News

IT governance

• February 22, 2024 22 Feb'24

  Cyber experts alarmed by ‘trivial’ ConnectWise vulns

  The disclosure of two dangerous vulnerabilities in the popular ConnectWise ScreenConnect product is drawing comparisons with major cyber incidents, including the 2021 Kaseya attack

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 20, 2024 20 Feb'24

  LockBit locked out: Cyber community reacts

  Reaction to the takedown of the LockBit ransomware gang is enthusiastic, but tempered with the knowledge that cyber criminals are often remarkably resilient

• February 20, 2024 20 Feb'24

  LockBit gang members arrested in Poland and Ukraine

  The UK’s National Crime Agency and its global partners have shared more details on their audacious takedown of the LockBit ransomware operation, including news of two arrests

• February 20, 2024 20 Feb'24

  Alibaba Cloud debuts Model Studio

  Alibaba Cloud’s Model Studio provides access to its Qwen family of foundation models and other third-party models and a suite of tools to speed up training and deployment of large language models

• February 19, 2024 19 Feb'24

  Controversial Post Office Capture system was developed in-house

  Second controversial Post Office system was the work of developers in its own IT operation

• February 15, 2024 15 Feb'24

  Security-by-design push prompts new ISC2 accreditations

  Security-by-design has become a hot-button regulatory issue. ISC2 has decided now is the time to upskill cyber pros around these vital software and hardware development principles

• February 14, 2024 14 Feb'24

  Microsoft: Nation-state hackers are exploiting ChatGPT

  Threat actors from China, Iran, North Korea and Russia have all been probing use cases for generative AI service ChatGPT, but have yet to use such tools in a full-blown cyber attack

• February 14, 2024 14 Feb'24

  Met Police to scrap and replace ‘racist’ Gangs Violence Matrix

  A database used by the Metropolitan Police to identify and track people linked with gang violence is being decommissioned and replaced. The decision follows a long-running controversy over its discriminatory impacts on young black people, but ...

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 14, 2024 14 Feb'24

  Post Office CEO refused to meet government minister without her lawyer after 2015 Horizon report

  Post Office statements on the Horizon system, whether to journalists or the government, were routinely carefully crafted by lawyers

• February 13, 2024 13 Feb'24

  How DBS is industrialising AI across its business

  Southeast Asia’s biggest lender is building a strong data foundation and upskilling employees on data and artificial intelligence to realise its vision of becoming an AI-fuelled bank

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 13, 2024 13 Feb'24

  What will result from Cohesity’s Veritas acquisition?

  The $7bn backup giant will leverage huge assets in enterprise customer base, compliance and governance intelligence, AI, R&D, and Kubernetes backup and storage

• February 09, 2024 09 Feb'24

  MoD ethical hacking programme expands after initial success

  The Ministry of Defence has expanded the scope of its defensive security partnership with HackerOne

• February 08, 2024 08 Feb'24

  Why open data is needed in the battle to address homelessness

  Centrepoint needed to send FOIs to more than 300 local authorities in England to access required information

• February 07, 2024 07 Feb'24

  NCSC warns CNI operators over ‘living-off-the-land’ attacks

  Malicious, state-backed actors may well be lurking in the UK’s most critical networks right now, and their operators may not even know until it is too late, warn the NCSC and its partners

• February 07, 2024 07 Feb'24

  The challenges of open source in government

  Public sector bodies may find their policy decisions are stymied due to the inflexibility of the software they deploy. Is open source the answer?

• February 07, 2024 07 Feb'24

  Government reaffirms commitment to hold off on AI laws

  The UK government reaffirming its commitment hold off on artificial intelligence legislation has been received positively by industry for balancing innovation and safety

• February 07, 2024 07 Feb'24

  South Staffs Water faces group action over Clop ransomware attack

  South Staffordshire Plc, the parent company of South Staffordshire and Cambridge Water, is facing legal action from customers whose data was compromised in a 2022 Clop ransomware attack

• February 06, 2024 06 Feb'24

  UK’s McPartland Cyber Review to probe trust in technology

  The UK government has launched a cyber security review that will investigate how best to give businesses the confidence they need to use new technologies

• February 06, 2024 06 Feb'24

  UK government responds to AI whitepaper consultation

  The UK government is considering introducing binding legal requirements for companies developing the most powerful AI systems, and has outlined a range of funding to realise the ambitions of its ‘pro-innovation’ framework for artificial intelligence

• February 06, 2024 06 Feb'24

  Inquiry to explore cyber risk to Sunak-Starmer showdown

  The UK’s Joint Committee on National Security Strategy is opening an inquiry into securing the democratic process ahead of the next general election

• February 06, 2024 06 Feb'24

  CIO interview: Stuart Birrell, chief data and information officer, EasyJet

  The short-haul airline fills an aircraft every 10 seconds through its e-commerce operation – all while transforming its booking systems and migrating its IT estate to the cloud

• February 05, 2024 05 Feb'24

  Blackbaud blasted for failing to prevent customer breaches

  A supply chain attack at software supplier Blackbaud in 2020 saw data on multiple UK organisations compromised. The US authorities are now taking steps to ensure it can’t happen again

• February 05, 2024 05 Feb'24

  US sanctions Iranians behind CNI cyber attacks

  US government issues new sanctions against six Iranians suspected of being behind a series of cyber attacks targeting critical national infrastructure, notably water supply systems

• February 01, 2024 01 Feb'24

  AI: House of Lords focuses on copyright and transparency

  Large language models promise to boost UK productivity, but the tech needs greater scrutiny and questions remain over intellectual property

• February 01, 2024 01 Feb'24

  Welsh workers’ AI experiences shaped by uneven power dynamics

  Workers in Wales are being negatively affected by the unregulated introduction of artificial intelligence into workplaces due to asymmetric power dynamics

• February 01, 2024 01 Feb'24

  UK ranks third in OECD Digital Government Index

  The UK has dropped from overall second to third place in the international digital government survey, but fails to feature in the top 10 countries when it comes to having a data-driven public sector

• January 30, 2024 30 Jan'24

  We need backup! Pennsylvania police data loss shows why

  Police evidence systems data was lost during ‘routine maintenance’, with human error blamed – the case clearly illustrates why data protection can’t be left to chance

• January 29, 2024 29 Jan'24

  Lords question legality of police facial recognition

  Lords committee ‘deeply concerned’ about the rapid expansion of live facial recognition by UK police, which it says is progressing without any real oversight or accountability

• January 26, 2024 26 Jan'24

  GenAI tools ‘could not exist’ if firms are made to pay copyright

  AI firm Anthropic hits out at copyright lawsuit filed by music publishers, claiming the content ingested into its models falls under ‘fair use’ and that any licensing regime would be too complex and costly

• January 26, 2024 26 Jan'24

  Akira ransomware gang claims Lush cyber attack

  The Akira ransomware gang claims to have stolen over 100GB of data from cosmetics manufacturer and retailer Lush

• January 26, 2024 26 Jan'24

  UK government consults on age verification tech in alcohol sales

  The government has said it wants to allow the use of digital identities and various age-verification technologies in alcohol sales

• January 26, 2024 26 Jan'24

  Expert IT witness outsmarted an ‘aggressive’ Post Office to get to truth after inspection ‘madness’

  The Post Office’s attempts to protect the Horizon system are well known, in light of the public inquiry and a recent TV drama, but Computer Weekly can reveal how an IT expert was treated during his investigation of Horizon

• January 25, 2024 25 Jan'24

  Bugcrowd sees surge in vulnerability submissions, led by public sector

  Crowdsourced vulnerability disclosure and bug bounty platform Bugcrowd says it saw a 151% uptick in submissions related to government and public sector organisations in 2023

• January 24, 2024 24 Jan'24

  Southern Water confirms cyber attack after Black Basta claims

  Southern Water, which supplies millions of customers in southeast England, has confirmed it has fallen victim to a cyber attack, although its services appear to be running normally

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 24, 2024 24 Jan'24

  Salesforce’s bug bounty programme paid out $3m in 2023

  Ethical hackers disclosed more than 4,000 vulnerabilities to Salesforce last year through its bug bounty programme, and received over $3m in rewards

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences

• January 23, 2024 23 Jan'24

  Leak of 26 billion records may prove to be ‘mother of all breaches’

  The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people

• January 23, 2024 23 Jan'24

  UN chief blasts AI companies for reckless pursuit of profit

  The United Nations general secretary has blasted technology companies and governments for pursuing their own narrow interests in artificial intelligence without any consideration of the common good, as part of wider call to reform global governance

• January 23, 2024 23 Jan'24

  SEC bitcoin hack was result of SIM-swapping

  A cyber attack on the US financial regulator earlier in January 2024 occurred after hackers took over one of its mobile phone accounts in a so-called SIM-swapping attack

• January 22, 2024 22 Jan'24

  SolarWinds hackers attack Microsoft in apparent recon mission

  Russian-backed threat actor behind infamous 2020 SolarWinds Sunburst intrusion hacked into Microsoft’s systems, apparently in an attempt to get hold of intel on themselves

• January 19, 2024 19 Jan'24

  ICO prompts confusion over police cloud legality

  The UK data regulator has suggested that, despite major data protection concerns, it is likely to greenlight police cloud deployments because of an information-sharing agreement with the US government

• January 19, 2024 19 Jan'24

  Fujitsu boss admits to missed opportunities to prevent miscarriages of justice

  Concerns of an expert witness in subpostmaster trials were ignored by Fujitsu

• January 19, 2024 19 Jan'24

  Neighbouring Kent councils hit by simultaneous cyber attacks

  Canterbury, Dover and Thanet Councils in Kent have all been struck by simultaneous cyber attacks knocking systems offline, with indications of a link between all three

• January 19, 2024 19 Jan'24

  Cabinet Office publishes 10-point generative AI guidance

  Cabinet Office’s framework, which will evolve as the technology moves forward, sets out 10 principles for the government's use of generative AI systems

• January 18, 2024 18 Jan'24

  PSTN switch-off threatens access to adult social care services

  The Public Switched Telephone Network switch-off is threatening vulnerable Londoners access to adult social care and other vital services, as councils are left to manage the cost without financial support from the centre, says London chief digital ...

• January 18, 2024 18 Jan'24

  Cyber non-profit enlists ex-NCSC head as technical chair

  Founding NCSC chief exec Ciaran Martin is to join the newly launched Cyber Monitoring Centre non-profit as chair of its technical committee