says NAO

  The Home Office’s digital border programme has so far not achieved value for money, has suffered delays, lacks clear objectives and will cost taxpayers an additional £173m, according to the National Audit Office

• December 08, 2020 08 Dec'20

  CMA sets out plan to regulate technology giants

  With its new Digital Markets Unit, the CMA is hoping to curb the excesses of the internet, improve competition and give more choice to consumers

• December 08, 2020 08 Dec'20

  Multiple D-Link routers found vulnerable to attack

  Digital Defense discloses a remotely exploitable root command injection flaw in a number of D-Link wireless router devices

• December 08, 2020 08 Dec'20

  Russian state actors exploiting VMware bug to hijack data, users warned

  Russian APT groups are actively exploiting a vulnerability in VMware products to access protected data, according to latest warnings

• December 07, 2020 07 Dec'20

  Met Police failed to clear backlog of subject access requests

  Metropolitan Police failed to comply fully with an enforcement notice issued by the Information Commissioner, and despite hundreds of overdue subject access requests the regulator did not take further action

• December 07, 2020 07 Dec'20

  HMRC referred 11 data security incidents to ICO in 2019-20

  HM Revenue & Customs shares details of a number of data security incidents that occurred during the 2019-20 financial year in its annual report

• December 07, 2020 07 Dec'20

  A trillion dollars lost to cyber crime every year

  Data collated by McAfee and the Centre for Strategic and International Studies highlights the growing impact of cyber crime

• December 03, 2020 03 Dec'20

  Cyber Aware campaign to help safeguard Christmas shoppers

  New government campaign sets out to raise awareness of online shopping fraud in the run-up to Christmas

• December 03, 2020 03 Dec'20

  Lax Android app developers putting millions of users at risk

  Eight months after Google patched a critical vulnerability, developers have failed to update their apps, putting millions of users of apps such as dating services Bumble and Grindr at risk

• December 03, 2020 03 Dec'20

  ICT disaster threatens Dutch environment law

  The Dutch government’s revamp of its construction planning law faces major IT challenges and scepticism

• December 02, 2020 02 Dec'20

  CIO interview: John Davison, First Central Group

  For the last nine years, John Davison has provided an IT strategy to drive business operations. Automation is the next phase of that strategy

• December 01, 2020 01 Dec'20

  Government covers its ears as complaint by victims of Post Office abuse heads to ombudsman

  Government denies responsibility for the abuse inflicted on subpostmasters by the Post Office over faulty IT system

• November 30, 2020 30 Nov'20

  MI5 accused of withholding surveillance compliance failures from cabinet minister

  MI5 withheld high-risk concerns about its ability to comply with legislation from the home secretary when it submitted applications for surveillance warrants, NGOs Privacy International and Liberty claimed last week

• November 27, 2020 27 Nov'20

  Lords propose making tech giants pay for using news

  Digital platforms such as Google and Facebook profit from running adverts alongside publishers’ content, but no financial compensation is given for carrying that content, says Lords committee

• November 27, 2020 27 Nov'20

  UK government ramps up efforts to regulate tech giants

  The Digital Markets Unit of the Competitions and Markets Authority aims to protect consumer privacy and lower barriers to entry for businesses

• November 27, 2020 27 Nov'20

  Algorithmic transparency obligations needed in public sector

  Public sector’s use of algorithms with social impacts needs to be more transparent to foster trust and hold organisations responsible for the negative outcomes their systems may produce, says report

• November 26, 2020 26 Nov'20

  Government must hold technology companies to account on e-waste

  MPs urge UK government and global technology companies to deal with ‘tsunami of electronic waste’, which is throwing away valuable resources vital for building a sustainable future

• November 25, 2020 25 Nov'20

  Merger of national policing systems over budget and behind schedule

  UK government effort to replace legacy IT systems suffers further delays, and will not be fully completed until 2025 at the earliest

• November 25, 2020 25 Nov'20

  Securing UK’s critical national infrastructure is a 2021 priority

  Government outlines the UK’s strategic cyber security policies for the coming 12 months, with critical national infrastructure a clear priority

• November 25, 2020 25 Nov'20

  NHSX to launch data strategy for health and social care

  Government sets out plans to ‘bust bureaucracy’ in the NHS, including implementing a new data strategy, consulting on changes to data collection legislation, and making progress on shared care records

• November 24, 2020 24 Nov'20

  Post Office accused of lying and being in contempt of Parliament in IT scandal

  Campaigning politician demands access to documents that could prove that the Post Office lied

• November 24, 2020 24 Nov'20

  Nominet introduces new resources for cyber scam victims

  Domain name registrar is working with law enforcement to provide new information, guidance and resources for potential victims of online scams

• November 23, 2020 23 Nov'20

  Telcos could face huge fines under new security laws

  Government boasts of unprecedented powers to boost the security standards of the UK’s critical national infrastructure

• November 23, 2020 23 Nov'20

  Manchester United praised for swift response to cyber attack

  Manchester United’s systems were attacked last week, and the club has been praised for a swift and decisive response

• November 23, 2020 23 Nov'20

  MPs subjected to over 22 million malicious email attacks in 2020

  Members of Parliament are targeted by millions of spam and phishing emails every month, according to a Freedom of Information disclosure

• November 20, 2020 20 Nov'20

  Pricing questions persist but Openreach overall observes Ofcom independence mandates

  UK communications regulator notes real progress made in implementing its requirements, but more is needed to be done to strengthen broadband provision division independence and engagement

• November 20, 2020 20 Nov'20

  Security pros fear prosecution under outdated UK laws

  CyberUp, a group of campaigners who want to reform the Computer Misuse Act, finds 80% of security professionals are concerned that they may be prosecuted just for doing their jobs

• November 19, 2020 19 Nov'20

  Data silos and IT complexity stifle business potential

  A study from 451 Research highlights the problems organisations face in managing data

• November 19, 2020 19 Nov'20

  Security sector broadly backs Boris Johnson’s Cyber Force

  Security community says the presence of a robust cyber defence force alongside a robust physical one will be vital to the UK’s national security